General discussion

Locked

prevent user from joining pc to domain

By degnan ·
I found that by default any domain user can join a pc to a domain, and i want to lock it down so only domain admins can join a pc to a domain. Is there a way in group policy i can accomplish this?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by curlergirl In reply to prevent user from joining ...

This is in the Domain Security policy - on any DC, go to the Administrative Tools menu and open the Domain Security Policy console. Under Security Settings/Local Policies/User Rights Assignment, you'll see "Add workstations to domain" - set the rights to this so that only Domain Admins can do it.

Hope this helps!

Collapse -

by degnan In reply to

Poster rated this answer.

Collapse -

by degnan In reply to prevent user from joining ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums