How do I change the default User or Group that can join the computer to a domain? (NETIQKB13659)

  • 7713659
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

goal
How do I change the default User or Group that can join the computer to a domain?

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

The default user or group that can join the computer to a domain can be changed through a pre-task trigger.  There is a trigger called ComputerJoin.vbs available in the Trigger & Policy Scripts section of the Knowledge Depot for Directory and Resource Administrator (DRA).  You will need a user Id and password to access the site.  The link to the DRA Knowledge Depot is:


This script must be set up as a per-task trigger for the ComputerCreate operation.

The script sets the user or group who can join the computer to the domain in Microsoft Windows 2000. For example, the Desktop Support group users are usually tasked with joining the computer to the domain and when the trigger is implemented. The Assistant Admin creating the computer account does not need to know the name of the Desktop support group.

This script can also be modified to add users or groups based on the location of the computer but would require additional customization.



Additional Information

Formerly known as NETIQKB13659