Permissions required to change Computer Name in AD

Question

We have delegated "Write All" properties for the service desk on OU where all PCs located. While renaming the computer we get message "Access is Denied". Looking for support to fix this issue Thanks in advance

Answer 1

Hi @LMS •

It’s not possible to rename computer object directly in Active Directory. To rename a server or computer you have to connect on the machine with a administrator account member of local administrator group.

when you rename computer name the computer object will be renamed automatically in Active Directory

Please don’t forget to accept helpful answer

Answer 2

We are renaming from the computer itself. We found the issue with ‘Network access: Restrict clients allowed to make remote calls to SAM’ settings applied at DC level. Later we added the service desk team to the setting and it works fine now

Answer 3

Hi @LMS •

happy to see your problem fixed. I will add your answer as a comment to be able to accept it as helpful answer and help forum visitors to identify the solution

Answer 4

Thanks LMS, we were having same issue after applying stigs to our DCs but after adding the failing accounts to this Network Access setting we are good again!