The following process is for Vanderbilt purchased computer equipment only. It is Vanderbilt Directory Services policy that non-Vanderbilt owned computer equipment is NOT permitted to participate in the Active Directory and allowed to join the domain.

An LSP with appropriate administrative privileges must log onto a machine that is already a domain member. This machine must have the Microsoft Active Directory Administrative Tools installed (ADMINPAK.MSI available from Microsoft here). In the case of a new OU, ITS will create the first computer object in the OU (using the name supplied by the LSP), and will add the VUnetID(s) of the administrating LSP(s) to the OUAdmins group for that OU.

NOTE: Before joining a machine to the Active Directory Domain, ensure that the latest operating system version is installed and that the latest patches have been applied . For machines running the Windows operating system, antivirus software must also be installed with current virus definitions. In addition, anti-spyware is recommended. If this is not possible, please contact the ITS Help Desk or responsible LSP.

Steps to create a computer account:
1. From the START menu, choose PROGRAMS->ADMINISTRATIVE TOOLS->ACTIVE DIRECTORY USERS AND COMPUTERS. In the right pane, navigate to the relevant OU by expanding the 'Organizational Units' OU.
2. Right-Click on the desired OU, and select the option 'New', and then select the option 'Computer'.
3. In the resulting dialog, fill in the 'Computer Name' field (Leave the 'Computer name (pre-Windows 2000)' field set to what is generated for you).
4. Click the 'Change' button and type in the VUnetID of the appropriate LSP in the resulting dialog to assign that LSP the domain join permission for this new account, and then click 'OK'.
5. Click 'Next', then click 'Next' again to by-pass the 'Managed' dialog. Click 'Finish' to complete the wizard.

The new computer account is now ready and the corresponding machine can now be joined to the Active Directory Domain.