prevent creating computer objects in default container

Discussion in 'Active Directory' started by Sasi, Jun 24, 2006.

  1. Sasi

    Sasi Guest

    How can I prevent Somebody from creating Computer objects throughout the
    Active Directory?
    no matter what permissions I set,a user named userA (belonging to "domain
    users" group only) always is able to join computers to domain using his/her
    username/pass ; and a computer object is created in "Computers" container.
    I even set "everyone"s "full controll" permission to "deny" on computer
    container;but still he/she can attach his/her computer to domain with any
    computer name,causing a computer account to be created in Computer container.
    what can I do to block creation of objects in default containers in Windows
    2000? specially "Computers" container?
     
    Sasi, Jun 24, 2006
    #1
    1. Advertisements

  2. Joe Richards [MVP], Jun 24, 2006
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.