Changing the computer zone

If you need to change the zone for a computer account, your user account must have the following additional permissions:

Select this target object To apply these permissions

All parent container objects for the original and new zones

Click the Properties tab and select Allow to apply the following properties to this object only:

  • Read name
  • Read Name

The serviceConnectionPoint object for the computer account

Click the Properties tab and select Allow to apply the following properties to this object only:

  • Write name
  • Write Name

Note The Name property is the common name (cn) of the serviceConnectionPoint object.

Original parent container for the computer account in the current zone

For example, if you are moving a computer from the Finance zone to the Corporate zone, the target object would be:

domain/UNIX/Zones/Finance/Computers

On the Object tab, select Allow to apply the following permission to this object only:

  • Delete serviceConnectionPoint Objects

Click the Properties tab and select Allow to apply the following properties to this object only:

  • Read objectGUID

New parent container for the computer account in the new zone

For example, if you are moving a computer from the Finance zone to the Corporate zone, and you use the default Computers container, the target object would be:

domain/UNIX/Zones/Corporate/Computers

On the Object tab, select Allow to apply the following permission to this object only:

  • Create serviceConnectionPoint Objects

Click the Properties tab and select Allow to apply the following properties to this object only:

  • Read objectGUID

Note:   You can set the permissions for modifying computer accounts by clicking the Security tab when you are viewing a computer’s properties.