I need to pre-stage 100's of computer accounts into a specified OU, which I can do via batch file, lines of which may be; dsadd computer "cn=client01,OU=In Build,OU=IT,dc=mydomain,dc=co,dc=uk" dsadd computer "cn=client02,OU=In Build,OU=IT,dc=mydomain,dc=co,dc=uk" dsadd computer "cn=client03,OU=In Build,OU=IT,dc=mydomain,dc=co,dc=uk" etc If I did this one by one via the gui I can specify "user or group who can join this computer to the domain". Is there such a parameter within DSADD? thanks

No AFAIK. The common method is to edit the users accounts Log on to. To use command-line tool, you may use the net user /Workstation command to limit the workstations a domain user can logon to. Also check the following Powershell script: Modify Log On To (userWorkstations) User PropertiesPowerShell Script http://portal.sivarajan.com/2011/05/modify-log-on-to-userworkstations-user.html

No AFAIK. The common method is to edit the users accounts Log on to. To use command-line tool, you may use the net user /Workstation command to limit the workstations a domain user can logon to. Also check the following Powershell script: Modify Log On To (userWorkstations) User PropertiesPowerShell Script http://portal.sivarajan.com/2011/05/modify-log-on-to-userworkstations-user.html

See how to do: http://social.technet.microsoft.com/Forums/en-US/ITCG/thread/ed0ee3d6-82cc-42a6-84d9-daa82832a916/ This could be granted on the OU level for the wanted user / group.This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

See how to do: http://social.technet.microsoft.com/Forums/en-US/ITCG/thread/ed0ee3d6-82cc-42a6-84d9-daa82832a916/ This could be granted on the OU level for the wanted user / group.This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.