To disable a computer account
- In the console tree, locate and select the folder that contains the computer account.
- In the details pane, right-click the computer account and click Disable Account.
Introduction
Getting Started
Starting the Active Roles console
User Interface overview
View mode
Using Managed Units
Setting up filter
Finding objects
One Identity Starling Two-factor Authentication for Active Roles
User or Service Account Management
Steps for searching for a user, contact, or group
Steps for searching for a computer
Steps for searching for an Organizational Unit
Steps for using advanced search options
Steps for building a custom search
LDAP syntax
Getting policy-related information
About user accounts
User account management tasks
Group Management
Creating a user account
Finding a user account
Copying a user account
Modifying user account properties
Renaming a user account
Disabling and enabling a user account
Resetting user password
Adding user accounts to groups
Removing a user account from groups
Changing a user’s primary group
Performing Exchange tasks on a user account
Moving user accounts
Exporting and importing user accounts
Deleting user accounts
Deprovisioning a user account
Restoring a deprovisioned user account
Managing user certificates
Management of group Managed Service Accounts
About groups
Group management tasks
Computer Account Management
Creating a group
Finding a group
Copying a group
Modifying group properties
Changing group type and group scope
Renaming a group
Assigning a manager over a group
Adding members to a group
Removing members from a group
Performing Exchange tasks on a group
Moving groups
Exporting and importing groups
Deleting groups
Deprovisioning groups
Restoring deprovisioned groups
Administering query-based distribution groups
Administering dynamic (rule-based) groups
Using temporal group memberships
About computer accounts
Computer account management tasks
Organizational Unit Management
Creating a computer account
Finding a computer account
Modifying computer account properties
Disabling and enabling a computer account
Resetting a computer account
Adding computer accounts to groups
Removing a computer account from groups
Moving computer accounts
Exporting and importing computer accounts
Deleting computer accounts
Managing a remote computer
Using Remote Desktop Connection
Viewing BitLocker recovery passwords
About Organizational Units
Organizational Unit management tasks
Management of Contacts
Management of Exchange Recipients
Creating an Exchange mailbox
Steps for creating a user mailbox
Steps for creating a room or equipment Mailbox
Steps for creating a linked mailbox
Steps for creating a shared mailbox
Performing Exchange tasks
Managing Exchange-related properties
Exchange General tab
Exchange Advanced tab
E-mail Addresses tab
Mail Flow Settings tab
Mailbox Settings tab
Mailbox Features tab
Calendar Settings tab
Resource Information tab
Master Account tab
Mailbox Sharing tab
Managing Unified Messaging users
Steps for disabling a computer account
Steps for enabling a disabled computer account
To enable a disabled computer account
- In the console tree, locate and select the folder that contains the computer account.
- In the details pane, right-click the computer account and click Enable Account.
|
|
NOTE: The Enable Account command is displayed if the account is disabled; otherwise, the Disable Account command is displayed on the menu. |
Resetting a computer account
A computer account is normally reset if the computer has been taken offline and completely reinstalled. Resetting the account allows the (rebuilt) computer to rejoin the domain using the same name. If the computer account is reset whenever the computer has not been reinstalled, the computer cannot authenticate in the domain.
To reset a computer account, right-click the account, and click Reset Account. This command resets the computer account password. The Reset Account command is not available on domain controller accounts: resetting the password for domain controllers using this method is not allowed.
Adding computer accounts to groups
Adding a computer account to a group enables you to assign permissions to all computer accounts in the group, and to filter Group Policy settings on all accounts in the group.
To add computer accounts to groups, select the accounts, right-click the selection, and click Add to a Group. This displays the Select Objects dialog box where you can select the groups to which you want to add the accounts (see Adding user accounts to groups earlier in this document).
You can also add a computer account to groups by modifying the group membership list on the Member Of tab in the Properties dialog box. To display the Properties dialog box, right-click the computer account and click Properties.
The Member Of tab lists the groups to which the computer account belongs, as shown in the following figure. If the Show nested groups check box is selected, the list also includes the groups to which the computer account belongs because of group nesting.
The Temporal Membership Settings button can be used to specify the date and time when the computer should be added or removed from the selected groups. For more information about this feature, see Using temporal group memberships earlier in this document.
Figure 20: Adding computer accounts to groups
On the Member Of tab, you can manage groups directly from the list of groups: right-click a group and use commands on the shortcut menu.
You can add the computer account to groups by clicking Add on the Member Of tab. This displays the Select Objects dialog box, allowing you to select the groups to which you want to add the computer account.