add a machine account using samba-tool

[Marc Muehlfeld]

Hello David,

Am 27.04.2013 16:03, schrieb David Mansfield:
> Is there any way to add a machine account directly on the DC?  The
> equiv. to "New Computer" in ADUC?
>
> I'm looking for something like:
>
>     samba-tool user add --computer 'NEWCOMPUTER$'
>
> (which doesn't exist).
>
> I also have found old threads about pre-creating the account so that a
> subsequent join can be done without a password or with a (specified)
> non-administrative account/password, but I can't find any info in the
> wiki about this.


I'm not sure, if you can a machine account on unix side yet.

But you can create a delegation, e. g. to a non-admin group, that is 
allowed to join machines:
http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO/AD_Delegation


Regards,
Marc