Click here to get back home

Permissions for joining XP computers to domain
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Permissions for joining XP computers to domain Gaspar 07-25-2006
Posted by Gaspar on July 25, 2006, 9:35 am
Please log in for more thread options
 Which are the minimum permissions to join an XP computer to a domain?
I want to give help desk people the permissions necessary to do this BUT
without having Administrator permissions.

Thanks,
Gaspar



Posted by Miha Pihler [MVP] on July 25, 2006, 9:57 am
Please log in for more thread options
 Hi Gaspar,

Create new group called e.g. "Add Workstation to Domain" and all the
accounts from your helpdesk to this group. Now edit "Default Domain
Controller" group policy under "Computer Configuration\Windows
Settings\Security Settings\Local Policies\User Rights Assignment\". Here
look for policy named "Add workstations to domain" and double click on it.

Now add the group that you created (e.g. named "Add Workstation to Domain")
to this policy.

Wait for the replication to finish between the DCs and your help desk
personnel is now able to add workstations to domain.

Here is some more information on the policy.

Add workstations to domain
http://technet2.microsoft.com/WindowsServer/en/library/7207aa3e-d95d-4176-a1ca-bc629f1ca6981033.mspx?mfr=true

I hope this helps you out.

--
Mike
Microsoft MVP - Windows Security

> Which are the minimum permissions to join an XP computer to a domain?
> I want to give help desk people the permissions necessary to do this BUT
> without having Administrator permissions.
>
> Thanks,
> Gaspar
>



Posted by Steven L Umbach on July 25, 2006, 1:47 pm
Please log in for more thread options
They would need create computer objects permission for the domain or
container where the computer accounts are being created. You can manage such
permissions in the advanced page of security settings for the container
where you can add a group or start the Delegation Wizard for the container
which is a choice when you right click after highlighting the container.

Steve



> Which are the minimum permissions to join an XP computer to a domain?
> I want to give help desk people the permissions necessary to do this BUT
> without having Administrator permissions.
>
> Thanks,
> Gaspar
>



Similar ThreadsPosted
Right to add computers to a domain May 15, 2006, 5:08 am
Any way to see which computers a domain account is logged into? April 3, 2006, 11:44 am
How to restrict file access to Domain Computers Only August 27, 2006, 9:55 am
Prevent access to server for computers not part of domain January 22, 2007, 11:56 pm
permissions across domain without trust? August 7, 2006, 4:04 pm
Share permissions - cross-domain May 1, 2006, 11:47 am
Does domain controller's administrator gain too much permissions April 4, 2006, 5:11 am
my computers address January 15, 2006, 2:35 pm
How to configure Domain access permissions for a user that would vary based on the computer they log into? June 21, 2006, 11:58 am
Computers Losing Connection ??? January 11, 2007, 10:47 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap