Managing AD computers
AD computer objects represent domain-joined computers that can use the domain to authenticate user login. Before you can log in as a domain user, such as Reskit\JerryG
, your computer must be a domain member. When a domain-joined computer starts up, it contacts a DC to authenticate itself. In effect, the computer logs into the domain and creates a secure channel to the DC. Once Windows establishes this secure channel, Windows can log on a user. Under the covers, Windows uses the secure channel to negotiate the user logon.
In this recipe, you work with AD computers and add SRV1
to the Reskit.Org
domain.
Getting ready
You run this recipe on DC1
, a DC in the Reskit.Org domain. This recipe also uses SRV1
. This host starts as a non-domain-joined Windows Server 2022 host (which you used in earlier chapters in this book). You also use UKDC1
(the DC in the UK.Reskit.Org
domain). You should have PowerShell 7 and VS Code installed on each of these hosts.