Windows Forum

Ask something
Discussion Locked

prevent user from joining pc to domain

0 helpful
3 replies

by degnan 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I found that by default any domain user can join a pc to a domain, and i want to lock it down so only domain admins can join a pc to a domain. Is there a way in group policy i can accomplish this?

3 replies

by curlergirl

This is in the Domain Security policy - on any DC, go to the Administrative Tools menu and open the Domain Security Policy console. Under Security Settings/Local Policies/User Rights Assignment, you'll see "Add workstations to domain" - set the rights to this so that only Domain Admins can do it.

Hope this helps!

This discussion is closed to new replies.