how do I delegate a right to an account to join a domain without admin rights etc...

Hello, do you mean user accounts or computer accounts? AFAIK By default domain users can join only 10 computers to the domain. To change that: refer to this article: http://blogs.technet.com/b/jhoward/archive/2005/04/18/403817.aspx To delegate a user the right to join computer to a domain, refer to the permission mentioned in this Microsoft article: http://support.microsoft.com/kb/932455 To delegate a user the right to create user accounts then go to the Delegation Wizard, select user account and then then delegate what you want. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

Check this article. Thanks

joining machines to domain. computer accounts. The user/service account need rights to join machines to domain

Hello, see here about delgating admin tasks: http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx http://support.microsoft.com/kb/296999 http://support.microsoft.com/kb/294952/en-us http://support.microsoft.com/kb/243327/en-usBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.