Skip to main content

3.Computers Job Group

The 3.Computers Job Group help to pinpoint potential areas of administrative concern related to computer accounts, including stale computers and computers that have been trusted for delegation.

3.Computers Job Group in the Jobs Tree

The following jobs comprise the 3.Computers Job Group:

  • AD_ComputerDelegation Job – Provides details on computer accounts that have unconstrained delegation enabled. When an account connects to one of these computers, Active Directory stores the account's ticket-granting ticket (TGT) in memory. The computer can then reuse that TGT for impersonation, which creates a significant security risk if privileged accounts access the computer. See the What Is Kerberos Delegation? Netwrix blog article for more information about this configuration and the related security risks.
  • AD_StaleComputers Job – Provides details on stale computers that may be candidates for cleanup