Hi
all,
On 9 Feb. there was a discussion about
adding computers to a domain during which Jorge mentioned the user right
"Add workstations to domain" (authenticated users being granted this right
by default), and Justin mentioned KB 251335.
A few questions about that right for anyone
that is inclined:
- How is it
enforced? Is there an attribute or control somewhere that holds a value
for the user account (or maybe the machine accounts he/she
owns)?
- Am I interpreting
this snippet below properly [from that KB]? http://support.microsoft.com/kb/251335/EN-US/ Is it indicating that a given user
account must be associated with (somehow) or is the owner of at least X active objects in order for it to be enforced? That
"concurrently" is throwing me off. In other words, the limit would not
apply if a user created a machine object, had it deleted, created it again, had
it deleted, etc...?
In the Edit
Attribute box, type a number. This number represents the number of workstations that you want users to be able to maintain
concurrently.
- I
suppose this all leads to --> Can I prevent a single user from adding another workstation simply by pushing his value for
this control over the threshold?
Humor me here and forget about ACLs, rights,
and the obvious easier ways to accomplish this! I appreciate it.
Thanks!
-DaveC
Reuters AITS Infrastructure
-----------------------------------------------------------------
Visit our Internet site at http://www.reuters.com
Get closer to the financial markets with Reuters Messaging - for more
information and to register, visit http://www.reuters.com/messaging
Any views expressed in this message are those of the individual
sender, except where the sender specifically states them to be
the views of Reuters Ltd.