Shulou(Shulou.com)06/02 Report--

The right of ordinary users to join the domain. I now want to use an ordinary domain user, so that he can join the domain countless times, not limited to the number of 10 times to join the domain, is there any good way to achieve it? Then disable the rights of all other domain users to join the domain, how to achieve better.

Answer: according to your description, you want to know how to give a user permission to join a computer to a domain more than 10 times by default. We can achieve this in the following ways:

1. Open the Group Policy Editor and double-click the default domain controller policy.

2. Expand to find the following strategy:

Computer configuration | Windows Settings | Security Settings | Local Policy | user Rights assignment | add workstations to the domain

3. Double-click the policy to remove the authenticated users from the policy, and then add the account of the corresponding user.

The above actions are used to set permissions for a domain that has the right to join the default 10 computers. Then, we need to modify this limit 10 times by default: the article you see is from the active directory seo http://gnaw0725.blog.51cto.com/156601/d-1

Run Adsiedit.msc as the administrator of the domain.

Expand the domain NC node. This node contains the beginning object "DC =", reflecting the correct domain name. Right-click the object, and then click Properties.

Click both in the select the properties box you want to view.

Click ms-DS-MachineAccountQuota in the select properties box to view.

Type a number in the edit properties box. This number represents the number of workstations required that users can maintain at the same time. Click Settings, and then click OK.

If you need to set up an individual user to have this permission, you can use the following step to grant this particular user permission to create a computer object:

From the Active Directory user and computer snap-in, click the advanced features on the view menu so that the security tab is exposed when you click properties.

Right-click the computer container, and then click Properties.

On the Security tab, click Advanced. "on the permissions tab, click authenticated user, and then click View / Edit."

Note: if authenticated user groups are not listed, click add and add them to the permission entry in the list. The article you see is from the active Directory seo http://gnaw0725.blog.51cto.com/156601/d-1

Make sure that this object and all sub-object options are displayed in the apply to box. Click in the permissions box to select the allow check box next to create computer object and delete computer object ACE, and then click OK.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.