Locate pre-created computer object in Active Directory with the objects own username and password. (319099)
Locate pre-created computer object in Active Directory with the objects own username and password.
Is it possible to find the location of a pre-created computer object in Active Directory with the objects own username and password?
Create a computer object in AD and reset it's password.
Example of resetting the password to a known one using PowerShell where the domain is idm.hal.lab, the computer object is test1 and the password is being set to test123:
Set-ADAccountPassword -Identity 'CN=test1,CN=computers,DC=idm,DC=hal,DC=lab' -Reset -NewPassword (ConvertTo-SecureString -AsPlainText "test123" -Force)
On an unjoined Linux system configure the realm in vas.conf with the domain to be joined to:
/opt/quest/bin/vastool configure realm idm.hal.lab
The the following ldapsearch command can be used to search the domain for the same object using it's own credentials.
/opt/quest/bin/ldapsearch -u test1 -w test123 -b 'dc=idm,dc=hal,dc=lab' '(&(objectClass=computer)(sAMAccountName=test1$))'
© 2020 One Identity LLC. ALL RIGHTS RESERVED.