Work with computers

Create a new computer

1. Click the Active Directory administrative unit then click AD Computers.

2. On the Actions menu, click New Computer.

3. Enter computer name.

4. Click Create.

View computer properties

1. Click the Active Directory administrative unit then click AD Computers.

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the check mark to the left of the computer’s name.

4. On the Actions menu, click Properties.

Move a computer

1. Click the Active Directory administrative unit then click AD Computers.

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the checkbox to the left of the computer’s name.

4. On the Actions menu, click Move.

5. Click Browse.

6. Enter the name target Organizational Unit (OU) in the search field and click Search Objects.

7. Click the check mark to the left of the OU’s name then click OK.

8. Enter a comment that will be recorded in the operational history log.

9. Click Move.

Enable Account

1. Click the Active Directory administrative unit then click AD Computers.

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the check mark to the left of the computer’s name.

4. On the Actions menu, click Enable Account.

5. Enter a comment that will be recorded in the operational history log.

6. Click Enable.

NOTE: The Enable Account action is also available for user accounts. You could add it to AD Users Web query.

Disable Account

1. Click the Active Directory administrative unit then click AD Computers

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the checkbox to the left of the computer’s name.

4. On the Actions menu, click Disable Account.

5. Enter a comment that will be recorded in the operational history log.

6. Click Disable.

NOTE: The Disable Account action is also available for user accounts. You could add it to AD Users Web query.

Computer Local Account Password

1. Click the Active Directory administrative unit then click AD Computers.

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the checkbox to the left of the computer’s name.

4. On the Actions menu, click Local Account Password.

5. Select New Expiration Time and click Set New Expiration Time.

Windows LAPS

1. Click the Active Directory administrative unit then click AD Computers.

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the checkbox to the left of the computer’s name.

4. On the Actions menu, click Windows LAPS.

5. Here, you can view or copy the local password of the computer, review current expiration settings and provide a new expiration date and time.

6. Click Update expiration time.

Delete a computer

1. Click the Active Directory administrative unit then click AD Computers.

2. Enter the name of the computer in the search field and click Search Objects.

3. Click the checkbox to the left of the computer’s name.

4. On the Actions menu, click Delete.

5. Enter a comment that will be recorded in the operational history log.

6. Click Delete.

Configure delegation

Use the Delegation tab in the Properties web action for AD computers to configure Kerberos delegation for AD objects. Refer to the following steps:

1. Click the Active Directory administrative unit, then click AD Computers.

2. Enter the name of the computer object in the search field and click Search Objects.

3. Click the checkbox to the left of the object.

4. In the Actions menu, click Properties.

5. Select the Delegation tab.

6. Select the delegation option:

   • To configure unconstrained delegation, select the Trust this computer for delegation to any service (Kerberos only) check.

   • To configure constrained delegation, select the Trust this computer for delegation to specified services check. Define the authentication protocol and services to define the object and corresponding services. Click OK to save the changes.

7. Click Update to save the changes.