Join or sign in Register for your free TechRepublic membership or if you are already a member, sign in using your preferred method below. Use Your Email Use FacebookUse Linkedin

Joining a child domain

Locked

Hi,I’m working on window 2003 server.My company has a big network.I’m enterprise administrator.There are a lot of child domain under the forest.One of my collegue want to join a domain under a child domaing but he couldn’t,it prompts him a message access denied .He asked me to give him the enterprise password but it’s illegall to do so .So what can i do to give him the privelage to join the domain.Thank you.

Topic

Clarifications

In reply to Joining a child domain

Clarifications

Adding workstation to the domain?

In reply to Joining a child domain

If he is trying to join a computer to the domain, he’s going to need administrator priviledges for that domain. You can make his user account a member of that domain admin group just long enought for him to complete the transaction, then remove his membership. No passwords need be disclosed.

Enterprise Admin is overkill..he needs domain admin rights

In reply to Adding workstation to the domain?

Enterprise Admin is only needed when making changes to the AD schema or to the forest root domain, but simply creating a child domain of an existing non-root romain requires domain admin rights. There is no other way around it and whomever dicates your corporate policies regarding giving out domain admin rights should review his/her knowledge of AD because people won’t be able to get work done otherwise. This can be a temporary assignment of rights for the purpose of joining a child domain, but like I said, there is no other way around this.

[Author]

Replies