Chapter-4

Working with Computer Accounts

Computer Accounts:

 These accounts are stored in the computers container with in active directory.
 Used to uniquely identify, authenticate and manage computers in the domain.
 Created for any computers that joins the domain from win2000 professional, win-XP
professional or win server 2003(without domain controller).
 You can manage computer accounts through active directory users and computers utility.
Creating computer accounts:

There are two options to create computer accounts

1. Through active directory users and computers utility (form server computer) before the
computer is joined to the domain.
2. Through computer name tab of clients computer’s properties (from clients computer).
In order to add computers to the domain you must be logged in as a member of
administrator/as an administrator

 To create a computer account in the active directory users and computers utility
take the following steps:

1. select start>administrative tools>active directory users and computers to open active

directory users and computers utility as follows
 2. right click the computers folder and select new from the pop up menu and then select
computer
3. the new object computer dialog box will appear as shown that uniquely identify the
object with in active directory

4. Click next and finish the step

To add computer to the domain through the computer tab of computer properties dialog box
(from client’s computer) follow the following steps:

1. On the computer that you are

adding to the domain, select
>start>right click my computer
and select properties to display
properties dialog box as follows
2. Click computer name tab from the system properties dialog box to display system
properties dialog box with change button as follows

3. Click change button from system properties to display computer name change dialog
box

4. Type computer name in the computer name box

 5. select domain option under member of and type the name of domain controller to which
the computer will join as indicated above
6. click ok button, the computer name changes request for username and password of an
account with permission to join the domain
7. Type the user name and password of a user who has a right to add the computer to the
domain (member of administrator/administrator) and click ok
8. You will see a confirmation dialog box welcoming you to the domain that you have
joined. Click ok button.
9. Click ok again to restart the computer

Resetting computer accounts

 Computer accounts are assigned passwords that are changed (reset) every 30 days
as a part of active directory security
 Although the user password and user name is correct the user can’t logon to
computer that did not receive a reset message from the network administrator
 Right click the computer you want to reset its account from active directory users
and computers under computers container and select reset account
Trouble shooting computer accounts

If you have a problem in connecting a computer account to a domain, you should check the
following conditions:

 The computer joined to the domain must be running win XP professional or win server
2003
 Network connection to the domain controller (NIC central device, cable…)
 The computer joining the domain must have unique computer name and IP address.
 The user who is adding the computer to the domain must login as
o A member of account operator group
o Domain admin group
o Enterprise admin group or
o Administrator
Locating /searching objects in the active directory:

If your active directory stores hundreds or thousands of users, computers and other objects, it is
time consuming to locate specific objects easily.

 Active directory users and computers offers the utility to search:

o Users, contacts and groups
o Computers
o Printers
o Shared folders…
Procedures:

 From active directory users and computers right click the domain you want to search
 Select find
 Type the name of the user, group or computer you want
 Click find now icon
 The search result will be displayed in the bottom of the dialog box