Hello
I'm trying to get some burden of our system administrator.
We have a strict policy about local and domain administrator passwords. No-one except de admin and backup admin has access to these passwords.
We have four locations and one IT department. To prevent that our administrators have to travel frequently to the other offices, I'm trying to set up accounts on both the domain and local workstation so normal users can add a new workstation to the domain.
I have set up a normal domain user on each domain. Using the Domain Controller Security Policy I have given this user access to the "Add workstations to the domain" policy.
When I try to add an NT4.0 workstation to the domain (local login as administrator) I can add the workstation to the domain.
When I try to add an XPPRO workstation to the domain (local login as administrator) I get ACCESS DENIED.
Can anyone give me some info about this?
Step 2:
Let's say I can create a domain user for adding the workstations to the domain. You still have to be logged on localy as administrator to change the network settings (both for NT4.0 as XPPRO).
Is there a way I can create a local normal user to change the network settings (so be able to add a workstation to the domain)?
Sorry for the long story but I wanted to give all the info!
Greetz
Roel
I'm trying to get some burden of our system administrator.
We have a strict policy about local and domain administrator passwords. No-one except de admin and backup admin has access to these passwords.
We have four locations and one IT department. To prevent that our administrators have to travel frequently to the other offices, I'm trying to set up accounts on both the domain and local workstation so normal users can add a new workstation to the domain.
I have set up a normal domain user on each domain. Using the Domain Controller Security Policy I have given this user access to the "Add workstations to the domain" policy.
When I try to add an NT4.0 workstation to the domain (local login as administrator) I can add the workstation to the domain.
When I try to add an XPPRO workstation to the domain (local login as administrator) I get ACCESS DENIED.
Can anyone give me some info about this?
Step 2:
Let's say I can create a domain user for adding the workstations to the domain. You still have to be logged on localy as administrator to change the network settings (both for NT4.0 as XPPRO).
Is there a way I can create a local normal user to change the network settings (so be able to add a workstation to the domain)?
Sorry for the long story but I wanted to give all the info!
Greetz
Roel