keyongtech


  keyongtech > windows.server.* > windows.server.active_directory > 10/2008

 #1  
10-07-08, 12:05 PM
Kent
Hello,
How can i join a computer to a Win2K3 domain wihout having the domain admins
right? I've tried http://support.microsoft.com/kb/251335 but no success.

Anyone can advice?

Thank you.
 #2  
10-07-08, 12:26 PM
Meinolf Weber
Hello Kent,

See here:
http://support.microsoft.com/kb/932455

http://support.microsoft.com/kb/243327/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
[..]
 #3  
10-07-08, 12:28 PM
Mark Parris [ADUG]
This is the way I have done it since 2000 and is one way and is an
example.....

To add computers to the domain and in the Computers container (if you would
like other to add computer OU's repeat the delegation process)

Run dsa.msc (Active Directory Users and Computers)
Create an Account called joindomain (or what ever account you wish to use)
Right Click the computers container
Select Delegate Control
Add the JoinDomain Account
Select Next
Select Create a Custom Task to Delegate.
Select Next
Select This Folder, existing objects..........
Select Creation/Deletion of specific child objects
Tick Create Computer Objects
Tick Delete Computer Objects
Select Next
Select Finish

Right Click the computers container
Select Delegate Control
Add the JoinDomain Account (or what ever account you wish to use)
Select Only the following objects in the folder
Tick Computer Ojects
Select Next
Tick Full Control
Select Next
Select Finish
 #4  
10-07-08, 01:51 PM
Jorge Silva
Hi
Additionally check Jorge's blog:
http://blogs.dirteam.com/blogs/jorge...01/05/369.aspx
 #5  
10-08-08, 10:38 PM
Jorge de Almeida Pinto [MVP - DS]
Similar Threads
Minimum security settings of computer accounts for allowing domain user account to join domain

Hi ALL, I'd like to configure the security settings for the computer accounts that only allow domain user to join domain (nothing else, including changing computer account...

Adding the DOMAIN1\Domain Admins group to DOMAIN2\Domain Admins group

Hi, Where DOMAIN1 is an NT domain, and DOMAIN2 is a 2003 domain; I'd like to add the group DOMAIN1\Domain Admins to the DOMAIN2\Domain Admins group. Can this be done...

Computer in Domain Admins

What are the security consequences of putting a comptuer object into the domain admins group in a domain? Can ordinary users login and take control of the system and/or...

Restrict Who can a computer to the domain join Domain

How can I remove the right that users have to join our domain. I run a 2000 Domain in a school and at the moment everyone and his dog can join the domain as the default is 10...

You must be a member of the Domain Admins, Schema Admins, and Enterprise Admins groups

I thought I had this resolved but the problem has returned! I can't make changes to the setup of SBS 2003. I get the message "You must be a member of the Domain Admins,...


All times are GMT. The time now is 01:31 AM. | Privacy Policy