Delegate domain user permission to join domain

Discussion in 'Active Directory' started by Misoft, Apr 23, 2005.

  1. Misoft

    Misoft Guest

    I have a person who i must delegate him to join domain permission .I do :
    Right click abc.com , delegate control ...,next ,add user
    ,next ,checked "Join a computer to the domain" ,next ,finnish .But Peter
    cannot join another computer to domain .
    Pls ,tell me WHY ?
    How can I delegate him join another computer to domain ???
    Thank so much for reading !!!
     
    Misoft, Apr 23, 2005
    #1
    1. Advertisements

  2. neo [mvp outlook], Apr 23, 2005
    #2
    1. Advertisements

  3. Misoft

    Misoft Guest

    Misoft, Apr 23, 2005
    #3
  4. Lets go thru the steps.

    1) Delegated the right to create a computer account in a specific OU

    2) User creates the computer account in the OU *AND* specifies which
    account/group may join the computer to the domain. (Watch this one as it
    defaults to Domain Admins and tends to be what generates the Access Denied
    later.)

    3) User goes to machine in question and joins it to the domain within 15
    minutes
     
    neo [mvp outlook], Apr 23, 2005
    #4
  5. Misoft

    ptwilliams Guest

    Wouldn't it be easier to just delegate the permissions on the computers
    container?

    And then, grant delete as well and write in another OU so that a move can be
    performed?

    Maybe not, I would assume that pre-creating computer accounts would be a
    real chore ;-)
     
    ptwilliams, Apr 24, 2005
    #5
  6. maybe for some... maybe not for others. really depends on how the site
    operates.
     
    neo [mvp outlook], Apr 25, 2005
    #6
  7. Misoft

    ptwilliams Guest

    I guess.

    I just wouldn't give the people who join the machines to the domain any
    access to AD --they'd just be able to add machines. Somebody else could
    move those computers ;-)
     
    ptwilliams, Apr 25, 2005
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.