Creating computer accounts in advance 1

[viciousdogs]

Can computer accounts be created in Windows 2000 AD before a new computer is ready to be put on the network?

I've tried creating the account in AD, but the new machine being configured asks for the username/password of a user authorized to add machines to the domain anyway.

I would like to create the accounts myself and let users assemble there own machines without having to delegate create computer object control to them.

 

[GrnEyedLdy]

Viciousdogs,

When you create the New Computer Object within Active Directory, on the New Object - Computer Box screen you will see toward the bottom,


The following User or Group can join this computer to a domain.

User or Group
Defaultomain Admins |CHANGE|


This means that by default only a member of the Domain Admins group can join this computer account to the domain. If you click the CHANGE button then you can specify who can add this computer account to the domain.

Hope this helps,

Patty

 

[viciousdogs]

Does this mean that I, as a domain admin, can't create the computer account in advance and then have a co-worker assemble the machine if the co-worker can't add machines to the domain?

 

[GrnEyedLdy]

Viciousdogs,

If you create a computer account that will later be added to the domain, you can specify who can add that particular computer to the domain by clicking CHANGE and adding the users name.

If there is a particular user that will be adding multiple computer accounts to the domain, you can give that user the right within a GPO...The setting can be found under,

Computer Configuration|Windows Settings|Security Settings|Local Policies|User Rights Assignment|Add Workstations to Domain

Hope this helps,

Patty