Active Directory Cookbook for windows server 2003- P25:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | Const MACHINE_PASSWORD_PASSED 128 Const DEFERRED_SPN_SET 256 Const INSTALL_INVOCATION 262144 Connect to Computer set objWMILocator CreateObject .AuthenticationLevel 6 set objWMIComputer strComputer root cimv2 strLocalUser strLocalPasswd set objWMIComputerSystem Win32 strComputer Join Computer rc strDomain strDomainPasswd strDomainUser _ vbNullString JOIN_DOMAIN if rc 0 then Join failed with error rc else Successfully joined strComputer to strDomain end if Discussion When trying to add a computer to Active Directory you must first create the computer object as described in Recipe and Recipe . Then you can join the computer to the domain. Using a graphical user interface If you have the correct permissions in Active Directory you can actually create a computer object at the same time as you join it to a domain via the instructions described in the GUI solution. Since the System applet doesn t allow you to specify an OU for the computer object if it needs to create a computer object it will do so in the default Computers container. See Recipe and Recipe for more information on the default computers container and how to change it. Using a command-line interface The netdom command will attempt to create a computer object for the computer during a join if one does not already exist. An optional ou switch can be added to specify the OU in which to create the computer object. To do so you ll need to have the necessary permissions to create and manage computer objects in the OU. 251 There are some restrictions on running the netdom join command remotely. If a Windows XP machine has the ForceGuest security policy setting enabled you cannot join it remotely. Running the netdom command directly on the machine works regardless of the ForceGuest setting. .
