In previous sections we've talked about operational tasks that can be performed on the other accounts
and have active directory use and powers show.
This lessons focus on performance similar operations on computer objects manage and computer objects
is not much different from managing user objects.
All you need to do is to use the correct.
Come on lads and the rest of the process remains the same.
We'll be talking about the following topics.
Create and computer accounts modifying Computer Properties enabling or disabling computer accounts deleting
computer accounts.
Let's start with creating computer accounts.
Most system administrators do not create computer accounts manually inactive directory.
Instead they join computers to the domain and the account gets created automatically after work.
Automatic object creation the administrator removes the computer accounts from the default container
to the desired or you.
It looks quite simple.
But why is there a need to create a manual computer account previously mentioned approach will work
for small organizations where one set of system administrators will manage everything and they will
have all privileges.
But in large organizations that desktop or server builds happen in an automated way using deployment
solutions such as Windows deployment services where the build process looks for a computer account in
Active Directory to join the server desktop to the domain.
This process is called pre stage and of computer records and it has a good set of advantages such as
to them.
They owe you where you want to place the computer group membership and so on.
So let's now look at a few examples of great and a computer account Active Directory provides a common
lad called new ADA computer to facilitate the computer account creation.
The following commands will create a computer account with the name Lapis or with three or some other
name in the default computer container.
So let's run it new there's a computer Dash.
Name Lapis or we one or leopard service 3 whatever server you need to add and pass through parameter
to create computer account in a particular organizational unit inactive directory.
We could use the following command.
New dash 80 computer Dash.
Name Lapis RI and pass to this o u in which we want to create the computer account.
For example computers which is sub O U of production O U and in control also dot com domain.
And of course pass through parameter to see the results ensure that oh you mentioned in the end this
example command exists prior to the computer account creation if not the command execution fails.
Another example when you want to create the computer account but keep it in a disabled state.
You could use the following command as an example.
New this.
A computer Dash.
Name this path you should type the path to this or you in which the computer will be located thus enabled
dollar character false and pass through parameter.
So in this example that enable parameter which is set to false is responsible for disabling the computer
account.
Of course to see the list of all the options for this command later and some examples you could read
its complete help content.
This can be done to you then the following command get help.
New dash a computer Dash full or dash examples orders online.
If you want to read on line updated help on this command land.
Now let's move 1 and talk about modifying computer accounts.
Computer account attributes often need to be modified for example because many computer accounts are
created before the computers are actually assigned to users.
Attributes such as description department and location can not be configured at the same time of an
account creation.
In addition the ownership of a computer can be transferred to a new user or new department or a computer
might be physical and moved to a new location.
In such circumstances the computer account attributes need to be modified so let's see how to do it
in power shell using whereas command lets available for computer objects.
As for setting the description of a computer account active directory power shall module has the set
there's a computer command led form modifying computer account.
Properties in active directory.
Remember the set.
Thus a the user command land.
We use that to modify user object properties.
It is similar to that but for computer accounts to update the description of a single computer you can
use the following command.
This example updates the description of the Lapis are we too.
For example computer object.
So it looks like that said does a computer dash identity Lapis Serbia one or two.
I've got three of them in my lap and description property and we have to type the description and quotes
for example member of server or web server or whatever description you need to update the set dash 80
computer command LAT has the ability to set values for the majority of object attributes to see the
list of attributes it can set check IDs help content you then the following command get this help or
just help set there's a computer that's full or examples you can use the Guard does a computer command
to check if the description is set for whatever server you need.
So for this you should type get there's a computer lab a service one the property description.
Now let's talk about moving computer accounts to a different oh you sometimes you might need to move
computer accounts to different or use as the user might change the location or server accounts in order
to segregate them according to their roles or you might want to move computer accounts from the default
so you two respective office location or use.
Let's see a few of the examples are related to the computer account movements across organizational
units as we've done for user accounts here too we can make use of the move this a the object come and
let to move computer accounts from Barno you to another level or command moves the lab a survey one
computer account from the default computer container to computers or you inside production or you.
So the command looks like that move does Ada object this identity will be moving up a survey which is
located in computers in control so dot com the men and women will be moving it to the target path.
So here we have to specify the path where we are moving the computer to.
In this case it's computers which is SOP or wheel of production or you aren't at all.
It's also in control so dot com domain.
And of course pass through parameter to see the results since it's not possible to provide the full
distinguish name of the object we want to move every time we can either use that get there's a computer
or storage Dash 80 account command led to storage by its name or some other property and then pass to
pass the output to the moved us 80 object command led and the example for that is here get a computer
does filter the name should be equal to Lapis are we 1 and pipe it to move this 80 object with the target
pass parameter and the target pass will look like that.
Computers production controls so dot com and pass through parameter.
Similarly these search for a string in the description of the computer objects and move them to the
designated Oh you using the following command get a computer filter.
The description should look like server or as a movie.
Pipe it to move idea object and target pass for that.
This command will look for computer accounts that have the string server in their description and will
move them to the designated o you.
Similarly you can search based on any other criteria and move them to different or use.