Then once the box is joined just remotely change the local admin account. Walk the user through reset of the local account - the tools are pretty simple any monkey could be walked through the process.

Other wise that would be pretty messed up you could login as guest or something on a machine - join it to a domain you have setup, and since domain admins are give local admin rights on the box that joins the domain you would now have an account on the box with full admin rights. Previously, this was handled via an MSI installer, however with Microsoft Windows 10 version 1809 (October Update) and later, you must install RSAT using Features on Demand (or DISM) as the installer no long works. Normally any domain authenticated user can join 10 machines to a domain - unless you have correctly adjusted these permissions.īut to actually join the machine I do believe the account your logged in on the machine has to have local admin rights. In this blog post I’ll explain how to install RSAT (Remote Server Administration Tools) on Windows 10. At least you would have to copy the commandline tool to your image. You can always create the computer account on the domain and setup any account to be able to join the domain from the domain side. Netdom seems to be a Server online Commandline Tool. But yeah I do believe you have to have local admin account get it to join a domain. Hmmmm - its been a while since I have done this. Starting with Windows 10 October 2018 Update, RSAT is included as a set of Features on Demand in Windows 10. Obtain the tool netdom.exe from Windows Server 2008 or Windows Server 2008 R2 CD to enable the Active Directory Domain Services role.

Netdom windows 10 download