Who can create computer accounts*?
This Active Directory resultant access report reveals exactly who can create computer accounts in Active Directory, where they can create them (i.e. in which OUs / containers), and how (i.e. based on which security permissions.)
.
Who can delete computer accounts?
This Active Directory resultant access report reveals exactly who can delete computer accounts in Active Directory, which accounts they can delete, and how (i.e. based on which security permissions.)
.
Who can reset computer accounts?
This Active Directory resultant access report reveals exactly who can reset computer accounts in Active Directory, which accounts they can reset, and how (i.e. based on which security permissions.)
.
Who can disable/enable computer accounts?
This Active Directory resultant access report reveals exactly who can disable/enable computer accounts in Active Directory, which accounts they can disable/enable, and how (i.e. based on which security permissions.)
.
Who can change the expiration date of computer accounts?
This Active Directory resultant access report reveals exactly who can change the expiration date of computer accounts in Active Directory, which accounts' expiration dates they can change, and how (i.e. based on which security permissions.)
.
Who can change the computer name (Pre-Windows 2000) of computer accounts?
This Active Directory resultant access report reveals exactly who can change the computer name (Pre-Windows 2000) of computer accounts in Active Directory, on which accounts, and how (i.e. based on which security permissions.)
.
Who can change the DNS name of computer accounts?
This Active Directory resultant access report reveals exactly who can change the DNS name of computer accounts in Active Directory, which accounts' DNS names they can change, and how (i.e. based on which security permissions.)
.
Who can change the machine role of computer accounts?
This Active Directory resultant access report reveals exactly who can change the machine role of computer accounts in Active Directory, which accounts' machine roles they can change, and how (i.e. based on which security permissions.)
.
Who can change the description of computer accounts?
This Active Directory resultant access report reveals exactly who can change the description of computer accounts in Active Directory, which accounts' description they can change, and how (i.e. based on which security permissions.)
.
Who can change the location of computer accounts?
This Active Directory resultant access report reveals exactly who can change the specified location of computer accounts in Active Directory, which accounts' location they can change, and how (i.e. based on which security permissions.)
.
Who can change the Service Principal Names (SPNs) of computer accounts?
This Active Directory resultant access report reveals exactly who can change the SPNs of computer accounts in Active Directory, which accounts' SPNs they can change, and how (i.e. based on which security permissions.)
.
Who can change alternate security identities (name mappings) associated with computer accounts?
This Active Directory resultant access report reveals exactly who can change the name mappings associated with computer accounts in Active Directory, which accounts' name mappings they can change, and how (i.e. based on which security permissions.)
.
Who can change the designated manager of computer accounts?
This Active Directory resultant access report reveals exactly who can change the designated manager of computer accounts in Active Directory, of which accounts, and how (i.e. based on which security permissions.)
.
Who can change the picture associated with computer accounts?
This Active Directory resultant access report reveals exactly who can change the picture associated with computer accounts in Active Directory, which accounts' pictures they can change, and how (i.e. based on which security permissions.)
.
Who can change the security permissions protecting computer accounts?
This Active Directory resultant access report reveals exactly who can change the security permissions (ACL) protecting computer accounts in Active Directory, which accounts' security permissions they can change, and how (i.e. based on which security permissions.)
.
