What is the point of creating a computer object in Active Directory when you still have to join the PC?

What is the factor of developing a computer system object in Active Directory when you still need to sign up with computer systems to the domain name, which after that develops the object anyhow?

2022-06-07 15:17:25
Source Share
Answers: 3

You can pre - create a computer system object and also assign approval to a non - admin to execute the sign up with.

2022-06-07 15:58:40

We passed on out the capacity to create computer system accounts. Nonetheless, we have actually entrusted it to the ideal OU for the company. So offered the regular contoso.com that Microsoft makes use of, visualize that there is an OU for Europe. We intend to see to it all the computer system things get developed in Europe by the European admins. That makes certain all GPOs use suitably and also it makes certain that you do not get this chaotic computer systems folder at the origin. When the United States admins come, they can just create computer system accounts in the United States OU. Once more, GPOs use effectively, etc It additionally makes certain that a United States admin can not obtain a Europe computer system account. You understand.

2022-06-07 15:58:15

When you create the account first you can position it in the appropriate OU (and also with the appropriate protection teams, creds to Evan Anderson) from the beginning.

2022-06-07 15:42:28