Windows Forum

Ask something
Discussion Locked

prevent win2K users from joining domain

0 helpful
7 replies

by lynn.melton

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have noticed that a regular user (with no special permissions) can join their workstation to my windows 4.0 domain. How can this be prevented?

7 replies

by bentgellerich

Make sure your users do not have the "Add workstations to Domain" right. By default only Administrators and Account Operators have this right, so someone must have changed this. In user manager for domains, check under Policies - User rights.

If you have a w2k domain controller authenticated users have the right to add 10 workstations to the domain.

by shmaltz

Unless they have both rights on the local Workstation and on the domain controller a user will not be able to join the domain. If you see a user has joined the domain then he has the admin password for the domain. You should change that so he doesn't have admin rights on the domain.

This discussion is closed to new replies.