Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Referencing the page above: My goal is to have all computers in the domain allow authentication from the object I am adding. In other words: •Click Add. In Enter the object names to select, type the name of the user object or group object for which you want to grant access to this resource computer, and then click OK. Select the Allow check box next to the Allowed to Authenticate permission, and then click OK.

I want to be able to add that to multiple machines at once (all in the OU, or even globally) and have "Allowed to Authenticate" be the only permission for the group object. I have been unable to locate an answer on this, or if it's even possible.


share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.