Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was installing Server2003 Std and Server2008 Std on hardware recently. When joining the servers to the domain during the install, I was asked for credentials.

I answered with the the DC's Admin user and password.

What minimum level of credentials are normally required to join a member server to a domain?

share|improve this question
up vote 6 down vote accepted

By default a domain user can add up to 10 computers to a domain. There is a way that administrators can restrict this default behavior to only allow Administrators to add computers to the domain, by using ADSI Edit.

share|improve this answer
Thanks, you got there first. – Jamie May 12 '10 at 3:02

By default Authenticated Users are assigned this privilege.

This is defined by a GPO:

Computer Configuration --> Policies –-> Windows Settings –-> Security Settings –-> User Rights Assignment --> Add workstation to domain

As noted by @redknight, by default users (excepting domain admins) are able to join 10 computers to a domain.

share|improve this answer

"Add computers to domain" is not restricted to Domain Admins at all, that wouldn't be very good security. There is also no distinction between adding a workstation, or adding a member server.

This article describes some of the details.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.