![]() ![]() If the reply is helpful, please Upvote and Accept it as an answer– Permissions – Select General, select Create All Child Objects. Check the box Create selected objects in this folder. Choose Only the following objects in the folder and check the box Computer Objects. Tasks to Delegate – Click Create a custom task to delegate. ![]() Right-click the container under which you want the computers to be added and click on Delegate Control. Open the Active Directory Users and Computers snap-in. You can follow the below steps to Delegate rights to users using Active Directory Users and Computers. Delegate rights to users using Active Directory Users and Computers.Assign rights to the user/group using the Default Domain Group Policy.Hi are 2 ways to allow domain users of the second set to add or join the computer to the domain created by the first set of users. What permissions do i need for second set of users to allow them to join computers to a domain created by first set of users? That error basically says that a user who is joining the computer has different set of credentials than the one who created the computer object. When i try the above scenario, it gives me error. The only permission they will have is to join the pre-staged computers to a domain. Also, they should not be able to manually create computer objects. They will not be able to delete those computer objects that were already created previously by other users. Then, i need to delegate permissions to another set of users where they will only be able to join the computers to a domain. I am able to configure permissions for this. These users will also be able to Delete Computer Objects etc. I am managing Active Directory environment where i need to delegate permission on OU for few users to be able to create Computer Objects. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |