Home > Active Directory > Grant a Helpdesk/Support user rights to join computers to domain

Grant a Helpdesk/Support user rights to join computers to domain

By default domain users can only add 10 machines to the domain. It’s necessary to grant permissions to join/remove computers to domain for IT Support/Helpdesk users . This can be accomplished through the Delegation Control wizard
Steps to delegate control on the Computers Container:
1. Open the Active Directory Users and Computers snap-in.
2. Right-click the container under which you want the computers added, and press Delegate Control.
3. Press Next.
4. Press Add.
5. After adding all the users and/or groups, press Next.
6. Select Create custom task to delegate and press Next.

7. Select Only the following objects in the folder, check Computer objects, check the Create selected objects in this folder box, and press Next.

8. Check Reset Password, Read and write account restrictions, Validated write to DNS host name, Validated write to service principal name. Click Next and Finish.

9. Press Finish.
For more information about the minimum rights to join PC to the domain, please refer to:

Error message when non-administrator users who have been delegated control try to join computers to a Windows Server 2003-based or a Windows Server 2008-based domain controller: “Access is denied”

Categories: Active Directory
  1. Sommer
    January 21, 2014 at 12:02 am

    It’s actually a gfeat and useful piece of info. I am satisfied that yoou just shared this helpfu info with us.
    Please keep us up to date like this. Thank you for

  2. April 24, 2014 at 8:11 pm

    The idea of small becomes obsolete while big bold titles and eye-catching logos may all be in good taste.
    This often allows for a win-win situation since the
    clients earn from good web site traffic as well as the SEO experts (content providers of the sites) are paid
    too to provide their materials. This will also mean you avoid the pitfalls of and the
    regulating codes and laws.

  3. April 27, 2014 at 4:00 pm

    There are times when the mailing list will lead generation get good results.
    With this regard, yyou must acquire mailing list leads.

  4. September 20, 2014 at 1:45 pm

    Hello to every one, the contents existing at this web page
    are genuinely awesome for people experience, well, keep up the
    good work fellows.

  5. September 25, 2014 at 10:01 am

    It is really a great and useful piece of info.

    I am glad that you just shared this useful information with us.
    Please stay us up to date like this. Thank you for sharing.

  1. February 13, 2014 at 11:41 am
  2. November 16, 2014 at 1:54 pm
  3. June 14, 2015 at 7:11 pm

Leave a Reply to caduta capelli Cancel reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: