Results 1 to 6 of 6

Thread: Prevent users from adding computer to domain in Server 2003

  1. #1
    Jasper Recto Guest

    Prevent users from adding computer to domain in Server 2003

    How do prevent a normal user from adding a computer to the domain in Windows
    server 2003? I don't want any users adding computers to the domain. I just
    want the domain admins to do that.

    Thanks,

    Jasper



  2. #2
    yaro137@googlemail.com Guest

    Re: Prevent users from adding computer to domain in Server 2003

    Well, in Jon Howard's blog you'll find :
    "The Active Directory attribute you need to change is mS-DS-
    MachineAccountQuota which is a property of the domain object. Here's
    the steps to change it:

    - Start ADSI Edit (start/run/adsiedit.msc)
    - Expand out the Domain node, right click on DC=<yourdomain>,DC=com
    and select properties
    - Scan down to ms-DS-MachineAccountQuota
    - Modify the value as appropriate, or clear the value to remove the
    limit entirely."

    yaro

  3. #3
    Meinolf Weber [MVP-DS] Guest

    Re: Prevent users from adding computer to domain in Server 2003

    Hello Jasper,

    In the default domain controllers policy or equivalent remove the "Authenticated
    users" from:

    computer configuration, windows settings, security settings,local policies,user
    rights assignment "Add workstations to the domain"

    There add only the allowed admins.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    > How do prevent a normal user from adding a computer to the domain in
    > Windows server 2003? I don't want any users adding computers to the
    > domain. I just want the domain admins to do that.
    >
    > Thanks,
    >
    > Jasper
    >




  4. #4
    Jasper Recto Guest

    Re: Prevent users from adding computer to domain in Server 2003

    THANKS!!
    "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    news:ff16fb66148488cb447614a5eb3c@msnews.microsoft.com...
    > Hello Jasper,
    >
    > In the default domain controllers policy or equivalent remove the
    > "Authenticated users" from:
    >
    > computer configuration, windows settings, security settings,local
    > policies,user rights assignment "Add workstations to the domain"
    >
    > There add only the allowed admins.
    >
    > Best regards
    >
    > Meinolf Weber
    > Disclaimer: This posting is provided "AS IS" with no warranties, and
    > confers no rights.
    > ** Please do NOT email, only reply to Newsgroups
    > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
    >
    >> How do prevent a normal user from adding a computer to the domain in
    >> Windows server 2003? I don't want any users adding computers to the
    >> domain. I just want the domain admins to do that.
    >>
    >> Thanks,
    >>
    >> Jasper
    >>

    >
    >




  5. #5
    Jorge de Almeida Pinto [MVP - DS] Guest

    Re: Prevent users from adding computer to domain in Server 2003

    see:
    http://blogs.dirteam.com/blogs/jorge...01/05/369.aspx

    --

    Cheers,
    (HOPEFULLY THIS INFORMATION HELPS YOU!)

    # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

    BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    ------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always test ANY suggestion in a test environment before implementing!
    ------------------------------------------------------------------------------------------
    #################################################
    #################################################
    ------------------------------------------------------------------------------------------

    "Jasper Recto" <jrecto99@yahoo.com> wrote in message
    news:ORKBOGldJHA.3948@TK2MSFTNGP04.phx.gbl...
    > How do prevent a normal user from adding a computer to the domain in
    > Windows server 2003? I don't want any users adding computers to the
    > domain. I just want the domain admins to do that.
    >
    > Thanks,
    >
    > Jasper
    >


  6. #6
    Jorge Silva Guest

    Re: Prevent users from adding computer to domain in Server 2003

    Hi
    Check
    http://support.microsoft.com/kb/251335

    --
    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services

    Please no e-mails, any questions should be posted in the NewsGroup
    This posting is provided "AS IS" with no warranties, and confers no rights.
    "Jasper Recto" <jrecto99@yahoo.com> wrote in message
    news:ORKBOGldJHA.3948@TK2MSFTNGP04.phx.gbl...
    > How do prevent a normal user from adding a computer to the domain in
    > Windows server 2003? I don't want any users adding computers to the
    > domain. I just want the domain admins to do that.
    >
    > Thanks,
    >
    > Jasper
    >



Similar Threads

  1. Adding Users to Local Security Group from other Domain
    By duke2555 in forum Active Directory
    Replies: 2
    Last Post: 30-08-2011, 12:06 AM
  2. adding domain users automatically to the local admin group
    By The Shadow in forum Active Directory
    Replies: 3
    Last Post: 07-06-2011, 10:27 PM
  3. Replies: 3
    Last Post: 09-07-2009, 05:27 PM
  4. Replies: 2
    Last Post: 10-11-2008, 07:08 PM
  5. adding a windows 2003 domain controller
    By Vera Noest in forum Active Directory
    Replies: 2
    Last Post: 19-06-2008, 01:07 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,639,041,799.86314 seconds with 17 queries