?
Solved

Domain Service account for Network Printer, Copier, add computer to the domain, and add/remove programs for network computers.

Posted on 2012-09-18
5
Medium Priority
?
1,173 Views
Last Modified: 2012-10-01
I would like a Domain Service account to have the following rights to access Network Printer, Copier, add computer to the domain, and add/remove programs for network computers.
0
Comment
Question by:tomfontanilla
  • 3
  • 2
5 Comments
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 1000 total points
ID: 38409590
For add computers to the domain, you need to consider using AD Right Delegation. For the rest, you need to grant this user local administrator privileges on selected or all computers. This can be achieved by using GPO Restricted Groups or Group Policy Preferences

More about AD rights delegation, please visit my blog and check these articles
http://kpytko.wordpress.com/2012/05/16/active-directory-rights-delegation-overview/
http://kpytko.wordpress.com/2012/05/17/active-directory-rights-delegation-part-1/
http://kpytko.wordpress.com/2012/05/26/active-directory-rights-delegation-part-2/

for GPO Restricted Groups see
http://support.microsoft.com/kb/279301

for GPP check
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/

Regards,
Krzysztof
0
 

Author Comment

by:tomfontanilla
ID: 38409752
Thank you for your response. However, I still cant access network printer.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 38416559
OK, please try to put that account into "Printer Operators" built-in group or use Delegation wizard and allow "Printer objects" for the user

Krzysztof
0
 

Accepted Solution

by:
tomfontanilla earned 0 total points
ID: 38437258
I solve the issues by simply adding the the user on the network folder security, as full control user.
0
 

Author Closing Comment

by:tomfontanilla
ID: 38450098
Team efforts
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question