Rights needed to Add/Remove computers from Domain

[WC]

I need to give rights to a group of Workstation Eng so
they can remove and add computers to the domain? I cant
seem to see where this is and do not want to grant to
many rights.

Thanks in advance,

WC

[Oli Restorick [MVP]]

Hi

You need to use the delegation of control wizard to deletegate the right to
add and (and, if you want them to be able to move existing objects, delete)
computer objects from the appropriate container(s).

You will need to create a custom task to do this, as there isn't a
predefined one for this task.

Hope this helps

Oli


"WC" <anonymous@discussions.microsoft.com> wrote in message
news:24c4b01c45faa$f4d69880$a501280a@phx.gbl...

>I need to give rights to a group of Workstation Eng so
> they can remove and add computers to the domain? I cant
> seem to see where this is and do not want to grant to
> many rights.
>
> Thanks in advance,
>
> WC

[Miha Pihler]

Hi,

create a new security group and add users that need to add and remove PCs
from domain. Open Active Directory users and Computers and on View select
Advanced Features.

Then right click on Computers container and go to Security tab. Click on
Advanced and click Add. Select your newly created group and give it
permission "Create Computer Object" = Allow and "Delete Computer Object" =
Allow. These are only two permissions that are needed for the task you
described and users in your group won't have any other permission.

Note; by default ANY user that has a valid user account in domain can add 10
PCs to domain.

I hope this helps you out,

Mike

"WC" <anonymous@discussions.microsoft.com> wrote in message
news:24c4b01c45faa$f4d69880$a501280a@phx.gbl...

>I need to give rights to a group of Workstation Eng so
> they can remove and add computers to the domain? I cant
> seem to see where this is and do not want to grant to
> many rights.
>
> Thanks in advance,
>
> WC