Delegate permission let one user to join pc to a domain
To grand permission I have used the delegation wizard to one of the pc support staff with us to join PC to a domain, however, we are only able to join a new installed OS PC into domain, it he wants to rejoin it, then the Windows prompts out Access is denied. Can anyone tell me how to solve this problem? Thanks.
Re: Delegate permission let one user to join pc to a domain
Well, you should know that each computer account is unique, so to rejoin the domain they need to be able to change the existing account of the same name. There is a simple way to do that by giving them the full control of the Computers OU.
Re: Delegate permission let one user to join pc to a domain
To add further, for delegation user rights you need to use FC for Computer Object on OU where are computer account placed, for OU Computers or customized OU. For rejoining you will probably need to remove Computer account from domain or reset computer account.