How To Verify Machine Account Attributes

Updated: 10/10/2003 Version 1.00

Assumptions:

• User has local Administrator privileges on the machine.
• The machine is a member of the campus.berkeley.edu.
• You did not use the create-computer.wsf script for Calnet Admins to create a computer account. If you used the create-computer.wsf script, there is no need to complete this section.
• The user has privileges to run ADSI and make modifications to the computer settings in Active Directory. If you are an OU admin, you will have the rights for your OU.
• If the user is unable to logon using the correct CalNetID and passphrase combination, you can also follow these instructions to make sure that the required computer account attributes are correctly populated in CalnetAD.

Steps:

1. Log to the domain using your OU admin account.

2. Right click on My Computer and select Properties from the menu.

3. Select the Network Identification tab.

4. Click the Properties button.

5. On the Identification Changes screen, click the More… button.

6. On the DNS Suffix and NetBIOS Computer Name screen, verify the Change primary DNS suffix when domain membership changes box is checked.



7. For DNS lookups of machine names to function properly without WINS or lmhosts files, the Primary DNS suffix of this computer should be set to the DNS suffix supplied by CNS for the computer, <subdomain>.berkeley.edu or berkeley.edu in most cases.

8. Select the OK button.

9. On the Identification Changes screen, select the OK button.

10. On the System Properties screen, select the OK button.

11. Launch the ADSI Edit application from the Windows 2000 Support Tools.

12. Select the DC=campus,DC=Berkeley,DC=edu folder.

13. Drill down and select the computer in the appropriate OU folders.



14. Right click and select Properties from the menu.

15. On the CN=<computer> Properties screen, select dNSHostName from the Select a property to view list.



16. Verify that the entry in the Value(s) box matches <computer>.<DNS suffix>. If not, use the Clear and Set buttons to modify the value.

17. On the CN=<computer> Properties screen, select servicePrincipalName from the Select a property to view list.



18. Verify HOST/<computer>.<DNS Suffix> and HOST/<computer> are in the Value(s) box. If not, use the Clear and Set buttons to modify the values.

19. Select the OK button.

20. Close the ADSI Edit application.