- Click Start, click Run, type dsa.msc, and then click OK.
- In the task pane, expand the domain node.
- Locate and right-click the OU that you want to modify, and then click Delegate Control.
- In the Delegation of Control Wizard, click Next.
- Click Add to add a specific user or a specific group to the Selected users and groups list, and then click Next.
- In the Tasks to Delegate page, click Create a custom task to delegate, and then click Next.
- Click Only the following objects in the folder, and then from the list, click to select theComputer objects check box.
- Then, select the check boxes below the list, Create selected objects in this folder and Delete selected objects in this folder.
- Click Next.
- In the Permissions list, click to select the following check boxes:
- Reset Password
- Read and write Account Restrictions
- Validated write to DNS host name
- Validated write to service principal name
- Click Next, and then click Finish.
- Close the “Active Directory Users and Computers” MMC snap-in.
quinta-feira, 5 de julho de 2018
Dar permissão para usuários não administradores para adicionar computadores no domínio
Assinar:
Postar comentários (Atom)
Nenhum comentário:
Postar um comentário