Archived from groups: microsoft.public.win2000.general (
More info?)
The permission to "create computers object" I object it has it, only it me
adds workstation to domain if change the name of the workstation, but he says
denied access to me
"Mervyn King" wrote:
> This policy is valid only on domain controllers. By default, any
> authenticated user has this right and can create up to ten computer accounts
> in the domain.
>
> Users that have the "Create Computer Objects" permission on the Active
> Directory Computers container can also create computer accounts in the
> domain. The distinction is that users with permissions on the container are
> not restricted to the creation of only ten computer accounts. Furthermore,
> computer accounts created by means of the Add workstations to domain user
> right have Domain Administrators as the owner of the computer account, while
> computer accounts created by means of permissions on the computers container
> have the creator as the owner of the computer account. If a user has
> permissions on the container and also has the add workstation to domain user
> right, then the computer is added based on the computer container permissions
> rather than the user right.
> --
> Mervyn King (MCSA, MCSE, MCDBA)
>
>
> "david" wrote:
>
> > Good morning, it access denied when a person of support wants add
> > workstation to the domain, I have put him by means of GPO that could add
> > workstation to the domain also by means of delegation but he continues saying
> > to me the same.
> > thing that permission needs
> > Thanks
Facebook
Twitter
Instagram