MCITP 70-640: Active Directory Computer Accounts

[@itfreetraining]

Thanks for the comment and the sub, much appreciated.

[@BijouBakson]

Very informative indeed. This whole playlist works perfectly with Windows DataCentre 2019 as if it was still 2012, so far. Great course. Much appreciated

[@NeerajLalu]

I wish you with do more videos , i am sure time is an issue but your course are so good people will pay either on Udemy or elsewhere , you are gifted teacher. Please don't ever take down these videos form you tube.Thanks

[@itfreetraining]

Thanks for your great feedback. We're committed to providing the highest quality IT training for free. :)

[@ramkumargupta9628]

This video is awesome, it is what i was looking for. Thank you keep uploading such informative videos.

[@ISMR2556]

Clear Concise and easy to follow amazing work guys!!

[@ossito]

great video, learned more in 15 minutes watching this video than my many hours of winging it on my own, lol, thanks, new sub here

[@itfreetraining]

Thanks. More videos on the way

[@itfreetraining]

Thanks. Glad you liked the video.

[@ESWARANM-Techguy]

Fantastic work sir... post more videos... it will helping me more...

[@itfreetraining]

Thank. More videos to come.

[@annapoornashanmugam9594]

All the videos of itfreetraining are great! I would like to know the attributes that get affected when changes are made in computer object tabs..

[@le614]

Outstanding video... Cant get any better than this. Thanks

[@itfreetraining]

Thanks for watching.

[@dilshadbegum9310]

👍Think u ss much very good computers courses r good jab !!!!!! I attended Thanks 👍🌺

[@itfreetraining]

Thanks very much.

[@itfreetraining]

Thanks very much

[@arantebw]

itfreetraining, thank you!

[@itfreetraining]

+Billy Wilson Arante You're welcome.

[@destasg]

excellent job. Keep it up.

[@skr0nytbe389]

I read in another article, the client machine added to AD responsible for resetting the password. But, in your video you mentioned AD takes care of that. I am confused. Please clarify.

[@itfreetraining]

This article explains it quite well. adsecurity.org/?p=280 Without knowing where in the video I refer to that I not sure what I was saying. I am taking a guess that I am referring to manually resetting the machine password. In AD you can manually reset the password which will break the trust relationship between the computer and the domain. When would you want to do this? Let's consider what normally happens. 1) By default every 30 days the computer will change it password. As you have probably read in the other article. 2) If the computer does no start up in 30 days that is o.k. It will do it next time it connects to the network. The password will not expires like user accounts. In some cases you may want to reset the password manually. 1) The process above fails for some reason and the computer cannot access the domain. When this occurs. Reset the password and remove the computer and put the computer back in. 2) There is a computer that was using that computer name but is no longer on the network. Maybe it has been replaced. When this occurs reset the password and add the next computer to the domain. Hope that clears that up.

[@MrFazi999]

very very Excellent video, I really appropriate u!!!

[@ESWARANM-Techguy]

good work sir...

[@riteshpatel4170]

Hello, these videos are amazing . could you please provide me the ppt for these videos ? I am preparing or MCSA certification.

[@Ragrik]

Thx for video. Can you tell me how can I add for example Helpdesk group as default group that can jpin prestaded computer accounts to domain?

[@itfreetraining]

You need to delegate the rights. right click the folder which contain the computer accounts and select delegate control. Select the option for custom tasks and select the options Computer objects, Create selected objects in this folder. That should do it.

[@gourishmesta4063]

If you could provide us for L2 support interview question and answers on windows 2008 in all lessons, that would be gr8ful..

[@மோகன்குமார்-ந6ண]

Hi,Could u tel me how to find who changed the password of the User Account and from which computer they did (IP / Name) ?

[@itfreetraining]

***** Have a look in the event viewer. There should be an event which will tell you who changed the password and the computer it was done from, however it won't give you the IP Address.

[@Cyberxpertz]

Hi, Could you help here, suppose i have created an OU called windows 7 computers, and i want to move all windows 7 computers that are joining to domain automatically in this OU. Is this possible by GPO?

[@itfreetraining]

Take a look here: technet.microsoft.com/en-us/library/cc770619.aspx?f=255&MSPPError=-2147217396 This should solve your issue.

[@itfreetraining]

If it's different OUs each time you can 'pre-make' the computer account in AD or join the computer using add-coumputer in Powershell.

[@garylparas]

How would you configure AD to not automatically joined any computer to the domain without manually first creating a computer account entry in AD or Pre-staging? Hope anyone can understand my question and answer it.. Thanks.

[@itfreetraining]

You would need to change the rights for the domain administrator. This is something I have not tried before and not sure if it is possible. The simplest way to get around this would be to create a user with all the rights it needed minus the ability to create computer accounts.

[@garylparas]

itfreetraining I'm just curious because in my former company they used Windows Server 2008 as an AD Server and even a domain administrator cannot join a computer to the domain without first creating a computer account entry in AD, they call it "Pre-Windows". For me it is the best way to control and make your AD-DS neat.

[@rrrussell1009]

I’ve tried this but I continue to get and error that tells me there’s no computer account for the workstation trust relationship in the security database. How do I fix this?

[@itfreetraining]

It sounds like the trust relationship between the domain and the computer has been broken. I would remove the computer from the domain and re-add it. That will reset the relationship.

[@rrrussell1009]

itfreetraining I have removed and re-added several times, each time ending with the same result.

[@itfreetraining]

Remove the computer from the domain. Delete the computer account from active directory. Force a replication Re-add the computer to the domain.

[@chaozkreator]

What's the difference between an User Account and a Computer Account?

[@itfreetraining]

Not much on the Active Directory database side. It is more how they are used that is difference. When a computer is added to the domain a computer account is created for that computer. This computer account has a password that is associated with it that is automatically changed as required. This is done all automatically. This is how when the computer starts up it can access items on the network like group policy. The user account on the other hand is for a user to use rather than a computer. So when the user logs into a computer, this user account allows them to access resources on the network.

[@nirajkumarfukat1598]

i like it your video

[@Dethred1]

CBTNuggets, eat your heart out!

[@itfreetraining]

Thanks. More videos on the way

[@itfreetraining]

Thanks very much.

[@itfreetraining]

Thanks very much.