dublicate computer names

Question

HI dear expert

our Helpdesk group can Duplicate computer names in Active directory
so how to prevent this issue ?
how to delegate permission to Helpdesk group to avoid Duplicate computer name ?

Thank you in advance

Answer 1

Can you explain more about duplicate computer accounts.?
You can force your support to pre-stage computers in Active Directory if you mean about two computers with the same name. You can't create two computer accounts with the same name in Active Directory. A better way to avoid this problem is to have unique algorithms for computer account names.

Answer 2

Hi,
In previous versions (prior to 2012 R2), it's possible in same forest to reuse the computer name in another child domain.
But it's not possible to create a computer account with a name already in use in same domain:

If all domain controller and functional level are Window 2012 R2 or higher , the computer name can't be reuse, but it's possible to create in DNS server many FQDN with same name and different IPs.

Please don't forget to mark helpful reply as answer

Answer 3

Hi @ramin sa

By default, Active Directory will not allow a duplicated computer name in the Domain. Attempting to rename or join a machine with an existing name will cause the error as "Object already exist" or similar.

You can always enable aging and scavenging on your DNS server to avoid duplicate DNS records, for example: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc771362(v=ws.10)?redirectedfrom=MSDN#to-enable-aging-and-scavenging-for-the-dns-server

If you are using a 3rd Party tool software or AD management engine that permits that flaw of duplicating computer names, you should prompt the question to the manufacturer of said software.

Hope this helps with your query,

--
--If the reply is helpful, please Upvote and Accept as answer-