What rights to allow a user to add computer to domain (from workgroup)?

[Agilent]

Can anyone tell me what type of rights are needed by a user so that they can take a workgroup machine and add it to a domain? Also, it would be interesting to know where exactly I need to add those rights? Thanks.

[Zachary]

There are 2 locations that you can do it in:

First of all you can use Group Policy
See:
http://technet2.microsoft.com/window....mspx?mfr=true

The second that you can use is the delegation of control wizard. Simply right click your Computers container, and then choose "Delegate Control" and a wizard will pop up to delegate the right to create computer objects

[Janos™]

You can try to "Default limit to number of workstations a user can join to the domain", just check the article in this link - http://support.microsoft.com/kb/243327/en-us