Archived from groups: microsoft.public.win2000.active_directory (
More info?)
Have found solution as outlined in JSIFAQ article 5978.
"Troy" <Troy@nospam.com> wrote in message
news:C7Dfe.150$h13.2083@nnrp1.ozemail.com.au...
>I am wondering if I can specify the ability for a user with basic
>privileges (domain users) to be allowed to add a new workstation to our
>domain.
>
> We don't want to give this user domain admin rights yet he needs to
> complete the workstation build process by adding the computer to the
> domain. I have tried implementing the 'Add Workstation to Domain' GP
> specifying 'Domain Admins' group and the individual's account on the AD
> sub-OU "Site 2" (where his new computer accounts will be added into)
> however on testing it isn't working.
>
> Does the GP also need to be added to the parent AD OU "Workstations".
> Does the users account need to be in an OU in where the GP can be applied
> at user level?
>
> Many thanks in advance!
>