Microsoft KB Archive/290059

= Option That Restricts Which User or Group Can Add Client Computer to Active Directory Domain Is Ineffective =

Article ID: 290059

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server

-



This article was previously published under Q290059



SYMPTOMS
If you select the This machine may be joined to the domain by the following user or group option when you are using Active Directory Users and Computers to add a new computer to an Active Directory domain, the user or group restrictions you specify may not be applied, allowing any user to add the new computer to the domain.



CAUSE
This behavior can occur when you select this option, which is only for Microsoft Windows 2000-based computers, and then try to bring a computer based on some other operating system into the domain.



RESOLUTION
To resolve this behavior, use the This machine may be joined to the domain by the following user or group option only with Windows 2000-based client computers, and not with computers running Microsoft Windows NT 4.0 Workstation, Microsoft Windows 95 or Windows 98, or Microsoft Windows Millennium Edition (Me).

Keywords: kbprb KB290059

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.