Active Directory Domain Services 2008 : Add a Computer to a Group

1/27/2012 3:18:14 PM

Scenario/Problem: Your company uses AD DS groups to filter the application of GPOs on computers.

Solution: Add a computer account to a group using the Windows interface or the command line.

To add a computer object to a group by using the Windows interface, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Active Directory Users and Computers.
3.	In the details pane, right-click the computer object you want to add to the group and click Add to a group.
4.	In the Select Groups window, shown in Figure 1, enter the name of the group to which you want to add the user, click Check Names, and click OK. Figure 1. Adding a computer to a group using the Windows interface.

To add a computer object to a group by using the command line, perform the following steps:

1.	Log on to a domain controller.
2.	Click Start, and click Command Prompt.
3.	In the Command Prompt window, type the following command and press Enter: Dsmod group "CN=DenyGPO,CN=Users,DC=WS08DOMAIN01,DC=LOCAL" -addmbr "CN=Desktop1,CN=Computers,DC=WS08DOMAIN01,DC=LOCAL" (WHERE "CN=DenyGPO,CN=Users,DC=WS08DOMAIN01,DC=LOCAL" is the distinguished name of the group and "CN=Desktop1,CN=Computers,DC=WS08DOMAIN01,DC=LOCAL" is the distinguished name of the computer you want to add to the group).
4.	Verify that the results of the dsmod group command entered above returns dsmod succeeded, as shown in Figure 2. Figure 2. Adding a computer to a group using the command line.

Tip

Other -----------------