Options

Question about Active Directory

sizeonsizeon Member Posts: 321
in General Certification
I understand that computer accounts in AD are created by either joining a pc to the domain or manually creating them in AD. Is there any benefit/advantage in creating the computer object in AD instead of joining the pc to the domain.
· Share on FacebookShare on Twitter

Comments

  • Options
    MrAgentMrAgent Member Posts: 1,310 ■■■■■■■■□□
    If you pre-create the PC before joining, you can decide what OU it does in. You can also set who manages it etc. If you just join it to the domain, it goes the computers container by default.
    · Share on FacebookShare on Twitter
  • Options
    HondabuffHondabuff Member Posts: 667 ■■■□□□□□□□
    Best practice is to join the PC to the domain, Move it from the Computers OU to the proper OU. Run gpupdate /force on the pc and reboot. You can check after the reboot if it received the proper Group Policies by using the gpresult /r option. Trying to add machines manually has too much administrative overhead.
    “The problem with quotes on the Internet is that you can’t always be sure of their authenticity.” ~Abraham Lincoln
    · Share on FacebookShare on Twitter
Sign In or Register to comment.