Grant or restrict Computer naming permissions in AD

[petebuk]

Hello there,

 

My issue is that I need to know if renaming a computer on a domain can be restricted / permitted via AD.

My boss will not allow me to be a memeber of a particular group and wants me to find out which perameter I need to be able to rename computers I build. At the moment I use my admin account and receive an access denied message for computers already on our domain.

 

Any suggestons?

[Eswar Koneti]

Hello there,

 

My issue is that I need to know if renaming a computer on a domain can be restricted / permitted via AD.

My boss will not allow me to be a memeber of a particular group and wants me to find out which perameter I need to be able to rename computers I build. At the moment I use my admin account and receive an access denied message for computers already on our domain.

 

Any suggestons?

 

Delegation of admin rights in Active Directory to rename computer accounts only ?

[petebuk]

Yes - To rename a computer only.

 

 

Delegation of admin rights in Active Directory to rename computer accounts only ?

[Eswar Koneti]

Yes - To rename a computer only.

 

As per i know,you can not provide access to the user to rename computer only instead ,can give access to join computer to the domain using Delegate control (right click on any OU and choose delegate control).Computers can not be renamed directly(sometimes it may work not always) ,they should be unjoined from domain,rename computer and join to the domain. You must grant them permission to have full control, on computer accounts only.You can set this permission at the OU level and it will be applied to all computer accounts in the OU and down the OU hierarchy.