Windows 7 / Security and Privacy

Configuring Properties of Computer Accounts

As with users and groups, there are many configuration tabs you can select when you are modifying a computer account. Right-click the computer name in Active Directory Users And Computers, and then select Properties. The following tabs are available:

  • Delegation: Allows you to configure delegation for the computer account. This tab is available only when the domain is operating in Windows Server 2003 or higher functional level.
  • General: Shows the computer's name and role and allows you to set a description. You configure the computer for delegation by selecting the Trust This Computer For Delegation option.
  • Location: Allows you to set a location for the computer.
  • Managed By: Allows you to specify the person or group responsible for the computer.
  • Member: Of Allows you to configure the group membership for the computer.
  • Object: Displays the canonical name of the user object with dates and Update Sequence Numbers. This tab is visible only in Advanced view.
  • Operating System: Displays the operating system version and service pack used by the computer.
  • Remote Install: Allows you to set the unique identifier (globally unique identifier [GUID]/universal unique identifier [UUID]) and the remote installation server to use for a managed computer. This tab is available only for a managed computer.
  • Security: Used to configure advanced permissions for users and groups that can access this computer object in Active Directory. This tab is visible only in Advanced view.
  • Dial-In: Used to set the computer's dial-in or VPN access controls as well as callback, IP address, and routing options for dial-in or VPN or both.

As you can see, much of the data for computer account properties is informational. The data you may need to change is probably on the Security tab, where you can add users or groups to the account and change permissions for users and groups that already exist or that you have added. You may also have to change the dial-in configuration as well as allow or deny dial-in access using the computer.

[Previous] [Contents] [Next]

In this tutorial:

  1. Managing Users, Groups, and Computers
  2. Managing Domain User Accounts
  3. Configuring User Account Policies
  4. Enforcing Password Policy
  5. Configuring Account Lockout Policy
  6. Creating Password Settings Objects and Applying Secondary Settings
  7. Understanding User Account Capabilities, Privileges, and Rights
  8. Assigning User Rights
  9. Creating and Configuring Domain User Accounts
  10. Configuring Account Options
  11. Configuring Profile Options
  12. Troubleshooting User Accounts
  13. Implementing and Creating Preconfigured Profiles
  14. Configuring Local User Profiles
  15. Implementing Mandatory User Profiles
  16. Managing User Data
  17. Using Offline Files
  18. Configuring Offline Files on Clients
  19. Maintaining User Accounts
  20. Moving User Accounts
  21. Resetting a User's Domain Password
  22. Creating a User Account Password Backup
  23. Managing Groups
  24. Understanding the Scopes of Groups
  25. Creating a Group
  26. Creating group accounts at the command line
  27. Modifying Groups
  28. Managing Computer Accounts
  29. Moving a Computer Account
  30. Configuring Properties of Computer Accounts
  31. Troubleshooting Computer Accounts