Announcement

Collapse
No announcement yet.

Delegation of Joining PC to domain

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Delegation of Joining PC to domain

    What is the difference between giving full rights to computer objects and only giving create and delete rights on computer?
    Check the attachement.
    Attached Files

  • #2
    Re: Delegation of Joining PC to domain

    the difference is that on the 1st one, the user has a full control only on an existing computer object, while on the second one the user has the option of creating in the OU (since it is permissions on the OU) to create and delete a new Computer Object.

    Comment


    • #3
      Re: Delegation of Joining PC to domain

      so if the user does not have create computer / delete rights and have full rights to computer objects , they will not be able to join new computers to domain, correct?

      Comment


      • #4
        Re: Delegation of Joining PC to domain

        no, they would not have permissions to create/move/delete a computer account on that OU.
        joining a computer to the domain by default every user can join up to 10 machines to the domain to an existing
        computer object.
        by enabling the permissions on the OU to create a computer object you allow the user to join computers to the domain behind 10 times
        (unlimited) as long as the computer object is in the OU.
        basically this permissions have 2 roles.
        1) create/delete a computer object from/to that OU.
        2) override the 10 computers joining limit by default if the computer object was moved to that OU b4 he tries to join
        it to the domain from the Workstation.
        Last edited by Akila; 2nd October 2008, 11:52.

        Comment


        • #5
          Re: Delegation of Joining PC to domain

          you can rejoin 10 machine to domain with that user, but can you join 15 new machine to domain, if not, then please how?

          in here my ? is how to unlimit the number of machines that can be join to domain

          Comment


          • #6
            Re: Delegation of Joining PC to domain

            By giving full rights to computer object.

            Comment

            Working...
            X