Actually, we don't have a disjointed namespace. They are specifying a group to which their userid is a member. Then, they go to the PC to change it's domain.

From: "joe" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: <[EMAIL PROTECTED]>
Subject: RE: [ActiveDir] Problems Adding Computers to AD
Date: Thu, 28 Oct 2004 15:15:07 -0400

Do you have a disjoint namespace?

When they create the objects, what do they specify for who can join?



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jacob Walker
Sent: Thursday, October 28, 2004 1:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems Adding Computers to AD

Thank you, Joe. We are implementing Windows Server 2003 AD. Here are the
permissions we have assigned. Any clue as to what critical permission could
be missing?


This object and all child objects:
Create Computer Objects

Computer Objects:
List Contents
Read All Properties
Write All Properties
Read Permissions

-----Original Message-----
From: joe [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 11:50 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems Adding Computers to AD

I have seen that with Windows Server 2003 AD if there aren't enough
permissions delegated to the person/group actually doing the join in a
disjointed namespace environment.

  joe

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jacob Walker
Sent: Thursday, October 28, 2004 11:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems Adding Computers to AD

Thanks, but nothing there really seems to help. It's strange. When we look
at the computer account in the domain, it also ends up disabling it.


-----Original Message-----
From: Jacob Walker [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 4:34 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Problems Adding Computers to AD

We've delegate the permission to add computer accounts to our AD environment

to some admins.  They can go into ADUC and add the computer account without
problem.  However, when they go to the PC to change it's domain membership,
on some PC's they get an error about not enough storage space.  But, some
PC's work fine.  We cannot determine why this is happening.  Any ideas?

_________________________________________________________________
Check out Election 2004 for up-to-date election news, plus voter tools and
more! http://special.msn.com/msn/election2004.armx

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

_________________________________________________________________
Check out Election 2004 for up-to-date election news, plus voter tools and more! http://special.msn.com/msn/election2004.armx


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to