Jump to content

New users add their computer to domain..


Recommended Posts

Posted

Hi,

 

We want to allow a group of users to add their own computers to the

domain (w2003 DC) using their own login credentials.

 

How can we do this w/o giving them administrator priviledges?

 

regards jake

  • Replies 4
  • Created
  • Last Reply

Popular Days

Guest Glenn Clark
Posted

Re: New users add their computer to domain..

 

To be honest most users can add there machines to the domain anyway. If I

remember correctly this can be done about 10 time

 

Glenn

 

"Jake" <jake44@gmail.com> wrote in message

news:OuGA6g06HHA.5360@TK2MSFTNGP03.phx.gbl...

> Hi,

>

> We want to allow a group of users to add their own computers to the domain

> (w2003 DC) using their own login credentials.

>

> How can we do this w/o giving them administrator priviledges?

>

> regards jake

Guest Coraleigh Miller
Posted

Re: New users add their computer to domain..

 

I think they just need to be local admins of their pcs.

 

Coraleigh Miller

 

 

"Glenn Clark" <glenn.clark@NOSPAM.btinternet.com> wrote in message

news:eQItrj06HHA.3716@TK2MSFTNGP03.phx.gbl...

> To be honest most users can add there machines to the domain anyway. If I

> remember correctly this can be done about 10 time

>

> Glenn

>

> "Jake" <jake44@gmail.com> wrote in message

> news:OuGA6g06HHA.5360@TK2MSFTNGP03.phx.gbl...

>> Hi,

>>

>> We want to allow a group of users to add their own computers to the

>> domain (w2003 DC) using their own login credentials.

>>

>> How can we do this w/o giving them administrator priviledges?

>>

>> regards jake

>

>

Guest Mathieu CHATEAU
Posted

Re: New users add their computer to domain..

 

hello,

 

you can delegate them the right to "add a computer to the domain"

dsa.msc

right click on your domain, delegate control

follow the wizard

but they will be able to add 10 times a computer to the domain before

loosing the delegation

 

You can change this value:

- Start ADSI Edit (start/run/adsiedit.msc)

- Expand out the Domain node, right click on DC=<yourdomain>,DC=com and

select properties

- Scan down to ms-DS-MachineAccountQuota

- Modify the value as appropriate, or clear the value to remove the limit

entirely.

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"Jake" <jake44@gmail.com> wrote in message

news:OuGA6g06HHA.5360@TK2MSFTNGP03.phx.gbl...

> Hi,

>

> We want to allow a group of users to add their own computers to the domain

> (w2003 DC) using their own login credentials.

>

> How can we do this w/o giving them administrator priviledges?

>

> regards jake

Guest Mathieu CHATEAU
Posted

Re: New users add their computer to domain..

 

that's the minimum, but they also need to have a delagation on the ad

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

news:ez6uNn06HHA.5740@TK2MSFTNGP04.phx.gbl...

>I think they just need to be local admins of their pcs.

>

> Coraleigh Miller

>

>

> "Glenn Clark" <glenn.clark@NOSPAM.btinternet.com> wrote in message

> news:eQItrj06HHA.3716@TK2MSFTNGP03.phx.gbl...

>> To be honest most users can add there machines to the domain anyway. If I

>> remember correctly this can be done about 10 time

>>

>> Glenn

>>

>> "Jake" <jake44@gmail.com> wrote in message

>> news:OuGA6g06HHA.5360@TK2MSFTNGP03.phx.gbl...

>>> Hi,

>>>

>>> We want to allow a group of users to add their own computers to the

>>> domain (w2003 DC) using their own login credentials.

>>>

>>> How can we do this w/o giving them administrator priviledges?

>>>

>>> regards jake

>>

>>

>

>


×
×
  • Create New...