8.1 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Goals

Create computer accounts

Manage computer account properties

Locate and move computer accounts

Troubleshoot computer accounts

8.2 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Creating Computer AccountsComputer account Required for computers running Windows Server 2003,

Windows 2000, Windows XP, and Windows NT Is used to determine access rights for the computer and

Group Policies applied to that machine, regardless of the logged on user

When installing Active Directory on a server, a computer account is automatically created for the new domain controller in the domain by the Dcpromo utility

(Skill 1)

8.3 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Creating Computer Accounts (2)Creating a computer account To create a computer account before the computer is

added to the domain (preemptively), use the Active Directory Users and Computers console

You can also create a computer account in the default containers by joining a client or member server to a domain

You can also preemptively create computer accounts using the command line application, Dsadd.exe

(Skill 1)

8.4 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Creating Computer Accounts (3)Required permissions The Add Workstations to Domain right (allows all users

who have logged on to the domain to create up to 10 computer accounts)

The Create computer objects permission on the container in which the account will be created (allows the user to create an unlimited number of computer accounts in that specific container)

(Skill 1)

8.5 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-1 Using Active Directory Users and Computers to create a new computer account

(Skill 1)

8.6 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-2 The New Object – Computer dialog box

Designates that this

machine is a Windows

NT computer, which

uses lower levels of

authentication security

Designates that this

machine is a Windows

NT backup domain

controller

(Skill 1)

8.7 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-3 The Network Identification tab on the System Properties dialog box (Windows 2000 Professional)

(Skill 1)

8.8 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-4 The Identification Changes dialog box (Windows 2000 Professional)

(Skill 1)

8.9 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-5 The Domain Username and Password dialog box

Figure 8-6 The Network Identification: Welcome to the domain message

(Skill 1)

8.10 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Managing Computer Account Properties After you create a computer account, you can view and

modify the properties of the account Account Properties dialog box for a computer account

(Skill 2)

GeneralOperating SystemMember OfLocationManaged By

ObjectSecurityDial-inDelegation

8.11 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-7 The General tab (Windows 2000 Native domains)

(Skill 2)

8.12 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-8 The Member Of tab

(Skill 2)

8.13 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-9 The Managed By tab

(Skill 2)

8.14 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-10 The Object tab

(Skill 2)

8.15 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-11 The Delegation tab (Windows Server 2003 domains)

(Skill 2)

8.16 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Locating and Moving Computer Accounts

Original locations Computer accounts for member servers and clients are created

in the Computers container in the domain Computer accounts for domain controllers are created in the

Domain Controllers OU by default Use the Active Directory Users and Computers console to move

computer accounts Select the computer account or accounts to move and right-click Select Move to open the Move dialog box and select the

appropriate OU Alternatively, you can select the accounts and drag them into the

appropriate OU

(Skill 3)

8.17 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Locating and Moving Computer Accounts (2)

To locate a particular computer accountRight-click the component of Active Directory to search in

(such as a specific OU or the entire domain) and click FindChoose Computers in the Find list box and type the name

(or partial name) of the computer in the Computer name text box

You can also search based on the role of the computer (Workstation/Server or Domain Controller)

(Skill 3)

8.18 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-12 The Move dialog box

(Skill 3)

8.19 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-13 Opening the Find Computers dialog box

(Skill 3)

8.20 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-14 The Find Computers dialog box

(Skill 3)

8.21 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Troubleshooting Computer Accounts

Typical problems Problems related to the computer account password Problems related to restoring the computer’s configuration using

an outdated (older than 7 days) System State backup or Automated System Recovery (ASR) backup set

The accidental deletion of the computer account from the domain controller

Solutions In most cases, you can solve the majority of computer account-

related problems by recreating the account If this is not feasible (such as when this problem occurs on a

domain controller), reset the computer account password in Active Directory Users and Computers

(Skill 4)

8.22 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment

Lesson 8: Introducing Computer Accounts

Figure 8-15 Resetting a computer account

(Skill 4)