Creating a Computer Object

Creating a Computer Object

Computers are represented as accounts and objects in Active Directory, just as users are. In

fact, behind the scenes, a computer logs on to the domain just as a user does. The computer

has a user name—the computer’s name with a dollar sign appended, for instance,

DESKTOP101$—and a password that is established when you join the computer to the

domain, and it’s changed automatically every thirty days or so thereafter. To create a computer

object in Active Directory:

1. Open the Active Directory Users And Computers snap-in.

2. In the console tree, expand the node that represents your domain (such as contoso.com)

and navigate to the OU or container (for instance, Users) in which you want to create the

computer.

3. Right-click the OU or container, choose New, and then select Computer.

The New Object – Computer dialog box appears, as seen in Figure 2-7.

4. In the Computer Name box, type the computer’s name.

Your entry will automatically populate the Computer Name (Pre-Windows 2000) box.

5. Do not change the name in the Computer Name (Pre-Windows 2000) box.

6. The account specified in the User Or Group field will be able to join the computer to the

domain. The default value is Domain Admins. Click Change to select another group or

user.

Generally, you will select a group that represents your deployment, desktop support,

or help desk team. You can also select the user to whom the computer is assigned. You

will explore the issues related to joining the computer to the domain in Chapter 5,

“Computers.”

7. Do not select the check box labeled Assign This Computer Account As A Pre-Windows

2000 Computer unless the account is for a computer running Microsoft Windows NT 4.0.

8. Click OK.

Computer objects have a number of properties that are useful to configure. These can be

specified after the object has been created.

9. Right-click the computer and choose Properties.

10. Enter the properties for the computer.

Be sure to follow the naming conventions and other standards of your organization.

The computer’s Description field can be used to indicate who the computer is assigned

to, its role (for instance, a training-room computer), or other descriptive information.

Because Description is visible in the details pane of the Active Directory Users And Computers

snap-in, it is a good place to store the information you find most useful to know

about a computer.

There are several properties that describe the computer, including DNS Name, DC Type,

Site, Operating System Name, Version, and Service Pack. These properties will be populated

automatically when the computer joins the domain.

The Managed By tab can be used to link to the user or group responsible for the computer.

Click the Change button underneath the Name box. To search for groups, you

must first click the Object Types button and select Groups. The Select Users, Contacts,

Or Groups dialog box is discussed later in this lesson. The remaining contact information

on the Managed By tab is populated from the account specified in the Name box.

The Managed By tab is typically used for contact information. Some organizations use

the tab to indicate the support team (group) responsible for the computer. Others use

the information to track the user to whom the computer is assigned.

11. Click OK.

Reference: Configuring Windows Server 2008 Active Directory

Dan Holme, Danielle Ruest, Nelson Ruest, Tony Northrup