Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Disjoin computer from domain
Disjoin computer from domain [message #155319] Wed, 27 May 2009 04:51 Go to next message
topokin  is currently offline topokin
Messages: 4
Registered: May 2009
Junior Member
What permissions should I assign to particular group of users, for them to be
able to disjoin client from domain.

Thanks
Re: Disjoin computer from domain [message #155320 is a reply to message #155319] Wed, 27 May 2009 04:59 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello topokin,

They have to be local admin to bring a domain computer to workgroup. To remove
them from AD they have the need to delete computer object in that OU.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> What permissions should I assign to particular group of users, for
> them to be able to disjoin client from domain.
>
> Thanks
>
Re: Disjoin computer from domain [message #155322 is a reply to message #155320] Wed, 27 May 2009 05:37 Go to previous messageGo to next message
topokin  is currently offline topokin
Messages: 4
Registered: May 2009
Junior Member
Thanks. However I need another help.

How can I allow the same group to be able to move Computer-Accounts from the
Builtin Computer OU to another manually created OU.

Thanks


"Meinolf Weber [MVP-DS]" wrote:

> Hello topokin,
>
> They have to be local admin to bring a domain computer to workgroup. To remove
> them from AD they have the need to delete computer object in that OU.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > What permissions should I assign to particular group of users, for
> > them to be able to disjoin client from domain.
> >
> > Thanks
> >
>
>
>
Re: Disjoin computer from domain [message #155323 is a reply to message #155322] Wed, 27 May 2009 06:14 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello topokin,

They need at least delete computer object in computers container and write
computer object in the OU, moving in real is deleting and writing.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks. However I need another help.
>
> How can I allow the same group to be able to move Computer-Accounts
> from the Builtin Computer OU to another manually created OU.
>
> Thanks
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello topokin,
>>
>> They have to be local admin to bring a domain computer to workgroup.
>> To remove them from AD they have the need to delete computer object
>> in that OU.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> What permissions should I assign to particular group of users, for
>>> them to be able to disjoin client from domain.
>>>
>>> Thanks
>>>
Re: Disjoin computer from domain [message #155327 is a reply to message #155319] Wed, 27 May 2009 08:23 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
I would suggest you delegate authority to the users to add and remove
computers from your domain.

Jorge has an article that covers most all you speak of (Second time in as
many threads):
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369. aspx



--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"topokin" <topokin@discussions.microsoft.com> wrote in message
news:E88D6F9B-CF6A-4EE1-9518-5F8BF4F643DB@microsoft.com...
> What permissions should I assign to particular group of users, for them to
> be
> able to disjoin client from domain.
>
> Thanks
Re: Disjoin computer from domain [message #155339 is a reply to message #155319] Wed, 27 May 2009 12:00 Go to previous message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
have a look at this:
http://support.microsoft.com/kb/555986

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"topokin" <topokin@discussions.microsoft.com> wrote in message
news:E88D6F9B-CF6A-4EE1-9518-5F8BF4F643DB@microsoft.com...
> What permissions should I assign to particular group of users, for them to
> be
> able to disjoin client from domain.
>
> Thanks
Previous Topic:Re: Cloning AD groups (incl. SID's) between production/test enviro
Next Topic:Re: 2008 DC in trouble
Goto Forum:
  


Current Time: Thu Sep 21 08:18:06 EDT 2017

Total time taken to generate the page: 0.04222 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software