Announcement

Collapse
No announcement yet.

WDS authorization

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • WDS authorization

    When I pxe boot a client computer I normally type the domain administrators credentials to start the deployment, but I have discovered that domain users also Can start the deployment.

    Is there a way to only allow the domain administrator to start a wds deployment from pxe boot?

  • #2
    Re: WDS authorization

    By default, regular user accounts are allowed to create 10 machine accounts. This is controlled by the value of the ms-DS-MachineAccountQuota attribute on the domain object. You can edit this value with ADSIEdit.

    Comment


    • #3
      Thanks, will test it.

      Comment


      • #4
        It's not the AD permissions, by default the permissions on the Image share allow Authenticated Users access. Changing the AD attribute will prevent users joining PCs to the domain, not from PXE booting.
        BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
        sigpic
        Cruachan's Blog

        Comment


        • #5
          Ah okay, then I will not test it.

          Comment


          • #6
            Thanks cruachan, I have change the permissions and now only the Administrator can boot from a boot image on the WDS server.

            Comment


            • #7
              np, thanks for posting back
              BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
              sigpic
              Cruachan's Blog

              Comment

              Working...
              X