General discussion

Locked

Add no more computer to NT4 domain

By Healer ·
How can I set up NT4 server so that no computer can be incidentally added by default?

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by lowlands In reply to Add no more computer to N ...

Open up user manager, goto policies then user rights. Click dropdown and select "add workstations to domain", remove rights for everyone and their dog. That should do the trick.

Collapse -

by Healer In reply to

Poster rated this answer.

Collapse -

by Healer In reply to Add no more computer to N ...

I can't find anywhere to respond, so I am using Add Comment for the job.

Your answer sounds very logical and looks right to me too. However, when I got to the option as you instructed I found "Add workstations to domain" was Grant To nobody by default already. I don't understand why because I added an XPPro computer onto the domain without any problem the other day. Can you help and explain? Thanks!

Collapse -

by lowlands In reply to Add no more computer to N ...

Interesting, you're right. It looks like Domain Admins still have the permsission to add workstations.

Collapse -

by Healer In reply to

Poster rated this answer.

Collapse -

by jon In reply to Add no more computer to N ...

Which is exactly what you are, so you have complete control over whether or not another computer is added. Tell me, why would you want to limit this short of licensing issues? Are you in a per user or per device environment?

Collapse -

by Healer In reply to

Poster rated this answer.

Collapse -

by Healer In reply to Add no more computer to N ...

I am not sure if I understand what you mean. First of all, I could still add workstation to NT domain even though nobody had been added to Grant To "Add workstations to domain". I wonder why I could do that. Did I fail to understand how that feature works?

Secondly, the original reason I asked was because one of the places I helped with the IT work wants no workstation to be willy-nilly added by anybody for some reason.

Collapse -

by gary.cole In reply to Add no more computer to N ...

Hi there

You are both correct...Domain Admins are able to add users/machines by default.

It seems to me the EASY answer is to change the Domain Admin password and restrict who has access to it...normal users will NOT have the rights to add workstations to your domain.

Good luck
Gary

Back to Windows Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums