Prevent users from adding computer to domain in Server 2003

How do prevent a normal user from adding a computer to the domain in Windows
server 2003? I don't want any users adding computers to the domain. I just
want the domain admins to do that.

Thanks,

Jasper

Well, in Jon Howard's blog you'll find :
"The Active Directory attribute you need to change is mS-DS-
MachineAccountQuota which is a property of the domain object. Here's
the steps to change it:

- Start ADSI Edit (start/run/adsiedit.msc)
- Expand out the Domain node, right click on DC=<yourdomain>,DC=com
and select properties
- Scan down to ms-DS-MachineAccountQuota
- Modify the value as appropriate, or clear the value to remove the
limit entirely."

yaro

Hello Jasper,

In the default domain controllers policy or equivalent remove the "Authenticated
users" from:

computer configuration, windows settings, security settings,local policies,user
rights assignment "Add workstations to the domain"

There add only the allowed admins.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> How do prevent a normal user from adding a computer to the domain in
> Windows server 2003? I don't want any users adding computers to the
> domain. I just want the domain admins to do that.
>
> Thanks,
>
> Jasper
>

THANKS!!
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66148488cb447614a5eb3c@msnews.microsoft.com...
> Hello Jasper,
>
> In the default domain controllers policy or equivalent remove the
> "Authenticated users" from:
>
> computer configuration, windows settings, security settings,local
> policies,user rights assignment "Add workstations to the domain"
>
> There add only the allowed admins.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> How do prevent a normal user from adding a computer to the domain in
>> Windows server 2003? I don't want any users adding computers to the
>> domain. I just want the domain admins to do that.
>>
>> Thanks,
>>
>> Jasper
>>
>
>

see:
http://blogs.dirteam.com/blogs/jorge...01/05/369.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"Jasper Recto" <jrecto99@yahoo.com> wrote in message
news:ORKBOGldJHA.3948@TK2MSFTNGP04.phx.gbl...
> How do prevent a normal user from adding a computer to the domain in
> Windows server 2003? I don't want any users adding computers to the
> domain. I just want the domain admins to do that.
>
> Thanks,
>
> Jasper
>

Hi
Check
http://support.microsoft.com/kb/251335

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Jasper Recto" <jrecto99@yahoo.com> wrote in message
news:ORKBOGldJHA.3948@TK2MSFTNGP04.phx.gbl...
> How do prevent a normal user from adding a computer to the domain in
> Windows server 2003? I don't want any users adding computers to the
> domain. I just want the domain admins to do that.
>
> Thanks,
>
> Jasper
>