...

Within AD Users and Groups tool, if you enable the Advanced Features under the View menu you can see the delegated permissions in the Security tab. Typically you'll see only groups and one single individual user that has rights to the object. Typically that single user is the person that joined to that computer object. In this case it's Phil Thompson. However, you should have full permissions to any object under your CRE OU through the inherited permissions.

• You need to install the BitLocker Plugin to see the key in the ADUC tool if you are running it locally.

BitLocker Recovery Keys

BitLocker recovery keys can be obtained by looking at the properties of the computer object in AD.

Guest/Lecture Hall

• For lecture hall computer, make a note about the guest account on the background image
• For lecture hall computer, make note about contacting MIT AV
• Add shortcut to webmail.mit.edu
• Add shortcut/install for Zoom client (not sure why this isn't auto-deployed)

See Also

• Joining a domain (IS&T)
• CALs (Client Access Licenses) - IS&T
• Active Directory and Group Policy Lecture