Is it possible rename the computer account created using vserver active-directory create command
Applies to
- ONTAP 9
- Domain tunnel
Answer
- It is not possible to rename the computer account created using
vserver active-directory createcommand - If a name change is necessary, then computer account needs to be deleted and re-created
NOTE : There will be no impact to CIFS users as this is an active-directory computer account created for domain-tunnel authentication and not for CIFS share access
Additional Information
- Refer Create an SVM computer account on the domain
- Steps :
1) Delete the Active Directory account created on the SVM
::> vserver active-directory show -instance
Vserver: svm1
Active Directory NetBIOS Name: AD_TEST
NetBIOS Domain/Workgroup Name: NASLAB
Fully Qualified Domain Name: NASLAB.LOCAL
Organizational Unit: CN=Computers
Authentication Style: domain
::> vserver active-directory delete -vserver svm1
In order to delete an Active Directory machine account, you must supply the name and password of a Windows account with sufficient privileges to remove computers from the "NASLAB.LOCAL" domain.
Enter the user name: administrator
Enter the password:
2) Recreate the Active Directory account created on the SVM with desired name
::> vserver active-directory create -account-name ad_test1 -domain naslab.local
In order to create an Active Directory machine account, you must supply the name and password of a Windows account with sufficient privileges to add computers to the "CN=Computers" container within the "NASLAB.LOCAL" domain.
Enter the user name: administrator
Enter the password:
::> vserver active-directory show -instance
Vserver: svm1
Active Directory NetBIOS Name: AD_TEST1
NetBIOS Domain/Workgroup Name: NASLAB
Fully Qualified Domain Name: NASLAB.LOCAL
Organizational Unit: CN=Computers
Authentication Style: domain