5.2 Managing Computers

DRA enables you to administer computers in the managed domain or managed subtree. For example, you can add or remove computer accounts in the managed domains, as well as manage the resources on each computer. When you add a computer to a domain, DRA creates a computer account in that domain for that computer. You can then connect the computer in that domain and configure the computer to use that computer account. You can also view and modify the properties of computer accounts. DRA also lets you shut down a computer and synchronize domain controllers in a managed domain.

NOTE:You cannot manage hidden domain controllers. The domain cache does not include hidden domain controllers. Therefore, DRA does not display hidden domain computers in lists or property windows

Specify group membership for computers

You can add or remove computers from a specific group in the managed domain or managed subtree. You can also view or modify properties of existing groups to which this computer belongs.

Manage computer account properties

You can manage computer account properties. The powers you have determine which properties you can modify for a computer in the managed domain or managed subtree.

Add a computer to a domain

You can add a computer to a managed domain or managed subtree by creating a new computer account.

Remove a computer from a domain

You can remove a computer from a managed domain or managed subtree by deleting the computer account.

Move a computer

You can move a computer to another container, such as an OU, in the managed domain or managed subtree.

Shut down or restart a computer

You can shutdown and restart a computer immediately or at a set date and time.

Reset the Administrator account password

To reset the administrator account password for a computer, you must have the Reset Password for Local Administrator power or be associated with a role that contains this power. You can reset the administrator password for member servers in your managed domain or managed subtree. You cannot reset the administrator password for a domain controller.

Reset the computer account

You can reset a computer account for member servers in your managed domain or managed subtree. You cannot reset the computer account for a domain controller.

Delete a computer account

You can delete a computer account from the managed domain or managed subtree. If you are managing a Microsoft Windows domain, you can delete computer accounts that contain other objects, such as a shared resource. If the Recycle Bin is disabled for that domain, deleting a computer account permanently removes the computer account from the Active Directory. If the Recycle Bin is enabled for that domain, deleting a computer account moves the computer account to the Recycle Bin.

NOTE:You cannot delete computer accounts for member servers in the managed domain or managed subtree.

Disable a computer account

You can disable a computer account in the managed domain or managed subtree. Disabling a computer account prevents users on that computer from logging on to any domain.

Enable a computer account

You can enable a computer account in the managed domain or managed subtree. Enabling a computer account allows users on that computer to log on to any domain.

Manage computer resources

For each computer account in the managed domain or managed subtree, you can manage the associated resources, such as services, shares, devices, printers, and print jobs.