Option That Restricts Which User or Group Can Add Client Computer to Active Directory Domain Is Ineffective (290059)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server
This article was previously published under Q290059 SYMPTOMS
If you select the This machine may be joined to the domain by the
following user or group option when you are using Active Directory Users and Computers to add a new computer to an Active Directory domain, the user or group restrictions you specify may not be applied, allowing any user to add the new computer to the domain.
CAUSE
This behavior can occur when you select this option, which is only for Microsoft Windows 2000-based computers, and then try to bring a computer based on some other operating system into the domain.
RESOLUTION
To resolve this behavior, use the This machine may be joined to the domain by the following user or group option only with Windows 2000-based client computers, and not with computers running Microsoft Windows NT 4.0 Workstation, Microsoft Windows 95 or Windows 98, or Microsoft Windows Millennium Edition (Me).
| Modification Type: | Major | Last Reviewed: | 11/19/2003 |
|---|
| Keywords: | kbprb KB290059 |
|---|
|