How to add a computer to the domain
My client's network uses Windows 2000 Server as its server and Windows XP at its workstations. We wanted to add a new machine to the network, but we keep receiving an Access is Denied error. We have added the User and the Computer to the Active Directory's one domain, but we still get Access is Denied when we try to switch the new machine to log in to the domain. Any ideas how to fix this?
I'm assuming you added the user and computer through the Active Directory users and computers console and then attempted from the computer console to add it to the domain. These are actually two separate actions as far as the computer is concerned. In the former, the account is simply listed in the Active Directory and does not represent any actual computer. In the latter, the account is activated and the computer can be centrally managed. Joining the computer from the computer console will fail if the user attempting to add the computer to the domain has neither the "Add workstations to the domain" User right or the "Create Computer Objects permission" (by default only Administrators have this permission). By default, Authenticated Users can add up to 10 computers to the domain, but if they have exceeded that limit or that right has been taken away from them they are going to get an access denied message. Another way to allow a user to add a computer to the domain is when adding the account to ADU&C, set who has the ability to add the computer to the domain.
This was first published in February 2005