I am currently running a Windows nt 4.0 domain structure upgrading our workstations from win 95 to win 2000 prof. We are trying to decentralize the registration of the workstations into the domain structure. As the computer joins the domain a computer account is created. By default only domain admins and Account operators can perform the registration process. I would like to give the authority to register a workstation without granting account oper or domain admin authority.
I noticed that NT 4.0 offers a user right “Add Workstation to the Domain” I granted a non -priv account this user right and attempted the registration process and failed with an event id of 56o with the following accesses
Accesses ReadPasswordParametersCreateUser
LookupIDs
According to MS documentation this should work. Has anyone had success in using this user right. Do I need to grant additional rights to allow the registration process to occur.
Thanks
John S