Windows Forum

Ask something
Discussion Locked

Computers in Active Directory

0 helpful
9 replies

by jlbpotter 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am new to 2000 Server with Active Directory. I recently added a user to Active Directory but when I went to log into the domain with that user it would not allow me to login. It said that the computer was not a member of the domain. So I went backinto the Active Directory Users and Computers and added the computer name (NETBIOS Name) to Active Directory and then it let me login on that PC. Is this normal for AD? Does the PC have to be added to AD also before you can login on it? Thanks in advance.

9 replies

by ewgny

Yes it is normal, all computers must have an object in Active Directory. When a computer joins a domain the computer object is created in the comuter container in AD Users and Computers. You can then move it to any OU you wish for organization and/or group policy purposes

by reference

Just a little side note...
If your using Win2000 pro or WinXP, its best to use the network identification wizard to add the computer to AD. This will help establish the "secure tunnel" between the Server and Workstation.
(right-click "My Computer"click "Properties" then click on the "Network Identification" tab then click on Network ID.)

by quintar51

yes, AD is designed this way.

AD is a domain. If you're not part of the domain, you'll need to be authenticated prior to using any domain resources, ie shares, printers. You can't log into AD, but you can be authenticated by it to use its resources.

when you join the domain, as soon as you log in the first time, you carry a 'security id' with you at all times, and you can access anything that you have access to.

by timwalsh

This is normal for computers running NT4, Win2K and WinXP Pro. There is no mechanism to "join" Win9X clients to the domain. Win9X clients can access domain resources without being "joined" to the domain.

BTW, follow Answer 2's suggested methodfor joining a computer to the domain. This method tends to result in the fewest problems.

This discussion is closed to new replies.