Creating computer objects

When a desktop computer or member server is joined to a domain, it will create a computer object in Active Directory.

This computer object can be created before being added to the domain. This will not add the device to the domain, but it can be used with offline domain joins and RODC domain joins.

In order to create a computer object, we can use the New-ADComputer cmdlet. To view the complete syntax of the command, use this:

Get-Command New-ADComputer -Syntax

The minimum attribute you need to define in order to create a computer object is -Name:

New-ADComputer -Name "REBEL-PC-01" -SamAccountName "REBEL-PC-01" -Path "OU=Computers,OU=Europe,DC=rebeladmin,DC=com"

In the preceding example, the command will create the computer object REBEL-PC-01 in the OU=Computers,OU=Europe,DC=rebeladmin,DC=com OU. If you do not define the path, it will create the object under the default computer container CN=Computers,DC=rebeladmin,DC=com:

We very rarely need mass computer-object creation in an organization. In case it's required, though, it can be done using a CSV method similar to user-object creation.

I am not going to explain group object administration here, which will instead be covered in detail in Chapter 8, Managing Users, Groups, and Devices.

All these objects can also be created using ADAC or ADUC, presented as a wizard in which you can define values for attributes:

The following screenshot shows the wizard to create a computer object using ADUC:

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.145.131.238