Thanks for the response. I found the delegate control and the user can now add computers to the domain, but I'm confused about the changing of a computer name. I've tried changing the computer name with a local administrator and I get Access Denied. This is what I'm supposed to get. When I change the computer name with my domain admin account it works fine. There has to be a way to give a standard domain user control to change a computer name if he can add one to the domain... right?