You can remove computer accounts from Active Directory groups with the Active Roles Console.
To remove a computer account from a group
-
In the Console tree, locate and select the folder that contains the computer account you want to remove from a group.
-
In the details pane, right-click the computer account, then click Properties.
-
On the Member Of tab in the Properties dialog, clear the Show nested groups check box, select the group from which you want to remove the computer account, and click Remove.
NOTE: Consider the following when removing an object from a group:
-
If you have not cleared the Show nested groups check box, the list on the Member Of tab also includes the groups to which the object belongs indirectly, that is, because of group nesting. If you select such a group from the list, the Remove button is unavailable. An object can be removed only from those groups of which the object is a direct member.
-
You cannot remove objects from their primary groups. Instead, you can change the primary group of an object. To do so, on the Member Of tab, select a different group from the list, then click Set Primary Group.
You can move computer accounts from one Active Directory container to another with the Active Roles Console.
To move a computer account
-
In the Console tree, locate and select the folder that contains the computer account you want to move.
-
In the details pane, right-click the computer account and click Move to display the Move dialog.
-
In the Move dialog, select the folder to which you want to move the computer account, then click OK.
NOTE: Consider the following when moving an object:
-
With Active Roles, directory objects can only be moved within the same domain. This means that the folder to which you want to move the object must belong to the same domain as the object.
-
You can move multiple objects at a time with the Move dialog. To open the dialog, select the objects, right-click the selection, and click Move. To select multiple objects, press and hold Ctrl, then click each object.
-
To locate the object that you want to move, use the Find function of Active Roles. Once you found the accounts, open the Move dialog by right-clicking the object, and clicking Move.
-
The Console provides the drag-and-drop function for moving objects. To move objects, you can drag the selection from the details pane to a destination container in the Console tree.
With the Active Roles Console, you can export computer accounts to an XML file and then import them from that file to populate a container in a different domain. The export and import operations provide a way to relocate computer accounts between domains.
To export computer accounts, select them, right-click the selection, and select All Tasks > Export. In the Export Objects dialog, specify the file where you want to save the data, and click Save.
To import computer accounts, right-click the container where you want to place the accounts, and then click Import. In the Import Directory Objects dialog, select the file to which the computer accounts were exported, and click Open.
You can delete Active Directory computer accounts with the Active Roles Console.
To delete a computer account
-
In the Console tree, locate and select the folder that contains the computer account you want to delete.
-
In the details pane, right-click the computer account, then click Delete.
NOTE: Consider the following when deleting a computer account:
-
Deleting an account is a destructive operation that cannot be undone. Once an account is deleted, the permissions and memberships associated with that account are also permanently deleted. Because the security ID (SID) for each account is unique, a new account with the same name as the previously deleted account does not automatically receive the permissions and memberships that the previously deleted account had. To duplicate a deleted account, you must recreate all permissions and memberships manually.
-
You can delete multiple objects at the same time by selecting the objects, right-clicking the selection, and clicking Delete. To select multiple objects, press and hold Ctrl, then click each object. If you select multiple objects, clicking Delete displays a dialog. To delete all the selected objects, select the Apply to all items check box, then click Yes.
-
To locate the objects for deletion, use the Find function of Active Roles. Once you found the objects, delete them by selecting the objects in the list of search results, right-clicking the selection, and clicking Delete.
-
When attempting to delete an object, you may receive an error message that access is denied to the object. This can typically occur if the object is protected from deletion. To remove this protection, navigate to the Properties > Object tab of the object you want to delete, then clear the Protect object from accidental deletion check box. After that, try deleting the object again.
