Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I was installing Server2003 Std and Server2008 Std on hardware recently. When joining the servers to the domain during the install, I was asked for credentials.

I answered with the the DC's Admin user and password.

What minimum level of credentials are normally required to join a member server to a domain?

share|improve this question
add comment

3 Answers

up vote 5 down vote accepted

By default a domain user can add up to 10 computers to a domain. There is a way that administrators can restrict this default behavior to only allow Administrators to add computers to the domain, by using ADSI Edit.

http://support.microsoft.com/kb/243327

share|improve this answer
    
Thanks, you got there first. –  Jamie May 12 '10 at 3:02
add comment

"Add computers to domain" is not restricted to Domain Admins at all, that wouldn't be very good security. There is also no distinction between adding a workstation, or adding a member server.

This article describes some of the details.

share|improve this answer
add comment

By default Authenticated Users are assigned this privilege.

This is defined by a GPO:

Computer Configuration --> Policies –-> Windows Settings –-> Security Settings –-> User Rights Assignment --> Add workstation to domain

As noted by @redknight, by default users (excepting domain admins) are able to join 10 computers to a domain.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.