18th September 2021

Authorizing the Normal User to Take Computers to the Domain

Follow the steps below in order to give the authority to take the newly added computers to the domain to users or groups other than users or groups with “Domain Admin” authority.

Click on the start menu and click “Windows Administrative Tools“. Then click “Active Directory Users and Computers” at the bottom.

Active Directory Users and Computers
Active Directory Users and Computers

 

Right-click on the “OU” to be authorized on the domain node that opens and click “Delegate Control“.

Delegate Control
Delegate Control

 

When the “Delegation of Control Wizard” page comes up, we continue with the “Next” button.

Delegation of Control  Wizard
Delegation of Control  Wizard

 

Click the “Add” button in the “Users or Groups” section and select a specific group or user and continue with the “Next” button.

Users or Groups
Users or Groups
Users or Groups
Users or Groups

 

In the “Task to Delegate” section, we select “Create a custom task to delegate” and continue with the “Next” button.

Task to Delegate
Task to Delegate

 

In the “Active Directory Object Type” section, we select Only the following objects in the folder. We select “Computer Objects” from the list. Then we select “Create selected objects in this folder” and “Delete selected objects in this folder“. We continue with the “Next” button.

Computer Objects
Computer Objects

 

In the “Permissions” section, we tick the following checkboxes. We continue with the “Next” button.

  • Reset Password
  • Read and write Account Restrictions
  • Validated write to DNS host name
  • Validated write to service principal name
  • Read and write DNS host name and attributes
LEARN MORE  What are Domain Group Policy and Group Policy Types?
Permissions
Permissions

 

Finally, we finish the process with the “Finish” button. Thus, the “omer” user was given the authority to take the computers to the domain. If you want, you can give authorization to a group.

Completing the Delegation of Control Wizard
Completing the Delegation of Control Wizard

 

Leave a Reply

Your email address will not be published. Required fields are marked *