Allow group of users to be able to add computer into domain on Windows Server 2012 R2

I am sure you know by now that any authenticate user has right o join a computer into Active Directory domain. This can happen only 10 times and on the 11th time the user will get error. Per Microsoft users who have the Create Computer Objects permission on the [easyazon_link identifier=”1782175997″ locale=”US” tag=”wn0d5-20″] Active Directory [/easyazon_link]computers container can also create computer accounts in the domain. The difference is that users with permissions on the container are not restricted to the creation of only 10 computer accounts.

We can create a group in [easyazon_link identifier=”059652059X” locale=”US” tag=”wn0d5-20″] Active Directory [/easyazon_link] – called TECHNICIAN and add all approved user into this group that will be granted rights to join computers into Domain.

• Lets login into [easyazon_link identifier=”0735682674″ locale=”US” tag=”wn0d5-20″] Windows Server 2012 R2 [/easyazon_link]
• Click on Group Policy Management and launch the console
• Right click on Default Domain Group Policy and click Edit

• Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment
• Expand the User Rights Assignment

• Double click on Add Workstations to Domain

• Click Add User or Group
• Add TECHNICAN groups and click APPLY

From this point on, anytime you remove or add user in the group TECHNICIAN the user will lose or will be granted access and permissions to add computers into domain.

[easyazon_image align=”none” height=”160″ identifier=”0672336227″ locale=”US” src=”http://blog.technotesdesk.com/wp-content/uploads/2015/10/41Wm2-bgH2L._SL160_.jpg” tag=”wn0d5-20″ width=”123″]