Name: Active Directory: Everything About Computer Accounts
Rating: 4.3 (20 reviews)

Udemy Business

Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Created byLadan Amirchoupani

Last updated 8/2020

English

What you'll learn

Computer Accounts & Joining Computers to Domains
What is a Computer Account?
Why a Computer Account is Needed?
Which Computers Require a Computer Account?
Which OSs can have a Computer Account? (Which OSs can Join to an Active Directory Domain)
Behind the Scenes of a Windows Computer Joining a Domain
How a Computer Account is Created? (Automatically & Manually)
Who can Join a Computer to a Domain or Create a Computer Account?
What Data is Saved in a Computer Account?
How to Properly Name Computers?
What is Distinguished Name (DN) & Why is it Needed?
Disabling, Resetting, and Deleting a Computer Account.
Restoring a Deleted Computer Account.
Changing the Default Place in a Domain for New Computer Accounts.
Creating Computer Accounts for OSs other than Windows. (Joining & Disjoining Linux & Apple to a Domain)
Troubleshooting Joining Computers to a Domain (TShoot Checklist)
Why Sometimes Computer Accounts get Problematic and Domain Rejoin is Needed?
TShoot Cloning Windows Computers in a Domain (Sysprep)
How a Computer Account Password is Changed?
Changing the Machine Account Quota (Default=10) for Standard Users in Active Directory.
Setting the Users/Groups who have Right/Permission to Join Computers to a Domain.
Best practices for Joining Computers to a Domain.
Bulk Join/Import Computers to a Domain.
Offline Domain Join
TCP/UDP Ports that Need to be Open on Firewalls so a Computer can Join and Connect to a Domain
Trusting a Computer Account for Delegation.
Detecting and Disabling/Deleting Inactive Computer Accounts.
Review Questions and Answers

Course content

5 sections • 40 lectures • 2h 39m total length

Introduction1:27

Lesson1-Part1-Getting Familiar with Computer Accounts3:34
Lesson1-Part2-Introduction of the Initial Lab Journey0:41
This lab demonstrates joining two computers with different users, where Winton Dash signs in with a local user named site, then a domain user joins it to laptop's local domain.
Lesson1-Part3-Joining a Windows Computer to an Active Directory Domain4:59
Lesson1-Part4-Joining another Windows Computer to an Active Directory Domain2:27
Lesson1-Part5-Behind the Scenes of a Windows Computer Joining a Domain1:18
Lesson1-Part6-Distinguished Name (DN)3:02
Lesson1-Part7-Prestaging Computer Accounts (via ADUC console and PowerShell)3:16
Lesson1-Part8-What Data is Saved in a Computer Account2:31
Lesson1-Part9-How to Name Computers Properly4:59
Lesson1-Questions and Answers4:19

Lesson2-Part1-Disabling a Computer Account1:55
Discover how to manage computer accounts by disabling a computer when unused for security, rather than deleting it, so users cannot log on to the domain until re-enabled.
Lesson2-Part2-Resetting a Computer Account1:22
Lesson2-Part3-Deleting a Computer Account3:12
Lesson2-Part4-Editing a Computer Account1:28
Lesson2-Part5-Restoring a Deleted Computer Account3:27
Lesson2-Part6-Changing the Default Place for New Computer Accounts2:37
Lesson2-Part7-1-Joining a Linux Computer to a Domain7:48
Lesson2-Part7-2-Disjoining a Linux Computer from a Domain7:05
Lesson2-Part7-3-Joining an Apple Computer to a Domain5:19
Lesson2-Part7-4-Disjoining an Apple Computer to a Domain1:25
Learn how to disjoin an Apple computer from a domain by selecting the domain, clicking unbind, and verifying the computer account record.
Lesson2-Questions and Answers2:17

Lesson3-Part1-Troubelshooting (Checklist & Big Mistakes)12:40
Lesson3-Part2-1-TShoot Date and Time Sync3:29
Lesson3-Part2-2-TShoot Domain Rejoin Needed5:40
Lesson3-Part2-3-TShoot Cloning (Sysprep)11:31
Cloning operating systems creates duplicate SIDs and computer accounts, causing domain conflicts. Use sysprep to generalize, regenerate the computer SID, and safely join the domain without disrupting trust relations.
Lesson3-Part2-4-TShoot Hotfix1:01
Check operating system hotfixes on clients and domain controllers to prevent domain join and authentication failures due to incompatibilities; Windows 7 and 2008 R2 joins may show errors yet complete.
Lesson3-Questions and Answers1:59

Lesson4-Part1-Computer Account Password in AD and Registry2:11
Discover how the computer account password is stored in active directory and the registry, including the current password in Unicode attribute and the last 40 passwords in LMPWDHistory.
Lesson4-Part2-Computer Account Password Change2:54
Lesson4-Part3-Changing the Machine Account Quota in Active Directory3:35
Lesson4-Part4-Delegating Computer Domain Join7:22
Lesson4-Part5-Best Practices for Computer Accounts5:12
Delegate domain joining to trusted groups, separate client and server computer accounts into dedicated OUs, and stage accounts with admin-only creation for deployments via WTS or SCM.
Lesson4-Part6-Bulk Join or Import Computers to a Domain (Plus Script)5:41
Learn to bulk import and join computers to an Active Directory domain with a script that reads names from a text file, stages accounts, and joins them.
Lesson4-Part7-1-Offline Domain Join5:27
Lesson4-Part7-2-Offline Domain Join4:37
Lesson4-Part8-Needed TCP and UDP Ports (Firewall)0:48
Lesson4-Part9-Trusting a Computer Account for Delegation1:45
Discover trusting a computer account for delegation, letting a web server impersonate users to access files on a file server, and why unconstrained delegation risks credentials.
Lesson4-Part10-Detecting Inactive Computer Accounts (Plus Script)10:16
Lesson4-Questions and Answers2:32

Requirements

Basic knowledge of TCP/IP
Basic knowledge of Active Directory Domain Services & DNS

Description

"Active Directory: Everything About Computer Accounts" course is aimed to anyone who works or is going to work in an Active Directory Domain as a Help Desk or Network Admin.

Its goal is to define as many aspects of computer accounts as possible & teaching how to join computers (Windows, Linux, and Apple) to the Windows Server 2000, 2003, 2003R2, 2008, 2008R2, 2012, 2012R2, 2016 & 2019 Active Directory domains via Graphical User Interface, Command Prompt and PowerShell.

After this course you will be able to create, reset, disable, manage, delete and restore computer accounts.

In this course you will also learn:

- How to Name Computers Properly.

- The concept of Distinguished Name (DN).

- Behind the Scenes of a Windows Computer Joining to a Domain.

- Prestaging Computer Accounts via Active Directory Users and Computers console and PowerShell.

- Offline Domain Join (ODJ).

- Bulk join and import computers to domains.

- Delegating Computer Domain Join.

- Changing the Machine Account Quota in Active Directory.

- Changing the Default Place for New Computer Accounts.

- Detecting inactive computer accounts.

- Needed TCP and UDP Ports to be opened in Firewall to join computers to domains.

- Detecting and troubleshooting the common computer accounts and domain join related problems.

At the end of each lesson, you can test your knowledge with provided Questions and Answers.

Who this course is for:

Anyone starting to work with Microsoft Active Directory Domain Services
Help Desks
Network Administrators

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 1min

Lesson1: Computer Accounts & Joining Computers to Active Directory Domains10 lectures • 31min

Lesson2: Managing Computer Accounts11 lectures • 38min

Lesson3: Troubleshooting6 lectures • 36min

Lesson4: Advanced Management & Knowledge12 lectures • 52min

Requirements

Description

Who this course is for: