WDS authorization

This topic contains 6 replies, has 4 voices, and was last updated by  universal 2 years, 8 months ago.

Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts

  • hilsoe
    Member
    #163356

    When I pxe boot a client computer I normally type the domain administrators credentials to start the deployment, but I have discovered that domain users also Can start the deployment.

    Is there a way to only allow the domain administrator to start a wds deployment from pxe boot?


    universal
    Member
    #388603

    Re: WDS authorization

    By default, regular user accounts are allowed to create 10 machine accounts. This is controlled by the value of the ms-DS-MachineAccountQuota attribute on the domain object. You can edit this value with ADSIEdit.


    Anonymous
    #376681

    Thanks, will test it.


    cruachan
    Member
    #330848

    It’s not the AD permissions, by default the permissions on the Image share allow Authenticated Users access. Changing the AD attribute will prevent users joining PCs to the domain, not from PXE booting.


    Anonymous
    #376682

    Ah okay, then I will not test it.


    Anonymous
    #376683

    Thanks cruachan, I have change the permissions and now only the Administrator can boot from a boot image on the WDS server.


    cruachan
    Member
    #330849

    np, thanks for posting back

Viewing 7 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic.