Renaming Computer Account permissions in AD (W2K)

[magnush]

Hi all
I am having an issue with giveing a group the proper rights to allow them to rename a computer that is already in the Win2k AD directory. The pc is Win2k pro sp3 and I have "Add work station to domain" enabled for that group. The group can pull the computer out of the domain, rename it, then joing the domain but that is a pain in the butt work around

Please help
Thanks
Magnus

[federico_s10]

i might not get your question right.. but i think you have to restrict your local computer in changing their local configurations

/images/forums/icons/cool.gif<font color=red> Saiyajin</font color=red> <font color=blue>Neo™•</font color=blue>
<font color=green>Winguides</font color=green>

[Jimbo_Jitsu]

I might not be getting your question correctly but it sounds like it is working properly. In 2k and Xp you must change from domain to workgroup and back to rename the computer. I usually use 1 letter for the work group to speed it up.

[magnush]

Actually not. You should be able to rename a computer with out dis jioning the domain and we are able to do that if you are a domain admin. I am trying to find the appropraite rights that a user would need so that he doesnt have to be a domain admin

Magnus

[jimbojitsu]

Oh, sorry. Yes you are right you do not have to pull them out (I checked) we do it that way because they are not updated properly all the time and you must try again. Sorry I do not have suffecient rights to check what our settings are here.