How do I restrict users from joing member servers to my domain

How do I restrict users from joing member servers to my domain
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
How do I restrict users from joing member servers to my domain keithsee 05-01-2006
Posted by on May 1, 2006, 6:02 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I am trying to restrict a group of non administrative users from
joining member servers to my domain. These non administrative users
should continue to have rights to join Windows XP SP 2 machines
(clients) to the domain.

In summary, I am trying to restrict new servers from being joined to
the domain


Posted by =?Utf-8?B?TWlrZSBDaGlvZG8=?= on May 1, 2006, 4:04 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
To my knowledge you can't restrict the ability to join a computer to the
domain by operating system. They either can or they can't.

"keithsee@gmail.com" wrote:

> I am trying to restrict a group of non administrative users from
> joining member servers to my domain. These non administrative users
> should continue to have rights to join Windows XP SP 2 machines
> (clients) to the domain.
>
> In summary, I am trying to restrict new servers from being joined to
> the domain
>
>

Posted by OWLS on May 2, 2006, 9:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi Mike

Agreed, so far I haven't found people saying that I can restrict the
ability to join the domain by operating system.


Posted by Steven L Umbach on May 2, 2006, 8:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Make sure the users are not local administrators on the servers in
estion. --- Steve


>I am trying to restrict a group of non administrative users from
> joining member servers to my domain. These non administrative users
> should continue to have rights to join Windows XP SP 2 machines
> (clients) to the domain.
>
> In summary, I am trying to restrict new servers from being joined to
> the domain
>



Posted by on May 6, 2006, 12:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Don't think it's possible, so perhaps you could create some sort of
script that runs against the default location for new computer
accounts and if it finds any that have a server OS, it moves them to
some sort of "punishment" OU where local admin and other restrictions
are applied.

Harry


keithsee@gmail.com wrote:

>I am trying to restrict a group of non administrative users from
>joining member servers to my domain. These non administrative users
>should continue to have rights to join Windows XP SP 2 machines
>(clients) to the domain.
>
>In summary, I am trying to restrict new servers from being joined to
>the domain


Ha®®y

HarryKrishna.nospam@online.ie

Similar ThreadsPosted
Port 21 open during nmap scans of Domain Controllers & Member Servers January 13, 2006, 5:57 pm
Why can domain users access to admin shares on my servers? June 25, 2008, 8:46 am
Best Way to Share a Secret String Between Member Servers? February 7, 2007, 12:20 am
How to restrict some users to log in? October 16, 2006, 6:06 pm
What is the best way to restrict access to Domain Admins on certain folders? March 19, 2008, 10:31 am
Restrict users to only connect to our wireless network July 30, 2005, 10:23 am
How to restrict users to access web pages all exept one July 8, 2006, 2:03 pm
Re: Fast User Switching in Domain Member mode / Authentication Tic September 25, 2005, 11:28 pm
How to open LSA API on Win2k in order to determine if a computer is member of domain October 17, 2007, 5:45 am
Possible conflicting info:Help file states that Offline Root CA canot be member server of domain? January 23, 2007, 5:27 pm

The site map in XML format XML site map

Contact Us | Privacy Policy