Robiul's Blog
Robiul's ICT Blog
Skip to content
  • Home
  • About
  • Resume
← Enable IP Packet Forwarding
Force visitors to https →

Delegate – non-admin account to add workstations to domain

Posted on 07/02/2012 by Robiul

Error message when non-administrator users who have been delegated control try to join computers to a Windows Server 2003-based or a Windows Server 2008-based domain controller: “Access is denied”

Following steps delegates access for adding workstations to a domain.

To resolve the issue in which users cannot join a computer to a domain, follow these steps:

  • Click Start, click Run, type dsa.msc, and then click OK.
  • In the task pane, expand the domain node.
  • Locate and right-click the OU that you want to modify, and then click Delegate Control.
  • In the Delegation of Control Wizard, click Next.
  • Click Add to add a specific user or a specific group to the Selected users and groups list, and then click Next.
  • In the Tasks to Delegate page, click Create a custom task to delegate, and then click Next.
  • Click Only the following objects in the folder, and then from the list, click to select the Computer objects check box.
    Then, select the check boxes below the list, Create selected objects in this folder and Delete selected objects in this folder.


  • Click Next.
  • In the Permissions list, click to select the following check boxes:
    • Reset Password
    • Read and write Account Restrictions
    • Validated write to DNS host name
    • Validated write to service principal name


  • Click Next, and then click Finish.
  • Close the “Active Directory Users and Computers” MMC snap-in.

Source: http://support.microsoft.com/kb/932455

Advertisements

Share this:

  • Twitter
  • Facebook

Like this:

Like Loading...

Related

About Robiul

Robiul has 15 years of continuous successful career experience in ICT with extensive background in System Engineering, IT infrastructure design, operations and service delivery, managing IT projects / MIS functions for local and multi-national companies with in-depth knowledge of multiple operating systems as well as construct / manage small to medium size Data Center. Proven ability to design and implement medium to semi-large scale LAN/WAN/WLAN and system infrastructures. Academic qualification: Master of Science in Information Systems. Professional certifications are: MCSE, CCNA, ITIL and FoundStone Security Professional, VCP, NetAPP, CISSP etc.
View all posts by Robiul →
This entry was posted in Windows and tagged Delegate non admin users account to add workstations to domain. Bookmark the permalink.
← Enable IP Packet Forwarding
Force visitors to https →
  • Recent Posts

    • Unable to connect SQL server port 1433 remotely
    • Hide External Contact from Office 365 GAL
    • Delete contents from users mailbox
    • Hide, Un-hide, Mailboxes and Block Office365 Users
    • O365 Removing User Account
  • Recent Comments

    small business it on Cloud Computing Security
    Ronny Mersinger on Cloud Computing Security
    Cholesterol foods on Clear ARP entries from various…
    Robiul on Local users migration from win…
    Robiul on Local users migration from win…
  • Archives

    • July 2015
    • June 2015
    • November 2014
    • September 2014
    • July 2014
    • March 2014
    • December 2013
    • November 2013
    • October 2013
    • September 2013
    • July 2013
    • June 2013
    • May 2013
    • April 2013
    • March 2013
    • January 2013
    • November 2012
    • October 2012
    • September 2012
    • August 2012
    • July 2012
    • May 2012
    • March 2012
    • February 2012
    • January 2012
    • December 2011
    • November 2011
    • October 2011
    • September 2011
    • July 2011
  • Categories

    • Apple
    • Cisco
    • DRP
    • Exchange
    • Linux
    • Others
    • Powershell
    • Project Management
    • SCCM
    • Security
    • Storage
    • Thesis
    • VMWare
    • WatchGuard
    • Windows
  • Meta

    • Register
    • Log in
    • Entries RSS
    • Comments RSS
    • WordPress.com
  • Advertisements
Robiul's Blog
Create a free website or blog at WordPress.com.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
%d bloggers like this: