In order to enable users to join computers to the domain, grant the following permissions:

  1. This object and all child objects
    • Create Computer Objects
    • Delete Computer Objects
  2. Computer objects
    • Reset Password
    • Read and write Account Restrictions
    • Validated write to DNS host name
    • Validated write to service principal name

Recent Blog

Blog Categories

Tags

Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.