Announcement

Collapse
No announcement yet.

Joining PC to Domain & sysprep

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Joining PC to Domain & sysprep

    Hi All,

    We use syspep to join imaged pc's to the domain. Now; when a machine is created the user that is specified in the sysprep file has full control over the computer object that is created in the domain.

    Is there anyway this can be restricted?

    I basically want to stop this user from updating existing computer objects that are in the domain.

    Thanks

  • #2
    Re: Joining PC to Domain & sysprep

    Take a look at my blog post on simmilar issue:
    http://blogs.microsoft.co.il/blogs/g...ers-in-AD.aspx

    You might want to check the possibility of removing CREATOR/OWNER from the defaultSecurityDescriptor of computer object class.
    Guy Teverovsky
    "Smith & Wesson - the original point and click interface"

    Comment

    Working...
    X