1
00:00:06,420 --> 00:00:11,880
Before you create a computer object an actor director you must have a place to put it.

2
00:00:12,150 --> 00:00:16,820
When you create a demand the computer's container is created by default.

3
00:00:16,830 --> 00:00:20,590
This container is the default location for the computer account.

4
00:00:20,730 --> 00:00:26,020
When a computer joins the domain this container is not an IOU.

5
00:00:26,040 --> 00:00:29,630
Instead it is an object of the container class.

6
00:00:29,670 --> 00:00:32,520
Its common name is computers.

7
00:00:32,520 --> 00:00:39,350
There are small but important differences between a container and tell you you can not create an IOU

8
00:00:39,450 --> 00:00:45,140
within a container so you can not subdivide the computers container.

9
00:00:45,150 --> 00:00:49,920
You also can not link GPO to akin to a container.

10
00:00:49,920 --> 00:00:58,710
Therefore it is recommended that you create custom 0 use to host computer objects instead of using the

11
00:00:58,790 --> 00:01:00,550
computer's container.

12
00:01:00,660 --> 00:01:07,950
Let's open active directory use there are some computers or you can open Active Directory administrative

13
00:01:07,950 --> 00:01:12,750
center and take a look at default location for computer objects.

14
00:01:12,750 --> 00:01:20,430
You can find the distinguished name here which provides a full description of the computer subject and

15
00:01:20,430 --> 00:01:27,360
of course you can take any action with this object like with any other object in Active Directory.

16
00:01:27,360 --> 00:01:34,740
Most organizations create at least 2 0 use for computer objects one for server resound to another to

17
00:01:34,740 --> 00:01:43,330
host computer accounts for client computers such as desktops laptops and other user devices.

18
00:01:43,360 --> 00:01:50,940
These 2 0 use are in addition to the domain controllers or you that is created by default.

19
00:01:50,940 --> 00:01:58,520
During the 80 days installation you can create computer objects in any oh you in your domain.

20
00:01:58,560 --> 00:02:05,610
There is no technical difference between a computer object in a client who you a computer object in

21
00:02:05,610 --> 00:02:13,350
a server or your computer object and the domain controller so you and even a computer object in an all

22
00:02:13,350 --> 00:02:15,710
you intended for users.

23
00:02:15,780 --> 00:02:24,420
However administrators typically create separate o use to provide a unique scopes of management so that

24
00:02:24,420 --> 00:02:32,480
they can delegate management of client objects to one team and management of server objects to another.

25
00:02:32,550 --> 00:02:41,070
Your administrative model might require you to do what your client and server or use into smaller groups.

26
00:02:41,070 --> 00:02:49,170
Many organizations create SAPO use bennies as server or you to classify and manage specific types of

27
00:02:49,170 --> 00:02:50,060
servers.

28
00:02:50,070 --> 00:02:56,760
For example you might create an all you for File and Print servers and owe you for database servers

29
00:02:57,030 --> 00:03:03,340
or any number of 0 use that categorize the server types in your organization.

30
00:03:03,420 --> 00:03:11,490
By doing so you can delegate permissions to manage computer objects in the appropriate o you to the

31
00:03:11,490 --> 00:03:15,360
team of administrators for each type of server.

32
00:03:15,360 --> 00:03:23,950
Similarly geographically distributed organizations with local desktop support teams often do white apparent

33
00:03:23,950 --> 00:03:29,040
to you for clients into SOP or use for each site.

34
00:03:29,040 --> 00:03:37,590
This approach enables each site's support team to create computer objects in the site for client computers

35
00:03:37,860 --> 00:03:47,160
and then use those computer objects to join computers to the domain your or use structure should reflect

36
00:03:47,160 --> 00:03:56,380
your administrative model so that your own use can provide single points of management for delegating

37
00:03:56,400 --> 00:03:57,510
administration.

38
00:03:57,780 --> 00:04:05,880
Additionally by using separate or use you can create various baseline configurations by using different

39
00:04:05,880 --> 00:04:14,670
GP shows that are linked to the client and the server or use group policy you can specify configuration

40
00:04:14,670 --> 00:04:23,830
for collections of computers by linking GP shows that contain configuration instructions to all use.

41
00:04:23,940 --> 00:04:32,130
It is common for organizations to separate clients into desktop and laptop or use use that can link

42
00:04:32,160 --> 00:04:41,520
GP shows that specify desktop or laptop configuration to the appropriate o use a tip for you.

43
00:04:41,520 --> 00:04:49,790
You can use the red deer or RCMP command line tool to reconfigure the default container for computers.

44
00:04:49,830 --> 00:04:57,060
For example if you want to change the default container for a computer stern or you called might my

45
00:04:57,060 --> 00:05:05,280
computers use the following syntax radio or ACM P or U equals my computer's coma.

46
00:05:05,820 --> 00:05:09,610
Sequels control so call my G C equals com.