You can move computer accounts from one Active Directory container to another with the Active Roles Console.
To move a computer account
-
In the Console tree, locate and select the folder that contains the computer account you want to move.
-
In the details pane, right-click the computer account and click Move to display the Move dialog.
-
In the Move dialog, select the folder to which you want to move the computer account, then click OK.
NOTE: Consider the following when moving a computer account:
-
With Active Roles, computer accounts, as well as other directory objects, can only be moved within the same domain. This means that the folder to which you want to move the account must belong to the same domain as the account.
-
You can move multiple objects at a time with the Move dialog. To open the dialog, select the objects, right-click the selection, and click Move. To select multiple objects, press and hold CTRL, then click each object.
-
To locate the object that you want to move, use the Find function of Active Roles. Once you found the accounts, open the Move dialog by right-clicking the object, and clicking Move.
-
The Console provides the drag-and-drop function for moving objects. To move objects, you can drag the selection from the details pane to a destination container in the Console tree.
With the Active Roles Console, you can export computer accounts to an XML file and then import them from that file to populate a container in a different domain. The export and import operations provide a way to relocate computer accounts between domains.
To export computer accounts, select them, right-click the selection, and select All Tasks > Export. In the Export Objects dialog, specify the file where you want to save the data, and click Save.
To import computer accounts, right-click the container where you want to place the accounts, and then click Import. In the Import Directory Objects dialog, select the file to which the computer accounts were exported, and click Open.
To delete computer accounts, select them, right-click the selection, and click Delete. Then, click Yes to confirm the deletion. If you select multiple accounts, clicking Delete displays the Delete Objects dialog. To delete all the selected accounts, select the Apply to all items check box, then click Yes.
NOTE: Deleting a computer account is a destructive operation that cannot be undone. If you re-create the deleted computer account later, the new account will not be able to authenticate in the domain until you rejoin the computer account to the domain. For this reason, One Identity recommends disabling computer accounts rather than deleting them.
You can delete Active Directory computer accounts with the Active Roles Console.
To delete a computer account
-
In the Console tree, locate and select the folder that contains the computer account you want to delete.
-
In the details pane, right-click the computer account, then click Delete.
NOTE: Consider the following when deleting a computer account:
-
To delete multiple computer accounts at the same time, select the accounts, right-click the selection, and click Delete. To select multiple accounts, press and hold CTRL, then click each account.
-
Once a computer account has been deleted, all permissions and memberships associated with that computer account are permanently deleted. Because the security ID (SID) for each account is unique, a new computer account with the same name as a previously deleted computer account does not automatically assume the permissions and memberships of the previously deleted account. To duplicate a deleted computer account, you must manually recreate all of its permissions and memberships.
-
To locate the computer accounts for deletion, use the Find function of Active Roles. Once you found the computer accounts, delete them by selecting the accounts in the list of search results, right-clicking the selection, and clicking Delete.
-
When attempting to delete a computer account, you may receive an error message that access is denied to the account. This can typically occur if the computer account is protected from deletion. To remove this protection, navigate to the Properties > Object tab of the computer account you want to delete, then clear the Protect object from accidental deletion check box. After that, try deleting the computer object again.
