Computer Accounts

Every computer running Windows 2000 that joins a domain is assigned a computer account within the domain. Similar to user accounts, computer accounts provide a means for authenticating and auditing a computer's access to the network, and to domain resources. Each computer connected to the network must have its own unique computer account. Computer accounts may also be created using Active Directory Users and Computers.

Adding and deleting computer accounts

To add a computer account:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.

   

2. In the console tree, right-click Computers or click the on the container in which the computer is to be added, point to New, and then click Computer. A New Object – Computer window will appear.

   

3. Enter the computer name.

4. The Default Domain Policy settings enable only members of the group Domain Admins to add a computer account to a domain. Click Change to specify a different user or group that can add this computer to the domain.

5. Click OK.

To delete a computer account:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.

2. In the console tree, click Computers. Or, click the folder in which the computer is located.

3. In the details pane, right-click the computer, and then click Delete.

Adding a computer account to a group

Adding a computer accounts to a group allows for the assignment of permissions to all of the computer accounts in that group and for filtering of Group Policy settings for all accounts within that group.

To add a computer account to a group:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.

2. In the console tree, click Computers.

3. Or, click the folder in which the computer is located.

4. In the details pane, right-click the computer, and then click Properties.

5. On the Member Of tab, click Add.

6. Click the group to which the computer is to be added, and then click Add. Or, to add the computer to more than one group, press and hold CTRL and click the groups to which the computer will be added, and then click Add.