Networks

Question

Gravatar
Locked

Joining a child domain

By fre_work ·
Hi,I'm working on window 2003 server.My company has a big network.I'm enterprise administrator.There are a lot of child domain under the forest.One of my collegue want to join a domain under a child domaing but he couldn't,it prompts him a message access denied .He asked me to give him the enterprise password but it's illegall to do so .So what can i do to give him the privelage to join the domain.Thank you.

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
+ Follow this Discussion ·
| Thread display: Collapse - | Expand +

All Answers

gravatar
Collapse -

Adding workstation to the domain?

by smallbiz-techwiz In reply to Joining a child domain

If he is trying to join a computer to the domain, he's going to need administrator priviledges for that domain. You can make his user account a member of that domain admin group just long enought for him to complete the transaction, then remove his membership. No passwords need be disclosed.

gravatar
Collapse -

Enterprise Admin is overkill..he needs domain admin rights

by Why Me Worry? In reply to Adding workstation to the ...

Enterprise Admin is only needed when making changes to the AD schema or to the forest root domain, but simply creating a child domain of an existing non-root romain requires domain admin rights. There is no other way around it and whomever dicates your corporate policies regarding giving out domain admin rights should review his/her knowledge of AD because people won't be able to get work done otherwise. This can be a temporary assignment of rights for the purpose of joining a child domain, but like I said, there is no other way around this.

Back to Networks Forum
2 total posts (Page 1 of 1)  

Start or search

Related Forums