Authority To Add Machine To Domain?

[zeveck]

What authority do you need to give a user so that they can add/remove machines from a domain? I know the Domain Admin can do it, but I need to give 20 or so developers the ability to do so and don't really want to make them all Domain Admins...

 

[zeveck]

So, it looks like I just need to give the user the "Add workstations to domain" Users Right. Does this also give the user permission to remove a workstation from the domain? If not, how do I do that?

 

[WhoKilledKenny]

You can create a security group, give it rights to add computer accounts and add your users to the group.

Eventhough the verbage is not clear (in the description) you should still be able to add users to the Account Operators built-in group. This will allow them to create computer accounts, but it also allows them to create user accounts. Make sure you communicate that they can but may not create user accounts.

 

[zeveck]

My primary question as what rights you actually assign to "give it rights to add computer accounts and add your users to the group.