← Back to Insights
Active Directory

AD: Granting Permissions to Join Computers to the Domain

In order to enable users to join computers to the domain, grant the following permissions:

In order to enable users to join computers to the domain, grant the following permissions:

  1. This object and all child objects
    • Create Computer Objects
    • Delete Computer Objects
  2. Computer objects
    • Reset Password
    • Read and write Account Restrictions
    • Validated write to DNS host name
    • Validated write to service principal name

Talk to a senior Microsoft expert.

No slide decks. Real numbers, real engineers, often Microsoft-funded.

Talk to an Expert →
Stay ahead

The stack, decoded. Once a month.

Cost, security, and AI guidance you can act on. Written by the engineers, not marketing.