Best practice for service account

Question

Hello,

For security reasons, we don't want to use domain admin accounts for joining systems to the domain. But a normal user service account has a limited number to join systems to the domain. What's the best practice for the domain join service account during SCCM OSD?

Answer 1

Hi,

Thanks for posting in Microsoft MECM Q&A forum.

We can create the least privilege domain join account in below guides to join systems to the domain during OSD process.

Correct Domain Join Account Permissions – SCCM / MDT OS Deployment

Minimum Permissions Required for Account Used to Join Computers to a Domain During OS Deployment

Please note: The links are not from Microsoft, just for your reference. Thanks for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.