![]() ![]() On a domain controller, open the Group Policy Management console.Ģ. ![]() Policy change: Default Domain Controller Policyġ. You now know why, all users can join a computer to the domain, we will now see how to correct “this problem” in order to limit joining to the domain to users who are members of the Domain Admins group. What you need to know (some administrators don’t know this), all domain users can join a computer to a domain, they can even join up to 10 computers.ĭomain administrators have no limit as well when a delegation is created.Īs seen in the screenshot below, which shows the Group Policy settings: Default Domain Controller Policy, the Add workstations to domain setting is set to NT AUTHORITY\Authenticated Users. In this tutorial, we will address a security point on an Active Directory environment, which is the domain joining of computers.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |