Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Restrict Desktop support from Adding Servers to the Domain
Restrict Desktop support from Adding Servers to the Domain [message #157770] Tue, 14 July 2009 10:57 Go to next message
mikee  is currently offline mikee
Messages: 9
Registered: July 2009
Junior Member
We have a w2k3 domain. Our desktop was given the rights to add computers to
the domain. We have discovered that they are on occasion somehow adding
servers. How can we restrict them to only be able to add desktops and not
servers?

thanks in advance
Re: Restrict Desktop support from Adding Servers to the Domain [message #157774 is a reply to message #157770] Tue, 14 July 2009 11:19 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Standardize your server build process and ensure that your desktop group is
not included in the local Administrators group...

hth
Marcin

"mikee" <mikee@discussions.microsoft.com> wrote in message
news:D964EEC1-D1EA-4D55-B6AC-463333384091@microsoft.com...
> We have a w2k3 domain. Our desktop was given the rights to add computers
> to
> the domain. We have discovered that they are on occasion somehow adding
> servers. How can we restrict them to only be able to add desktops and not
> servers?
>
> thanks in advance
Re: Restrict Desktop support from Adding Servers to the Domain [message #157788 is a reply to message #157770] Tue, 14 July 2009 12:54 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello mikee,

You have to make sure that they are not able to logon to the servers as local
administrator. ANd the easiest way is to install your servers yourself.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We have a w2k3 domain. Our desktop was given the rights to add
> computers to the domain. We have discovered that they are on occasion
> somehow adding servers. How can we restrict them to only be able to
> add desktops and not servers?
>
> thanks in advance
>
Re: Restrict Desktop support from Adding Servers to the Domain [message #157794 is a reply to message #157788] Tue, 14 July 2009 14:12 Go to previous messageGo to next message
mikee  is currently offline mikee
Messages: 9
Registered: July 2009
Junior Member
We are finding that users in other depts are building servers and desktop
support personel is adding the servers to the domain. How can take away the
rights of desktop support to add a server to the domain. They will still need
to be able to add a pc.

"Meinolf Weber [MVP-DS]" wrote:

> Hello mikee,
>
> You have to make sure that they are not able to logon to the servers as local
> administrator. ANd the easiest way is to install your servers yourself.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > We have a w2k3 domain. Our desktop was given the rights to add
> > computers to the domain. We have discovered that they are on occasion
> > somehow adding servers. How can we restrict them to only be able to
> > add desktops and not servers?
> >
> > thanks in advance
> >
>
>
>
Re: Restrict Desktop support from Adding Servers to the Domain [message #157797 is a reply to message #157794] Tue, 14 July 2009 14:17 Go to previous message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello mikee,

You can not set permissions only for server or workstation OS.

This is not really a permission problem, this belongs to company policies,
who is allowed to do what task.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We are finding that users in other depts are building servers and
> desktop support personel is adding the servers to the domain. How can
> take away the rights of desktop support to add a server to the domain.
> They will still need to be able to add a pc.
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello mikee,
>>
>> You have to make sure that they are not able to logon to the servers
>> as local administrator. ANd the easiest way is to install your
>> servers yourself.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> We have a w2k3 domain. Our desktop was given the rights to add
>>> computers to the domain. We have discovered that they are on
>>> occasion somehow adding servers. How can we restrict them to only be
>>> able to add desktops and not servers?
>>>
>>> thanks in advance
>>>
Previous Topic:Exchange 2003
Next Topic:GPO not applying properly
Goto Forum:
  


Current Time: Fri Oct 20 03:04:51 EDT 2017

Total time taken to generate the page: 0.06300 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software