Active Directory (Computer Account) Delegation Question
Hey folks,
I've always had good luck with my certification questions here, so I figured I'd try this one.
We’re working toward cutting off one of our departments (administration wise) and having their little admin group take care of their OU. That’s the easy part.
When they join a computer to the domain it will be created in the default computers container. What I’m wondering is this, is there a way to have AD create that computer account in their OU by determining the admin group that joined it to the domain. I know you can either pre-create the account in their OU, or use the redir computer command to redirect all computers to an OU, but can you redirect certain computers based on the group that adds them? I think it can be done with a script but I’m not 100 sure.
Thanks guys!
I've always had good luck with my certification questions here, so I figured I'd try this one.
We’re working toward cutting off one of our departments (administration wise) and having their little admin group take care of their OU. That’s the easy part.
When they join a computer to the domain it will be created in the default computers container. What I’m wondering is this, is there a way to have AD create that computer account in their OU by determining the admin group that joined it to the domain. I know you can either pre-create the account in their OU, or use the redir computer command to redirect all computers to an OU, but can you redirect certain computers based on the group that adds them? I think it can be done with a script but I’m not 100 sure.
Thanks guys!