Why would an administrator put join domain permissions on an OU such as workstation verses just using a service account with the same permissions? This question pertains to joining a workstation to a domain using sysprep, sccm, mdt, any tool.joseph nunez

Hi Joseph, Thanks for posting in Microsoft TechNet forums. Normally we can delegate Join Domain permission to users. I suggest we check Shaon's suggestion in the thread below: What is the best practice to give a user permission to Join to the Domain? http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/8aa21820-e22a-4395-a1e9-f40ed705be7a/ Regards Kevin

Hi Joseph, Thanks for posting in Microsoft TechNet forums. Normally we can delegate Join Domain permission to users. I suggest we check Shaon's suggestion in the thread below: What is the best practice to give a user permission to Join to the Domain? http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/8aa21820-e22a-4395-a1e9-f40ed705be7a/ Regards Kevin