types of administrator account

[disinfo]

so geoff, what would you do;

you have an admin you dont exactly want to be looking around AD, but its essential that they can join / disjoin pc's as well as been able to rename them.


Thanks for help so far by the way

[wesleyw]

Just a quick question when you go in as admin are these still greyed out because I've had a recent batch of machines that this happened to regardless of who was logged on?


Wes

[BradP.]

The change name right is a local right on the computer, regardless of the computer's domain membership.

[disinfo]

wesley - no not having that trouble.

BradP, thanks im going to roll out a new local group i think.

Thanks again

[wesleyw]

I think you can linkn the local and domain groups together which should help you with that!

It wouldn't even let me in as the lcoal administrator I think soem of the networking configurations had become corrupt!


Wes

[Geoff]

so geoff, what would you do

Create the machine account in AD myself before the technican goes to the machine to add it to the domain.

[Grommit]

so geoff, what would you do

Create the machine account in AD myself before the technican goes to the machine to add it to the domain.

So whats the point of having a technican then?

I am also in the smae situation.. i need Technicians to add remove PC's from the domain, change passwords in the AD Create Accounts in Ranger (need AD rights)

Add new PC builds to the Domain etc...