Add computer account

I'm trying to add a computer account in workgroup manager but everything is grayed out.
Yes, I'm authenticated (as diradmin)
If I try to add it with the network view, it says that I'm not authorized to perform the operation.
What should I do ?

It would help to know which directory you were attempting to add the computer account to -- you can't add it to /NetInfo/DefaultLocalNode as far as I know. It should have been greyed out in that case.
If you had the LDAP directory selected and were authenticated as diradmin, then Workgroup Manager should have allowed you to create a machine account.

Similar Messages

SCCM 2007 OSD to add computer account to domain

Running SCCM 2007 R2 OSD to add computer account to domain has always been working, until recently after I added Intel 217/218 NIC drivers to the PE boot image.
The task sequence "Apply Network Settings" runs successfully though. It broke other TS steps too, such as enabling BitLocker, because, I guess, if the computer is not domain-joined, it won't be able to write recovery key to AD. I can use the same
network account to manually add the computer to domain. This doesn't seem to be a network issue, because the NIC drivers are applied, and software installation in the TS runs with no issue.
Here's the deployment log:
==============================[ OSDNetSettings.exe ]===========================
Command line: "osdnetsettings.exe" configure Setting %SystemRoot% to "D:\Windows"
Loading existing answer file "D:\Windows\panther\unattend\unattend.xml"
Configuring global network settings
Join type: 0 Joining domain: MyDomainName
Getting namespace "Microsoft-Windows-UnattendedJoin" for architecture "amd64"
DNS domain: DNS domain search order: IP filter sec enabled: false
No adapters found in environment.
Performing global configuration only.
Writing configuration information to D:\Windows\panther\unattend\unattend.xml
Successfully saved configuration information to D:\Windows\panther\unattend\unattend.xml
Configuring "OSDNetSettings.exe finalize" to run on first boot OSDNetSettings
finished: 0x00000000
Thanks and regards.

Running SCCM 2007 R2 OSD to add computer account to domain has always been working, until recently after I added Intel 217/218 NIC drivers to the PE boot image.
The task sequence "Apply Network Settings" runs successfully though. It broke other TS steps too, such as enabling BitLocker, because, I guess, if the computer is not domain-joined, it won't be able to write recovery key to AD. I can use the same
network account to manually add the computer to domain. This doesn't seem to be a network issue, because the NIC drivers are applied, and software installation in the TS runs with no issue.
Here's the deployment log:
==============================[ OSDNetSettings.exe ]===========================
Command line: "osdnetsettings.exe" configure Setting %SystemRoot% to "D:\Windows"
Loading existing answer file "D:\Windows\panther\unattend\unattend.xml"
Configuring global network settings
Join type: 0 Joining domain: MyDomainName
Getting namespace "Microsoft-Windows-UnattendedJoin" for architecture "amd64"
DNS domain: DNS domain search order: IP filter sec enabled: false
No adapters found in environment.
Performing global configuration only.
Writing configuration information to D:\Windows\panther\unattend\unattend.xml
Successfully saved configuration information to D:\Windows\panther\unattend\unattend.xml
Configuring "OSDNetSettings.exe finalize" to run on first boot OSDNetSettings
finished: 0x00000000
Thanks and regards.

Binding to OD (10.5.2) adds Computer accounts with client realm names

After applying “security Update 2008-002 v1.1 Server (leopard)” to a server running 10.5.2, clients were bumped from binding.
When I re-bind to OD, 2 new entries show up in computer accounts, one is the FQDN,( e.g., labtable6.physicslabs.uri.edu), the other is a Realm name (e.g. LKDC:SHA1.03344892C418CB16C250B59EAA7F93FEF79EF257.
Not only that, but in the list of principles in the Kerberos database, 2 entries for each machine are added to each service (e.g.,
afpserver/[email protected]
and
afpserver/LKDC:[email protected] ABS.URI.EDU.
Everything runs OK but I have to connect again to get AFP shares, but I cannot reconnect from the sidebar in finder, only from the Go menu, or a command.
All names in the DNS and Reverse IP lookups Resolve OK.
Has this happened to anyone else? I can fix the double entry in the computer accounts by just deleting the realm name, but I’m a bit worried about the double entry in the KDC.

Follow up
I used:
sso_util to remove the KDC on clients and
Kadmin to remove multiple entries in the KDC of the server.
Broke the bind (or whatever you call it) and bind again, no second entry in either Workgroup Manager’s Computer Accounts and no multiple service principles on the server’s KDC.
The following sight were helpful on this issue
http://forums.bombich.com/viewtopic.php?t=11834&highlight=lkdc
http://www.netmojo.ca/blog/2008/01/30/tiger-to-leopard-server-migration-part-fou r/
http://web.mit.edu/macdev/KfM/KerberosClients/KerberosApp/Documentation/using-os x.html#startup
I guess when I was installing Leopard LDAP I was using Tiger manuals and didn’t know about the “Back to My Mac” stuff.
My mistake:,the other issue with the finder sidebar is something different see:
http://discussions.apple.com/thread.jspa?messageID=5698233
Onward through the fog.

2008 Failover cluster unable to create computer account

Hello,
I have created a 2008 R2 Failover cluster and I am trying to add a Fail over File server to this.
I get the dreaded
Cluster network name resource 'OfMaClusterFS' failed to create its associated computer object in domain 'xxx.domain' for the following reason: Unable to create computer account.
The text for the associated error code is: Access is denied.
Please work with your domain administrator to ensure that:
- The cluster identity 'OFMACLUSTER$' can create computer objects. By default all computer objects are created in the 'Computers' container; consult the domain administrator if this location has been changed.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity 'OFMACLUSTER$' has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool.
I have created clusters frequently in the past, on my own Domains that I am a domain admin of. Now I am trying to make one on our larger corporate domain that I am not a domain admin of and get this error.
By default, domain users can not add computer accounts to our domain. I do however have an limited account that can add computers to the domain... but I have tried all the tricks I can think of to try and add the Network name to AD and no luck.#
I have tried running the cluster service with this account, but it is still trying to use the OFMACLUSTER$ identity to create the Network name. I have tried manually creating the network name using my limited account, but that doesn't work either,
same error. I don't have the ability to change permissions on the computer name I added for the network name to AD.
I have raised a ticket to our wintel team to try and get them to help, but they aren't exactly the most responsive bunch. I'm just wondering what the best way around this problem is if I am not a domain admin and I can't make the changes I need, or
what concise instructions I can give to the domain admins so that they can help me out without saying that it is a security breach etc.
I would appreciate any advice on this as it's now urgent and also something I will have to do in the future fairly regularly and don't want to get caught in the situation in the future.

Hi jogdial,
To create a cluster, the minimum permission is: Requires administrative permissions on the servers that will become cluster nodes. Also requires
Create Computer objects and Read All Properties permissions in the container that is used for computer accounts in the domain.
If you create the cluster name account (cluster name object) before creating the cluster—that is, prestage the account—you must give it the
Create Computer objects and Read All Properties permissions in the container that is used for computer accounts in the domain. You must also disable the account, and give
Full Control of it to the account that will be used by the administrator who installs the cluster.
The related KB:
Failover Cluster Step-by-Step Guide: Configuring Accounts in Active Directory
http://technet.microsoft.com/en-us/library/cc731002(v=ws.10).aspx
More information:
How to Create a Cluster in a Restrictive Active Directory Environment
http://blogs.msdn.com/b/clustering/archive/2012/03/30/10289577.aspx
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I have one home computer and our household has 2 iphones. I am signed up on itunes and now my husband would like to have an account with itunes as well. Can there be two accounts for 2 users for itunes on one home computer? How do I add another account ?

I have one home computer and our household has 2 iphones. I am signed up on itunes and now my husband would like to have an account with itunes as well. Can there be two accounts for 2 users for itunes on one home computer? How do I add another account ?

Have a read here...
https://discussions.apple.com/message/18409815?ac_cid=ha
And See Here...
How to Use Multiple iDevices with One Computer

How do you add another account onto the same computer that has itunes?

I want to add another account to my already existing account so that my dad can have his own music on the same computer with mine. can i do that? or should i just move all of my stuff to an another computer and just let him have the old one? i know this prolly sounds confusing but someone please tell me if i can do this!

See if this helps: Using Windows XP User Accounts
Creating a separate Windows User account for each person on your PC will give you completely separate libraries. Each account has it's own iTunes folder, Library and iTunes Music folder and you load it with CDs etc just as you did with your original one.

The security database on the server does not have a computer account for this workstation trust relationship

When I try to log on to my DC it says "The security database on the server does not have a computer account for this workstation trust relationship". It won't let me log on. I installed another server server 2012r2 (its virtual )
and I can get to ADSI edit.
I think what happened was I had a pc that could not connect without unplugging the network cable. So I found this fix
FIX: “The security database on the server does not have a computer account for this workstation trust relationship”2032011
I’ve seen a lot of solutions, or suggestions rather, with regard to the error in the title of this post. In my experience, the problem can almost always be resolved without extra domain add/removes and reboots, which is the most prevalent solution I have
seen around. Usually, this issue is due to a mismatch between attributes of the computer account in Active Directory and those values on the system itself. Here are the steps I take to fix this issue when it crops up:
Open up Active Directory Users & Computers pointed to the domain the computer account resides in
From the “View” pull-down menu, make sure that “Advanced Features” is checked
Navigate to the part of your organizational unit (OU) structure where the computer account for this server resides
Open the Properties for the computer object
Choose the “Attribute Editor” tab on the Properties dialog box
Check the Attributes dNSHostName & servicePrincipalName – anywhere that a fully qualified hostname is specified (e.g. myserver.mydomainname.com), make sure that the entry matches the hostname
you have configured when you go here on your server: Start -> Computer -> Right-Click, Properties -> Change Settings (under “Computer name, domain… settings”) -> Full Computer Name
As an example, for a fictitious W2K8 R2 server whose Full Computer Name is “srv1.mydomainname.com”, these attribute/value pairs should be in Active Directory:
dNSHostName:
srv1.mydomainname.com
servicePrincipalName:
HOST/SRV1
HOST/srv1.mydomainname.com
RestrictedKrbHost/SRV1
RestrictedKrbHost/srv1.mydomainname.com
TERMSRV/SRV1
TERMSRV/srv1.mydomainname.com"
Not reading it carefully I add a computer with the same name as the pc having the issue and followed the above. The problem is that I did not notice that the spn did not want the name of my server (serv1) but the name of the trouble
pc.
dcdiag output
PS C:\Users\administrator.TOM> dcdiag.exe
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
***Error: DC3 is not a Directory Server. Must specify /s:<Directory Server> or /n:<Naming Context> or nothing to
use the local machine.
ERROR: Could not find home server.
PS C:\Users\administrator.TOM> dcdiag.exe /s:DC2
Directory Server Diagnosis
Performing initial setup:
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\DC2
Starting test: Connectivity
The host 9e0dca7a-d017-445a-b354-adee5ff53d48._msdcs.TOM could not be resolved to an IP address. Check the DN
server, DHCP, server name, etc.
Neither the the server name (DC2.TOM) nor the Guid DNS name (9e0dca7a-d017-445a-b354-adee5ff53d48._msdcs.TOM)
could be resolved by DNS. Check that the server is up and is registered correctly with the DNS server.
Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
......................... DC2 failed test Connectivity
Doing primary tests
Testing server: Default-First-Site\DC2
Skipping all tests, because server DC2 is not responding to directory service requests.
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : TOM
Starting test: CheckSDRefDom
......................... TOM passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... TOM passed test CrossRefValidation
Running enterprise tests on : TOM
Starting test: LocatorCheck
......................... TOM passed test LocatorCheck
Starting test: Intersite
......................... TOM passed test Intersite
PS C:\Users\administrator.TOM> regsvr32 schmmgmt.dll
PS C:\Users\administrator.TOM> netdig /fix
netdig : The term 'netdig' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ netdig /fix
+ ~~~~~~
+ CategoryInfo : ObjectNotFound: (netdig:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> Setup /PrepareSchema
Setup : The term 'Setup' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ Setup /PrepareSchema
+ ~~~~~
+ CategoryInfo : ObjectNotFound: (Setup:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> netdiag /test
netdiag : The term 'netdiag' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ netdiag /test
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (netdiag:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> nslooup
nslooup : The term 'nslooup' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ nslooup
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (nslooup:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM>

Ok fixed.
At a elevated cmd prompt run ;
C:\Users\administrator.TOM>setspn -x
As you can see the DC serv1 had duplicate SPNs.
Checking domain DC=TOM
Processing entry 1
HOST/serv1.TOM is registered on these accounts:
CN=SERV1,OU=Domain Controllers,DC=TOM
CN=C00049,CN=Computers,DC=TOM
{14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/TOWN-HBWJ29ZOQC is registered on these ac
counts:
CN=Administrator,CN=Users,DC=TOM
CN=TOWN-HBWJ29ZOQC,CN=Computers,DC=TOM
{14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/town-hbwj29zoqc.TOM is registered on thes
e accounts:
CN=Administrator,CN=Users,DC=TOM
CN=TOWN-HBWJ29ZOQC,CN=Computers,DC=TOM
RestrictedKrbHost/serv1 is registered on these accounts:
CN=C00049,CN=Computers,DC=TOM
CN=SERV1,OU=Domain Controllers,DC=TOM
RestrictedKrbHost/serv1.TOM is registered on these accounts:
CN=C00049,CN=Computers,DC=TOM
CN=SERV1,OU=Domain Controllers,DC=TOM
found 5 groups of duplicate SPNs.
Went to the computers OU and changed computer c00049 to the correct SPN. Now I have a new issues, I'll start a new thread.

How do i add another account to my apple tv?

how do i add another account to my apple tv?

Welcome to the Apple Community.
I assume you mean another computer. Set up homesharing on the second computer using the same ID and password that you used for the first computer.

Will not allow me to add caldav account (Calendar couldn't log in to the CalDAV server "webdav.skedge.me"error message)or I get the not a secure server message with the option to continue...but then it sticks it wont continue

I WISH I HAD NOT UPGRADED...THIS IS A NIGHTMARE. I need to sync my appointment scheduler that is embedded in my website to my ical (which was easily done through publishing with the previous version) since I have upgraded I dont have the option to publish...but can add the cal DAV account, which I tried to do but I get a "Calendar couldn't log in to the CalDAV server “webdav.skedge.me”." error message if I go through edit ccount> add other account in system prefereneces otherwise I get a not secure server warning that will not continue when I select continue if I simply try to add an account using the + sign options at the bottom left of the systems preference pop up window
found a potenital fix (that I think would work if I could understand how to do what they are telling me to do) it said to configure webdav sharing for active directory accounts...tried to follow the instructions...could not understand them (very techy instructions).
FYI to any one that may find it in thier heart to answer this...I AM NOT COMPUTER LITERATE I am a veterinarian not a computer programer...so please but things in terms I can understand...i dont know what root access or server admin means...I dont know how to edit config files or even open directories with terminal ...i dont know what pico is or how to open it on my computer. Thanks
If know one can help can someone please tell me how to un-upgrade..this *****!
thanks
Catherine

Check the date and time in the clock on your computer: (double) click the clock icon on the Windows Taskbar.
* https://support.mozilla.com/kb/Secure+Connection+Failed
You can retrieve the certificate and check who issued the certificate and other details like when it is valid.
* Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
* Click the "View..." button to inspect the certificate and check who is the issuer.

Can't create computer account in Workgroup Manager

Hi everybody !.
I am installing a new Xserve with Mac OS X Server 10.5.6 and I am having some trouble with computer accounts in Workgroup Manager.
I have a couple of PCs with Windows XP that I have added to the Windows domain created by Mac OS X Server with no problem,and they do appear in my computer account list, with the name PC_NameX$.
My Xserve also appears in this list with the name ServerName.DomainName$
But my iMacs (with Mac OS X 10.4.11) are not listed. When I try to create their accounts, I write their names and their MAC address but when I push the button "Save", Workgroup Manager says that I can't create this account because there is a computer with that name and that MAC address yet.
I can't find a solution for this problem by myself. Could anybody give some advices to solve it ?.
Many thanks.

Hi Mabel,
In my computer list appears my Windows computer names (followed by a "$" symbol, i.e., name$) and my Xserve name followed by domain name and a "$" symbol, i.e, name.domain$. Finally, there is a Guest account I added a few days ago (without "$" symbol).
No iMac is listed here. When I try to add them manually, I write "Name", "Short Name" and "Ethernet ID" fields, and when I push "Save" button, I get this message:
"The name you have chosen conflicts with a name assigned to another computer. You can’t assign the name “Pollux” to two different computers. Remember that names are not case-sensitive when checking for conflicts." (Pollux is the name I gave to one of the iMacs).
If I change this name and use another one, but I don't change "Ethernet ID" and then push "Save", the message is:
"The ethernet address you have chosen conflicts with an ethernet address assigned to another computer. You can’t assign the ethernet address “00:17:f2:d3:38:95” to two different computers."
So, It seems that WGM knows Name and Ethernet ID from this iMac because it does not let me type them again, but I have not typed this information before nor the iMacs are listed in computer list.
This is what I don't understand.
I have have read chapter 6 "Setting Up Computers and Computer Groups", the one that starts on page 105, from top to bottom. I have not found a single clue that helps me solving this problem. Here explains the procedure when everything is working properly.
Finally, another piece from the puzzle. There is an iMac, that always connects to Directory with Airport interface. I have tried to add this iMac, manually. Well, I get the name conflict message, the Ethernet ID conflict message (with its airport id) and... an Ethernet ID message when I type its Ethernet ID. It seems Directory knows this Ethernet ID even, it has never been used to connect to it.
Is there some detail I am missing ???.
Kind regards.

Cant add Windows accounts to staff or admin group

cant add Windows accounts to staff or admin group
I have one Mac pro workstation on a all windows network, its added to the domain. i can give network users administrative permissions on the pc by selecting allow user to administer this computer in the accounts in system preferences but they dont have file permissions unless i add them explicitly on the file or folder. i'm new with macs and not sure on what to do.

> local users (Not domain Users) to this Group and then nest this Group
> into the Local Admin Group Built-in into Windows 8
You cannot nest local groups.
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

N97: Impossible to add email accounts

When I initially set up my Nokia N97, I added several email accounts with no problem. But now when I need to add an account, it is not possible any more.
The Help tells me to go to Messages > Options >Settings > Email > Email accounts and choose Options > New email account. But under Email accounts > Options there is no option New email account any more. Why is that??
Please help!

profmail looks like a$$....
I am not desperate to have this mail working on my N97, just would be really nice - currently i just use my webmail which looks 1000x better anyway (roundcude) - and I get HTML mails...
However with that said I am troubled with the fact that Nokia cannot make a simple think like IMAP work - yes sure it works - then one message comes along and the whole app chokes. I believe that they also broke the scheduled retrieval of messages with IMAP. Sure I could use POP3 (seems to be OK) but that really is a pain as then I have to go through and manage mail on one client. If I have read a msg on one client i like it marked as read on the other, etc. What I don't understand is that IMAP works perfectly on the N95 and it did work on up to v12 FW.
Also given that it is 2010 and the messaging app does not support simple HTML is also bothersome. Bottom line is that Nokia $ucks.
I fail to see why they have developed the other "Ovi / Nokia" messaging before fixing the other built in client - and why they have the same name also escapes me..... While it does support HTML mails it is such a terrible app that it is sad, the amount of messages it lets you store is pathetic, it looks terrible and it is not integrated into the phone. Not to mention all mails go thu Nokia Servers so security is out the window - maybe good for a MOM with a LOW end phone, not the kind of thing for an enterprise user that paid $800 for a flagship phone that was touted by Nokia as the "most advanced mobile computer in the world"
Is is a flaming hunk of $%# ! 10 months later and they can't fix a few small email bugs? ridiculous. This is why I am not buying another Nokia.
I love my purple screen, 1/2 day battery, sketchy touch screen and $800 price tag - I call it my Lumia 900

How do i add an account to home sharing

how do i add an account to home sharing??

Hey 1Badasskicker,
You can find the steps for setting up Home Sharing in this article -
iTunes: Setting up Home Sharing on your computer - Apple Support
For iOS devices use this article -
Learn more about Home Sharing - Apple Support
Thanks for using Apple Support Communities.
Be well,
Brett L

Computer accounts in Workgroup Manager

Is it just me or is there no way to browse the network for computers and add them as computer accounts in 10.5 server's Workgroup Manager? I can tell you I am not going to manually enter over 500 computers one at a time. Apple needs to stop taking steps backward with 10.5 server and reinstate the 10.4 server functionality here.

This one had me scratching my head yesterday. There used to be a browse function in 10.4.x Workgroup Manager where you could browse the network for machines and then drag them in. I have been looking all over for this function in 10.5 WGM. After I couldn't find it I started reading through the manual to see what it says. All it mentions is adding them by MAC address. Is this feature really gone ? Are they planning to add it back ? As a plan B is there some way to import a list of MAC addresses ?

Automatically Create Computer Accounts

Hey Everyone, been searching a bit but I thought I might ask the forums how everyone else has solved this issue. When we bind some MacBook Pros or MacBooks to Open Directory, we would like for it to automatically create computer accounts in Workgroup Manager that we may be able to assign preferences to them via Computer Groups that we have set up. Similar to how Windows and Active Directory work when you add a computer to a domain. Can this be done? I'm sure it will require authentication when binding so is there any documentation on that by chance?
Thanks!
Jeff

I think I answered my own question. I was used to authenticating using the check box prior to 10.6.3. Looks like they ended up changing the process a bit.
http://support.apple.com/kb/HT4068

Add computer account

Similar Messages

Maybe you are looking for