I have a user in my company who seems to be able to add
computers to the domain, when i dont remember delegating
any permissions to him.

I have looked in the "security" tab of the domain to see
if he is listed as having rights, but found nothing.

Can someone suggest a way to find out where he is
obtaining these rights?

Thanks,

Henry by defaults every domain user are avaiblel to add 10 computers to
Active Directory.

Read Method 3: Override the Default Limit of the Number of Computers an
Authenticated User Can Join to a Domain in the follow article:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;251335

I hope that helps, have a nice day!

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

"Henry" skrev i meddelandet
news:1145e01c41020$21d5e3c0$a301280a@phx.gbl...
> I have a user in my company who seems to be able to add
> computers to the domain, when i dont remember delegating
> any permissions to him.
>
> I have looked in the "security" tab of the domain to see
> if he is listed as having rights, but found nothing.
>
> Can someone suggest a way to find out where he is
> obtaining these rights?
>
> Thanks,

In Windows 2000 the Add Workstation to Domain right gives
the user a quota that is set to 10 computers by default.
You may want to check there. Also check Create Computer
Objects right in Active Directory.

References: Windows 2000 Server Resource Kit: Join and
Authentication Issues

http://www.microsoft.com/technet/prodtechnol/windows2000ser
v/reskit/distsys/part5/dsgappd.asp

cyberkid247

>-----Original Message-----
>I have a user in my company who seems to be able to add
>computers to the domain, when i dont remember delegating
>any permissions to him.
>
>I have looked in the "security" tab of the domain to see
>if he is listed as having rights, but found nothing.
>
>Can someone suggest a way to find out where he is
>obtaining these rights?
>
>Thanks,
>.
>