Configuring your Windows computer to connect to IU's ADS domain

Notes:
  • These instructions for Windows 10, 8.x, and 7 allow you to connect to the Active Directory Services (ADS) domain at Indiana University by creating a new user profile on your device. When you log into ADS using this new profile, none of the settings from your previous user profile will apply (e.g., Task Manager icons, desktop files, Outlook configuration). To restore these settings, you must copy your old user profile over to the new one.

    For help, see Microsoft Support.

  • If you're unsure whether you should join your computer to the ADS domain, see the Important information section below.

On this page:


Setting the local administrator password

To join your computer to IU's ADS domain, you must set a local administrator password.

Joining your computer to the ADS domain

  1. In Windows 10, press Win-x and select System.

    In Windows 8.x, search for View advanced system settings. Click to open it.

    In Windows 7, from the Start menu, right-click Computer.

  2. Select Advanced System Settings if needed. In the "System Properties" window, select the Computer Name tab and click Change.
  3. Under "Member of", the selected radio button will show whether your computer is a member of a domain or a workgroup. If your computer is a member of a domain, follow the instructions in this step. If your computer is a member of a workgroup, skip to step 8.
    1. In the "Computer Name Changes" window, under "Member of", select Workgroup.
    2. In the "Workgroup:" field, type a temporary name and click OK.
    3. A "Network Identification" dialog box will appear. Click OK.
    4. You will then see another dialog box reminding you to reboot your computer. Click OK. The computer will restart.
  4. Navigate back to the "Computer Name/Domain Changes" dialog box. In the "Computer name:" field, type a new computer name that complies with the ADS domain naming convention. The naming convention requires names with the following components:
    1. A two-character campus code followed by a dash:
      • BL for Bloomington
      • EA for East
      • FW for Fort Wayne
      • IN for Indianapolis
      • KO for Kokomo
      • NW for Northwest
      • SB for South Bend
      • SE for Southeast
    2. A four-character department code followed by a dash
    3. A unique computer name up to seven characters in length, with no spaces
    For example, a University Information Technology Services (UITS) departmental computer at the Bloomington campus named "NAME" would be renamed "BL-UITS-NAME".
  5. Reboot your computer.
  6. Navigate to the "Systems Properties" window as you did in steps 1 and 2 above. Select the Computer Name tab and click Change.
  7. In the "Identification Changes" window, under "Member of", select Domain. In the "Domain:" field, type ads.iu.edu.
  8. Click More....
    • In the "Primary DNS suffix of this computer:" field, enter ads.iu.edu.
    • Check Change primary DNS suffix when domain membership changes.
    • Click OK.
  9. You will then be prompted with the "Domain Username And Password" window for authentication. In the "Name:" field, type ADS\username, replacing username with your Network ID username. In the "Password:" field, type your IU Network ID passphrase. Click OK.
  10. A "Network Identification" dialog box will appear. Click OK. You will see another dialog box reminding you to reboot your computer. Click OK.
  11. Click OK to close the "Identification Changes" window. You may see a warning icon in the bottom portion of the "Systems Properties" window reminding you to reboot the computer. Click OK.
  12. You will see a "System Settings Change" dialog box. Click Yes to automatically reboot your computer.

When you log into your computer after it reboots, in the "Domain:" field of the login prompt, select ADS to log into the Active Directory domain. You may be automatically prompted to log into ADS.

By default, ADS accounts will have user-level rights. For more, see At IU, in Windows, how do I give myself or others login privileges on my computer?

Important information

UITS recommends that all computers directly on the IU network (i.e., physically present and on the IU network, not wireless or off campus) should be joined to the Active Directory if possible, whether or not it is a department requirement.

In general, the following guidelines apply:

  • If you want or need to take advantage of once-per-session domain authentication (i.e., if you use Outlook to access your IU Exchange account, or if you regularly map drives or print to networked printers), the computer should be on the ADS domain. If it is not, you will have to enter a password for each service or resource you access.
  • If your IT Pro or another administrator controls computer and network security through Group Policy Objects, the computer must be on the ADS domain.
  • If many different IU users use the computer, it should be on the ADS domain. Otherwise, you will have to create a local account for each individual user, or one "general" local account accessible by everyone. This option is not secure, as it allows all users to access all other users' files.

However, in some instances, you may not want your computer on the ADS domain. Consider the following:

  • If you use a portable computer or otherwise access the network wirelessly, joining the ADS domain will not give you the benefits listed above.
  • An Active Directory-joined computer will normally need to communicate with the network to log you in, with the following exceptions:
    • Cached credentials will let you log in without a connection.
    • You can log into a local rather than an ADS account.

At IU, that means a wireless computer needs a VPN connection first. Windows is able to log into a domain through a VPN connection, and has no problem doing it, but relying on such a connection when logging in adds complexity as well as a potential point for problems to arise.

This is document ajmx in the Knowledge Base.
Last modified on 2017-07-20 20:20:19.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.