In ADS at IU, how do I add a Windows 2000, XP Professional, or 2003 computer to my organizational unit?

When you bring up a Windows 2000 or XP Professional workstation or a Windows 2003 computer that will participate in Indiana University's Active Directory, you must create a computer account. The name of IU's Active Directory Services (ADS) domain is ADS.

If you are a local support provider (LSP) or the administrator of an organizational unit (OU) or department, you should create the computer account in your ADS OU before adding the computer to ADS. To do so, follow the instructions below. If you are not the administrator of an OU, or if you live in campus housing, skip to Adding the computer to ADS.

Note: At Indiana University, the University Information Security Office (UISO) recommends that you normally refrain from running your Windows computer as an administrator. For more, see What is the principle of least privilege?

Creating the computer account in ADS

Note: To create an ADS computer account, follow these directions at a different Windows 2000 or XP computer that is already a member of ADS.

Administration packs

To complete this process, you must install an administration pack the Windows 2003 Service Pack 1 Administration Tools Pack, which works with Windows XP and Windows 2003 Server.

The Windows Server 2003 Administration Tools Pack (pre-Service Pack 1) also works with Windows XP and Windows 2003 Server.

The administration pack for Windows 2000 is available on the Windows installation CD in the I386 folder. After you install the Windows 2000 administration pack, you'll need to reapply the Windows 2000 service packs.

Creating the account

To create the computer account in ADS:

1. Log into the workstation using an ADS account that is an administrator for your OU.
   
   
2. Click Start and select Program Files, then Administrative Tools, and finally Active Directory Users and Computers.

   Note: If this doesn't match what you see, refer to About navigation settings in Windows.

3. Click the + (plus sign) next to "ads.iu.edu" to expand the tree. Then click the + (plus sign) next to the two-letter abbreviation for your campus.
   
   
4. Locate and select your OU in the campus tree.
   
   
5. Click Action, then New, and finally Computer.
   
   
6. A New Object - Computer window will appear. In the "Computer Name:" field, type the computer name. This name must exactly match the name you use for the computer. For information about the naming standards for the ADS domain, see At IU, what naming conventions does UITS recommend for Windows computers and groups?
   
   
7. In the section labeled "The following user or group can join this computer to a domain", you must change the "User or Group" field to your account or to a group to which you belong. Click the Change button. From the list, select the account or group, or type the name in the field below. If you are unsure what to type, you can type ADS\Domain Users to allow all ADS users to join the computer to ADS. Click OK.
   
   
8. Click OK again, and then click Next. In the Managed window, click Next again.
   
   
9. Click the Finish button. The computer account should now be visible in your OU. At this point, you can join the computer for which you created an account to ADS by following the directions below.

Adding the computer to ADS

Follow these instructions on the computer for which you created an ADS account. To add the computer to ADS, log into the workstation as an administrator and follow the steps below:

1. On the desktop, right-click the My Computer icon and select Properties. If you have no My Computer icon on your desktop, from the Start menu, select My Computer.
   
   
2. Select the Network Identification tab and click the Properties button.

   In Windows XP or 2003, select the Computer Name tab and click the Change... button.

   You will now be in a dialog box named Identification Changes in Windows 2000 or Computer Name Changes in Windows XP or 2003.

3. In the "Computer Name:" field, enter the name you created in the steps above. (If it already is in the field, skip this step.)
   
   
4. Click OK and then OK again, and reboot the computer. If you changed the name in "Computer Name:", you should definitely reboot before continuing. You will probably get an error if you attempt the next step without rebooting.
   
   
5. Return to the Computer Name Changes or Identification Changes dialog box by following steps 1 and 2 again.
   
   
6. In the "Member of" box, select Domain. In the space for the domain name, enter ads.iu.edu . Then click OK. The Domain Username and Password dialog box will appear.
   
   
7. In the "Name" field, enter ads\username . Replace username with your username.
   
   
8. In the "Password" field, enter your ADS domain password.
   
   
9. When you are done, click OK. You should then see a dialog box that says "Welcome to the ADS domain". Again, click OK.
   
   
10. In the Network control panel, click OK. Windows will then prompt you to restart your computer. You will need to restart before you can authenticate to the ADS domain.

Comments/Questions/Corrections