Join domain by using only Admin account

Htc / Htc 7mozart t8698
July 18, 2013 at 21:31:00
Specs: window 7, 2.4/4
Hi! guys! I want to ask you that if I have computer XP as client and when it joins domain with other pc that run windows server 2008. I want only user account Admin(username + password) that use to join domain, but other user account that I create in OU cannot use when thhey want to join. It mean that other people that want to join domain, they must enter user name and password of Admin in windows server. How can I do that? please explain me step by step! and anyone know website that give tutorial start from beginner to advanced in windows server 2008 ?
and another thing if anyone kind shared the link as e-book (windows server 2008 english language)in this forum!!!!!

See More: Join domain by using only Admin account

Report •


#1
July 18, 2013 at 23:53:24
I thought that the domain admin account was already the only way to join a PC to a domain. Did I miss something?

How do you know when a politician is lying? His mouth is moving.


Report •

#2
July 19, 2013 at 00:18:20
Any domain user can join 10 workstations to the domain by default. To restrict this you need to set the appropriate "Add workstations to domain" group policy. It is obviously a good idea to change this so that normal users cannot add any workstations to the domain.

http://technet.microsoft.com/en-us/...


Report •

#3
July 19, 2013 at 14:54:48
I believe this was changed with the advent of 2003. Under NT and 2000 only an admin could add a pc.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

Related Solutions

#4
August 7, 2013 at 04:39:14
@ wanderer, you have the correct view "Only users with Admin right can join client PC to domain network". Though, there is what is called DELEGATION OF CONTROL ion Domain networks which can be achieved by logging in to a DC or client OS with administrator tools (this can be downloaded on windows.com/downloads and search) with user account with administrator right and open Active Directory Users and Computers from Administrator tools, then right click on any user account you wanted to give the right of Add workstations to domain.

NOTE: This user account is never an admin right account but a member of Domain Joining.

BADAIRO ABDULAZEEZ O.
IT SUPPORT, Union Trustees Limited
Lagos, Nigeria.
Founder of a proposed IT Hardware Service Company(Multi-Click Technologies).


Report •

#5
August 7, 2013 at 14:01:06
Change default number (or remove) of machines users can add to the domain:

http://blogs.technet.com/b/jhoward/...

www.standby-it.com


Report •

#6
August 8, 2013 at 00:14:16
@ wanderer, you have the correct view "Only users with Admin right can join client PC to domain network".

As the link I gave to a Technet article shows, that is not true for 2008 by default.


Report •


Ask Question