Permissions to add computer to a domain

Hi,

What do I need to do to give an individual user, permissions to add or
remove computers from the domain as many time as they want? I have this user
that has used up their quota of adding and removing machines, i dont want to
add them to the domain admins group - there must be a way of creating a new
group and assigning 'add computer to domain' setting or something?

Thanks for any help,
Grant

Grant,

This is a GPO setting. Create a GPO and navigate to: Computer Configuration
> Windows Settings > Security Settings > Local Policies > User Rights
Management and add the group that the user is in to the "Add workstations to
the domain" list. Enable the policy and you should be good to go

-Allen Firouz

"Grant" wrote:

> Hi,
>
> What do I need to do to give an individual user, permissions to add or
> remove computers from the domain as many time as they want? I have this user
> that has used up their quota of adding and removing machines, i dont want to
> add them to the domain admins group - there must be a way of creating a new
> group and assigning 'add computer to domain' setting or something?
>
> Thanks for any help,
> Grant
>
>
>

You can delegate that user the right to add workstations to the domain at
the domain level or for a specific OU. The user will need the permission for
"create" computer objects. I believe that the delegation wizard for the
domain container will directly allow you to do that and for OU's you may
have to manually tweak the permissions for the OU. --- Steve



"Grant" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi,
>
> What do I need to do to give an individual user, permissions to add or
> remove computers from the domain as many time as they want? I have this
> user that has used up their quota of adding and removing machines, i dont
> want to add them to the domain admins group - there must be a way of
> creating a new group and assigning 'add computer to domain' setting or
> something?
>
> Thanks for any help,
> Grant
>

Ill give that a go - thanks for replying.


"Allen Firouz" <(E-Mail Removed)> wrote in message
newsB83BC61-F563-471F-8AF6-(E-Mail Removed)...
> Grant,
>
> This is a GPO setting. Create a GPO and navigate to: Computer
> Configuration
>> Windows Settings > Security Settings > Local Policies > User Rights
> Management and add the group that the user is in to the "Add workstations
> to
> the domain" list. Enable the policy and you should be good to go
>
> -Allen Firouz
>
> "Grant" wrote:
>
>> Hi,
>>
>> What do I need to do to give an individual user, permissions to add or
>> remove computers from the domain as many time as they want? I have this
>> user
>> that has used up their quota of adding and removing machines, i dont want
>> to
>> add them to the domain admins group - there must be a way of creating a
>> new
>> group and assigning 'add computer to domain' setting or something?
>>
>> Thanks for any help,
>> Grant
>>
>>
>>