none
GP to disabled computer object

    Question

  • Hello 

    Do we have any GP to disable the computer object,i mean

    when we apply the policy to OU, then in that OU computer object should not be enabled by anyone.

    Please suggest.

    Thanks


    NA

    Friday, June 10, 2016 2:39 PM

Answers

  • You wouldn't do this with group policy.

    Instead, you would use the delegate control wizard in Active Directory Users and Computers (or ADAC) and deny the ability for users to enable computer accounts.


    If my answer helped you, check out my blog: Deploy Happiness

    • Proposed as answer by DonPick Saturday, June 11, 2016 12:20 AM
    • Marked as answer by Jay GuModerator Wednesday, June 15, 2016 5:48 AM
    Friday, June 10, 2016 3:05 PM

All replies

  • You wouldn't do this with group policy.

    Instead, you would use the delegate control wizard in Active Directory Users and Computers (or ADAC) and deny the ability for users to enable computer accounts.


    If my answer helped you, check out my blog: Deploy Happiness

    • Proposed as answer by DonPick Saturday, June 11, 2016 12:20 AM
    • Marked as answer by Jay GuModerator Wednesday, June 15, 2016 5:48 AM
    Friday, June 10, 2016 3:05 PM
  • Hi,

    Thanks for your post.

    Are there any updates?

    If the reply above has resolved your problem, please mark it as answer as it would be helpful to anyone who encounters the similar problem.

    In addition, I suggest you reserve the enable computer permission of administrator.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, June 13, 2016 9:32 AM
    Moderator