1. 8.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Goals  Create computer accounts  Manage computer account properties  Locate and move computer accounts  Troubleshoot computer accounts

2. 8.2 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Creating Computer Accounts Computer account  Required for computers running Windows Server 2003, Windows 2000, Windows XP, and Windows NT  Is used to determine access rights for the computer and Group Policies applied to that machine, regardless of the logged on user  When installing Active Directory on a server, a computer account is automatically created for the new domain controller in the domain by the Dcpromo utility (Skill 1)

3. 8.3 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Creating Computer Accounts (2) Creating a computer account  To create a computer account before the computer is added to the domain (preemptively), use the Active Directory Users and Computers console  You can also create a computer account in the default containers by joining a client or member server to a domain  You can also preemptively create computer accounts using the command line application, Dsadd.exe (Skill 1)

4. 8.4 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Creating Computer Accounts (3) Required permissions  The Add Workstations to Domain right (allows all users who have logged on to the domain to create up to 10 computer accounts)  The Create computer objects permission on the container in which the account will be created (allows the user to create an unlimited number of computer accounts in that specific container) (Skill 1)

5. 8.5 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-1 Using Active Directory Users and Computers to create a new computer account (Skill 1)

6. 8.6 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-2 The New Object – Computer dialog box Designates that this machine is a Windows NT computer, which uses lower levels of authentication security Designates that this machine is a Windows NT backup domain controller (Skill 1)

7. 8.7 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-3 The Network Identification tab on the System Properties dialog box (Windows 2000 Professional) (Skill 1)

8. 8.8 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-4 The Identification Changes dialog box (Windows 2000 Professional) (Skill 1)

9. 8.9 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-5 The Domain Username and Password dialog box Figure 8-6 The Network Identification: Welcome to the domain message (Skill 1)

10. 8.10 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Managing Computer Account Properties  After you create a computer account, you can view and modify the properties of the account  Account Properties dialog box for a computer account (Skill 2)  General  Operating System  Member Of  Location  Managed By  Object  Security  Dial-in  Delegation

11. 8.11 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-7 The General tab (Windows 2000 Native domains) (Skill 2)

12. 8.12 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-8 The Member Of tab (Skill 2)

13. 8.13 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-9 The Managed By tab (Skill 2)

14. 8.14 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-10 The Object tab (Skill 2)

15. 8.15 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-11 The Delegation tab (Windows Server 2003 domains) (Skill 2)

16. 8.16 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Locating and Moving Computer Accounts  Original locations  Computer accounts for member servers and clients are created in the Computers container in the domain  Computer accounts for domain controllers are created in the Domain Controllers OU by default  Use the Active Directory Users and Computers console to move computer accounts  Select the computer account or accounts to move and right-click  Select Move to open the Move dialog box and select the appropriate OU  Alternatively, you can select the accounts and drag them into the appropriate OU (Skill 3)

17. 8.17 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Locating and Moving Computer Accounts (2)  To locate a particular computer account  Right-click the component of Active Directory to search in (such as a specific OU or the entire domain) and click Find  Choose Computers in the Find list box and type the name (or partial name) of the computer in the Computer name text box  You can also search based on the role of the computer (Workstation/Server or Domain Controller) (Skill 3)

18. 8.18 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-12 The Move dialog box (Skill 3)

19. 8.19 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-13 Opening the Find Computers dialog box (Skill 3)

20. 8.20 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-14 The Find Computers dialog box (Skill 3)

21. 8.21 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Troubleshooting Computer Accounts  Typical problems  Problems related to the computer account password  Problems related to restoring the computer’s configuration using an outdated (older than 7 days) System State backup or Automated System Recovery (ASR) backup set  The accidental deletion of the computer account from the domain controller  Solutions  In most cases, you can solve the majority of computer account- related problems by recreating the account  If this is not feasible (such as when this problem occurs on a domain controller), reset the computer account password in Active Directory Users and Computers (Skill 4)

22. 8.22 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts Figure 8-15 Resetting a computer account (Skill 4)