Reply To: Domain Credentials

JeremyW
JeremyW
Moderator
#614423

You can add the domain user or group to the computer’s local Administrators group. (domain computer, domain joined computer, and computer on the domain are all common ways of referring to the same thing)

You can use group policy and restricted groups to control the membership too if you like to apply it to many computers and not just one at a time like the above method. https://support.microsoft.com/en-us/help/279301/description-of-group-policy-restricted-groups

You may want to use LAPS to control the local administrator account: https://technet.microsoft.com/en-us/mt227395.aspx?f=255&MSPPError=-2147217396

Also note that by default all users can join up to 10 computers to the domain. Here’s info on how to configure that: https://social.technet.microsoft.com/wiki/contents/articles/5446.active-directory-how-to-prevent-authenticated-users-from-joining-workstations-to-a-domain.aspx