Domain Service account for Network Printer, Copier, add computer to the domain, and add/remove programs for network computers.

I would like a Domain Service account to have the following rights to access Network Printer, Copier, add computer to the domain, and add/remove programs for network computers.
tomfontanillaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Krzysztof PytkoSenior Active Directory EngineerCommented:
For add computers to the domain, you need to consider using AD Right Delegation. For the rest, you need to grant this user local administrator privileges on selected or all computers. This can be achieved by using GPO Restricted Groups or Group Policy Preferences

More about AD rights delegation, please visit my blog and check these articles
http://kpytko.wordpress.com/2012/05/16/active-directory-rights-delegation-overview/
http://kpytko.wordpress.com/2012/05/17/active-directory-rights-delegation-part-1/
http://kpytko.wordpress.com/2012/05/26/active-directory-rights-delegation-part-2/

for GPO Restricted Groups see
http://support.microsoft.com/kb/279301

for GPP check
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/

Regards,
Krzysztof
0
tomfontanillaAuthor Commented:
Thank you for your response. However, I still cant access network printer.
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
OK, please try to put that account into "Printer Operators" built-in group or use Delegation wizard and allow "Printer objects" for the user

Krzysztof
0
tomfontanillaAuthor Commented:
I solve the issues by simply adding the the user on the network folder security, as full control user.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tomfontanillaAuthor Commented:
Team efforts
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.