Windows 10: Delegate "Domain Join Only" permission to a standard user

Hi Everyone,I am managing Active Directory environment where i need to delegate permission on OU for few users to be able to create Computer Objects. These users will also be able to Delete Computer Objects etc. I am able to configure permissions for this. Then, i need to delegate permissions to another set of users where they will only be able to join the computers to a domain. They will not be able to delete those computer objects that were already created previously by other users. Also, they should not be able to manually create computer objects. The only permission they will have is to jo

:)

 

Windows 10 Domain Join Limit Reached on Domain Admin Account

Thank you for the reply.

I don't think you understand my question though. Both of those articles deal with increasing the join limit for basic user accounts. I have a Domain Admin account.

Here's a quote taken directly from the first article:

"Note that users in the Administrators or Domain Administrators groups, and those users who have delegated permissions on containers in Active Directory to create and delete computer accounts, are not restricted by this
limitation."

According to this I should not have a limit, yet I still received the error code. I have joined approximately 100 computers already. I can't seem to join any more though.

 

Win 10 and permissions once joining domain


Hello all,

I've set up a Windows server within my home network and everything is functioning great except the little annoyance described below. The roles it currently has is Active Directory Domain Services, DHCP, DNS, and File Services.

It seems that after joining the one machine to the domain (the other is Win10 Home and unable), certain restrictions have been applied to the workstation. Simple stuff like changing of the time, lock screen, etc. that are now greyed out. What is displayed in red with these permission issues is "some settings are managed by your organization". Also, the joined Win 10 never had a lock screen set until this join.

I have looked through the security policy and group policy settings in Server 2008 R2 Enterprise and have yet to come by any related settings. Is this issue from the server or some type of default when another user is added and/or joining a domain? Settings are greyed with either user on the joined machine.

Btw, joined machine is Win 10 Education and the other Home. The Home machine is still networked with the server, on servers DHCP, etc. but unable to join the domain and therefor is not effected by this.

Thanks

 

Windows 10 after joining 2012 domain will not allow logon of domain users

So I have a new computer, recently upgraded from 10 home to 10 pro.

I join the computer to the 2012 r2 domain. it seems to join fine, I see that it is listed in the domain directory. however, no domain user is able to desktop logon on, it gives out a username or password incorrect message, even using the original joining
user account. it is happy to unjoin, even with administrative accounts that will not allow desktop logon.

I tried domain\user user@domain even domain.local versions of same and double checked caps lock to no avail.

noted a curious thing. when I look at the Settings>System>about instead of the normal three gray boxes one of which should say join a domain, I get this: