{"id":123,"title":"Bilgisayarlar\u0131 Windows Active Directory Etki Alan\u0131na Katma","content":"Kurumsal a\u011flarda, bilgisayarlar\u0131 bir Windows Active Directory etki alan\u0131na (domain) katmak, BT y\u00f6netiminin temel ta\u015flar\u0131ndan biridir. Bu rehber, farkl\u0131 senaryo ve y\u00f6ntemlerle bilgisayarlar\u0131 Active Directory etki alan\u0131na katma s\u00fcrecini ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. <h2>\u0130\u00e7indekiler<\/h2> <ol> <li>Giri\u015f: Etki Alan\u0131na Kat\u0131lman\u0131n \u00d6nemi<\/li> <li>\u00d6n Ko\u015fullar ve Gereksinimler<\/li> <li>Active Directory Bilgisayar Hesab\u0131 Nedir?<\/li> <li>Etki Alan\u0131na Kat\u0131lma Y\u00f6ntemleri <ul> <li>Y\u00f6ntem 1: Kullan\u0131c\u0131 Aray\u00fcz\u00fc (GUI) ile Kat\u0131l\u0131m<\/li> <li>Y\u00f6ntem 2: PowerShell ile Etki Alan\u0131na Kat\u0131lma<\/li> <li>Y\u00f6ntem 3: Komut Sat\u0131r\u0131 (CMD) ile Kat\u0131lma<\/li> <li>Y\u00f6ntem 4: Grup \u0130lkesi (GPO) ve Otomatik Kat\u0131l\u0131m<\/li> <li>Y\u00f6ntem 5: Microsoft Intune\/Endpoint Manager ile Kat\u0131l\u0131m<\/li> <\/ul> <\/li> <li>Farkl\u0131 \u0130\u015fletim Sistemlerinde Etki Alan\u0131na Kat\u0131lma <ul> <li>Windows 10\/11 Pro ve Enterprise<\/li> <li>Windows Server<\/li> <li>macOS Cihazlar<\/li> <li>Linux Sistemler<\/li> <\/ul> <\/li> <li>\u00d6nceden Etki Alan\u0131 Bilgisayar Hesab\u0131 Olu\u015fturma <ul> <li>Active Directory Kullan\u0131c\u0131lar\u0131 ve Bilgisayarlar\u0131 MMC Snap-in'i Kullanarak<\/li> <li>PowerShell ile Bilgisayar Hesab\u0131 Olu\u015fturma<\/li> <li>Toplu Bilgisayar Hesab\u0131 Olu\u015fturma<\/li> <\/ul> <\/li> <li>Sorun Giderme <ul> <li>Yayg\u0131n Hatalar ve \u00c7\u00f6z\u00fcmleri<\/li> <li>Etki Alan\u0131na Kat\u0131l\u0131m Ba\u015far\u0131s\u0131z Oldu\u011funda<\/li> <li>Bilgisayar Hesab\u0131 Sorunlar\u0131<\/li> <\/ul> <\/li> <li>G\u00fcvenlik Hususlar\u0131 ve En \u0130yi Uygulamalar<\/li> <li>Etki Alan\u0131ndan \u00c7\u0131karma<\/li> <li>Sonu\u00e7<\/li> <\/ol> <h2>Giri\u015f: Etki Alan\u0131na Kat\u0131lman\u0131n \u00d6nemi<\/h2> Bilgisayarlar\u0131 bir Active Directory etki alan\u0131na katmak, kurumsal bir a\u011fda bir\u00e7ok \u00f6nemli avantaj sa\u011flar: <ul> <li><strong>Merkezi Y\u00f6netim<\/strong>: Tek bir kontrol noktas\u0131ndan t\u00fcm bilgisayarlar\u0131 y\u00f6netebilme<\/li> <li><strong>Grup \u0130lkeleri (GPO)<\/strong>: G\u00fcvenlik ve yap\u0131land\u0131rma ayarlar\u0131n\u0131 merkezi olarak uygulama<\/li> <li><strong>Tek Oturum A\u00e7ma (SSO)<\/strong>: Kullan\u0131c\u0131lar\u0131n farkl\u0131 sistemlere tek kimlikle eri\u015febilmesi<\/li> <li><strong>Kaynak Payla\u015f\u0131m\u0131<\/strong>: Dosya, yaz\u0131c\u0131 ve di\u011fer a\u011f kaynaklar\u0131na daha kolay eri\u015fim<\/li> <li><strong>G\u00fcvenlik<\/strong>: Geli\u015fmi\u015f g\u00fcvenlik kontrolleri ve denetim \u00f6zellikleri<\/li> <li><strong>Yaz\u0131l\u0131m Da\u011f\u0131t\u0131m\u0131<\/strong>: Merkezi yaz\u0131l\u0131m da\u011f\u0131t\u0131m\u0131 ve y\u00f6netimi<\/li> <\/ul> <h2>\u00d6n Ko\u015fullar ve Gereksinimler<\/h2> Bir bilgisayar\u0131 Active Directory etki alan\u0131na katmadan \u00f6nce a\u015fa\u011f\u0131daki gereksinimlerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olun: <h3>Altyap\u0131 Gereksinimleri<\/h3> <ul> <li>\u00c7al\u0131\u015fan bir Active Directory Domain Controller (DC)<\/li> <li>\u0130\u015flevsel DNS hizmetleri<\/li> <li>Bilgisayar ile DC aras\u0131nda a\u011f ba\u011flant\u0131s\u0131<\/li> <li>Yeterli bant geni\u015fli\u011fi ve d\u00fc\u015f\u00fck gecikme s\u00fcresi<\/li> <\/ul> <h3>Kullan\u0131c\u0131 ve \u0130zin Gereksinimleri<\/h3> <ul> <li>Etki alan\u0131 y\u00f6neticisi hesab\u0131 veya bilgisayar hesab\u0131 olu\u015fturma yetkisi olan bir hesap<\/li> <li>Hedef bilgisayarda yerel y\u00f6netici ayr\u0131cal\u0131klar\u0131<\/li> <\/ul> <h3>Yaz\u0131l\u0131m Gereksinimleri<\/h3> <ul> <li>Windows Professional veya Enterprise s\u00fcr\u00fcm\u00fc (Home s\u00fcr\u00fcmleri desteklenmez)<\/li> <li>G\u00fcncel i\u015fletim sistemi g\u00fcncellemeleri<\/li> <\/ul> <h3>A\u011f Gereksinimleri<\/h3> <ul> <li>DNS yap\u0131land\u0131rmas\u0131 (bilgisayar\u0131n DNS ayarlar\u0131n\u0131n etki alan\u0131 DNS sunucusunu g\u00f6stermesi)<\/li> <li>Gerekli ba\u011flant\u0131 noktalar\u0131n\u0131n a\u00e7\u0131k olmas\u0131: <ul> <li>TCP\/UDP 53: DNS<\/li> <li>TCP\/UDP 88: Kerberos<\/li> <li>TCP\/UDP 389: LDAP<\/li> <li>TCP\/UDP 445: SMB<\/li> <li>TCP 135: RPC<\/li> <\/ul> <\/li> <\/ul> <h2>Active Directory Bilgisayar Hesab\u0131 Nedir?<\/h2> Active Directory etki alan\u0131na kat\u0131lan her bilgisayar i\u00e7in bir bilgisayar hesab\u0131 olu\u015fturulur. Bu hesap, bilgisayar\u0131n etki alan\u0131ndaki kimli\u011fini temsil eder ve a\u015fa\u011f\u0131daki \u00f6zelliklere sahiptir: <ul> <li>Benzersiz bir G\u00fcvenlik Tan\u0131mlay\u0131c\u0131s\u0131 (SID)<\/li> <li>Kerberos kimlik do\u011frulamas\u0131 i\u00e7in bir \u015fifre (her 30 g\u00fcnde bir otomatik yenilenir)<\/li> <li>Active Directory'de \"Computers\" konteyneri veya belirtilen bir OU (Organizasyon Birimi) i\u00e7inde saklan\u0131r<\/li> <li>Bilgisayar\u0131n etki alan\u0131 kaynaklar\u0131na eri\u015fmesini sa\u011flayan g\u00fcvenlik ba\u011flam\u0131<\/li> <li>Bilgisayar nesnesi \u00f6zellikleri (i\u015fletim sistemi, donan\u0131m bilgileri vb.)<\/li> <\/ul> Bilgisayar hesaplar\u0131, kullan\u0131c\u0131 hesaplar\u0131na benzer ancak isimleri genellikle \"$\" i\u015fareti ile biter (\u00f6rne\u011fin, LAPTOP01$). <h2>Etki Alan\u0131na Kat\u0131lma Y\u00f6ntemleri<\/h2> <h3>Y\u00f6ntem 1: Kullan\u0131c\u0131 Aray\u00fcz\u00fc (GUI) ile Kat\u0131l\u0131m<\/h3> Windows 10\/11 i\u00e7in grafiksel kullan\u0131c\u0131 aray\u00fcz\u00fcn\u00fc kullanarak etki alan\u0131na kat\u0131lmak en yayg\u0131n y\u00f6ntemdir: <ol> <li><strong>Sistem \u00d6zelliklerine Eri\u015fim<\/strong>: <ul> <li>Windows + Pause\/Break tu\u015flar\u0131na bas\u0131n, ya da<\/li> <li>Ayarlar &gt; Sistem &gt; Hakk\u0131nda &gt; Geli\u015fmi\u015f sistem ayarlar\u0131'na t\u0131klay\u0131n.<\/li> <\/ul> <\/li> <li><strong>Bilgisayar Ad\u0131\/Domain De\u011fi\u015fikli\u011fi<\/strong>: <ul> <li>\"Bilgisayar Ad\u0131\" sekmesinde, \"De\u011fi\u015ftir\" d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ul> <\/li> <li><strong>Etki Alan\u0131na Kat\u0131lma<\/strong>: <ul> <li>\"Domain\" se\u00e7ene\u011fini i\u015faretleyin.<\/li> <li>Kat\u0131lmak istedi\u011finiz etki alan\u0131n\u0131n ad\u0131n\u0131 girin (\u00f6rn. sirketim.local).<\/li> <li>\"Tamam\" d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ul> <\/li> <li><strong>Kimlik Do\u011frulama<\/strong>: <ul> <li>Etki alan\u0131 y\u00f6neticisi veya yeterli izinlere sahip kullan\u0131c\u0131 kimlik bilgilerini girin.<\/li> <li>Format: DOMAIN\\kullanici veya kullanici@domain.com<\/li> <\/ul> <\/li> <li><strong>Yeniden Ba\u015flatma<\/strong>: <ul> <li>Ba\u015far\u0131l\u0131 kat\u0131l\u0131mdan sonra, bilgisayar\u0131 yeniden ba\u015flat\u0131n.<\/li> <\/ul> <\/li> <\/ol> <h3>Y\u00f6ntem 2: PowerShell ile Etki Alan\u0131na Kat\u0131lma<\/h3> PowerShell, \u00f6zellikle toplu i\u015flemler i\u00e7in daha fazla kontrol ve esneklik sa\u011flar: <ol> <li><strong>PowerShell'i Y\u00f6netici Olarak Ba\u015flatma<\/strong>: <ul> <li>PowerShell simgesine sa\u011f t\u0131klay\u0131n ve \"Y\u00f6netici olarak \u00e7al\u0131\u015ft\u0131r\"\u0131 se\u00e7in.<\/li> <\/ul> <\/li> <li><strong>Temel PowerShell Komutu<\/strong>: <pre><code >Add-Computer -DomainName \"sirketim.local\" -Credential (Get-Credential) -Restart <\/code><\/pre> <\/li> <li><strong>Daha Fazla Parametre \u0130\u00e7eren Geli\u015fmi\u015f Komut<\/strong>: <pre><code >Add-Computer -DomainName \"sirketim.local\" -OUPath \"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" -Credential (Get-Credential) -Restart -Force <\/code><\/pre> <\/li> <li><strong>Belirli Bir Etki Alan\u0131 Denetleyicisi Hedefleme<\/strong>: <pre><code >Add-Computer -DomainName \"sirketim.local\" -Server \"DC01.sirketim.local\" -Credential (Get-Credential) -Restart <\/code><\/pre> <\/li> <li><strong>Yeni Bilgisayar Ad\u0131 Ayarlama ve Etki Alan\u0131na Kat\u0131lma<\/strong>: <pre><code >Add-Computer -DomainName \"sirketim.local\" -NewName \"LAPTOP-NEWxxx\" -Credential (Get-Credential) -Restart <\/code><\/pre> <\/li> <\/ol> <h3>Y\u00f6ntem 3: Komut Sat\u0131r\u0131 (CMD) ile Kat\u0131lma<\/h3> Eski sistemler veya script uyumlulu\u011fu i\u00e7in komut sat\u0131r\u0131 kullanabilirsiniz: <ol> <li><strong>Y\u00f6netici Olarak Komut \u0130stemi A\u00e7ma<\/strong>: <ul> <li>Ba\u015flat men\u00fcs\u00fcnde \"cmd\" yaz\u0131n, sa\u011f t\u0131klay\u0131n ve \"Y\u00f6netici olarak \u00e7al\u0131\u015ft\u0131r\"\u0131 se\u00e7in.<\/li> <\/ul> <\/li> <li><strong>Netdom Komutunu Kullanma<\/strong>: <pre><code >netdom join %computername% \/d:sirketim.local \/OU:\"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" \/ud:sirketim\\admin \/pd:* <\/code><\/pre> <\/li> <li><strong>Yeni Bilgisayar Ad\u0131yla Kat\u0131lma<\/strong>: <pre><code >netdom join LAPTOP-NEWxxx \/d:sirketim.local \/ud:sirketim\\admin \/pd:* <\/code><\/pre> <\/li> <li><strong>\u0130\u015flem Tamamland\u0131ktan Sonra Yeniden Ba\u015flatma<\/strong>: <pre><code >shutdown \/r \/t 0 <\/code><\/pre> <\/li> <\/ol> <h3>Y\u00f6ntem 4: Grup \u0130lkesi (GPO) ve Otomatik Kat\u0131l\u0131m<\/h3> Birden fazla bilgisayar\u0131 etki alan\u0131na otomatik olarak katmak i\u00e7in Grup \u0130lkelerini kullanabilirsiniz: <ol> <li><strong>Offline Domain Join Kullanma<\/strong>: <ul> <li>Domain Controller'da a\u00e7\u0131n: <pre><code >djoin \/provision \/domain sirketim.local \/machine LAPTOP01 \/savefile laptop01.txt <\/code><\/pre> <\/li> <li>Hedef bilgisayarda: <pre><code >djoin \/requestodj \/loadfile laptop01.txt \/windowspath %SystemRoot% \/localos <\/code><\/pre> <\/li> <\/ul> <\/li> <li><strong>G\u00f6r\u00fcnt\u00fc Tabanl\u0131 Da\u011f\u0131t\u0131mda Kat\u0131l\u0131m<\/strong>: <ul> <li>Sistem haz\u0131rl\u0131\u011f\u0131 s\u0131ras\u0131nda: <pre><code >sysprep \/oobe \/generalize \/unattend:unattend.xml <\/code><\/pre> <\/li> <li>Unattend.xml i\u00e7inde etki alan\u0131 bilgilerini belirtin: <pre><code >&lt;component name=\"Microsoft-Windows-UnattendedJoin\" processorArchitecture=\"amd64\" publicKeyToken=\"31bf3856ad364e35\" language=\"neutral\" versionScope=\"nonSxS\" xmlns:wcm=\"http:\/\/schemas.microsoft.com\/WMIConfig\/2002\/State\"&gt; &lt;Identification&gt; &lt;Credentials&gt; &lt;Domain&gt;sirketim.local&lt;\/Domain&gt; &lt;Username&gt;Admin&lt;\/Username&gt; &lt;Password&gt;P@ssw0rd&lt;\/Password&gt; &lt;\/Credentials&gt; &lt;JoinDomain&gt;sirketim.local&lt;\/JoinDomain&gt; &lt;MachineObjectOU&gt;OU=Workstations,DC=sirketim,DC=local&lt;\/MachineObjectOU&gt; &lt;\/Identification&gt;&lt;\/component&gt; <\/code><\/pre> <\/li> <\/ul> <\/li> <\/ol> <h3>Y\u00f6ntem 5: Microsoft Intune\/Endpoint Manager ile Kat\u0131l\u0131m<\/h3> Modern bulut y\u00f6netimi i\u00e7in Intune ile Azure AD ve hibrit kat\u0131l\u0131m se\u00e7enekleri: <ol> <li><strong>Autopilot Kullan\u0131m\u0131<\/strong>: <ul> <li>Cihaz donan\u0131m kimliklerini toplay\u0131n<\/li> <li>Autopilot hizmetine y\u00fckleyin<\/li> <li>Da\u011f\u0131t\u0131m profilini yap\u0131land\u0131r\u0131n<\/li> <li>Kullan\u0131c\u0131 ilk kez cihaz\u0131 a\u00e7t\u0131\u011f\u0131nda otomatik olarak etki alan\u0131na kat\u0131l\u0131r<\/li> <\/ul> <\/li> <li><strong>Hybrid Azure AD Join Yap\u0131land\u0131rmas\u0131<\/strong>: <ul> <li>Azure AD Connect'i yap\u0131land\u0131r\u0131n<\/li> <li>Grup \u0130lkesi veya Intune arac\u0131l\u0131\u011f\u0131yla yap\u0131land\u0131rma<\/li> <\/ul> <\/li> <\/ol> <h2>Farkl\u0131 \u0130\u015fletim Sistemlerinde Etki Alan\u0131na Kat\u0131lma<\/h2> <h3>Windows 10\/11 Pro ve Enterprise<\/h3> Windows 10\/11 Pro ve Enterprise s\u00fcr\u00fcmleri do\u011frudan Active Directory etki alan\u0131na kat\u0131labilir. Windows Home s\u00fcr\u00fcmleri bu \u00f6zelli\u011fi desteklemez. <strong>Windows 11 i\u00e7in GUI Yoluyla Kat\u0131l\u0131m<\/strong>: <ol> <li>Ayarlar &gt; Sistem &gt; Hakk\u0131nda &gt; \"Bu PC'nin ad\u0131n\u0131 veya etki alan\u0131n\u0131 de\u011fi\u015ftirin\" ba\u011flant\u0131s\u0131na t\u0131klay\u0131n<\/li> <li>\"Bu bilgisayar bir etki alan\u0131n\u0131n veya \u00e7al\u0131\u015fma alan\u0131n\u0131n par\u00e7as\u0131\" alt\u0131nda \"Ayarlar\u0131 de\u011fi\u015ftir\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <li>Bilgisayar ad\u0131 sekmesinde \"De\u011fi\u015ftir\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <li>\"Domain\" se\u00e7ene\u011fini i\u015faretleyip etki alan\u0131 ad\u0131n\u0131 girin<\/li> <li>Y\u00f6netici kimlik bilgilerini girin<\/li> <li>Bilgisayar\u0131 yeniden ba\u015flat\u0131n<\/li> <\/ol> <h3>Windows Server<\/h3> Windows Server'\u0131 etki alan\u0131na katma i\u015flemi, istemci i\u015fletim sistemleriyle b\u00fcy\u00fck \u00f6l\u00e7\u00fcde ayn\u0131d\u0131r ancak baz\u0131 farkl\u0131l\u0131klar vard\u0131r: <ol> <li>Server Manager &gt; Local Server &gt; \"WORKGROUP\" etiketi yan\u0131ndaki ba\u011flant\u0131ya t\u0131klay\u0131n<\/li> <li>\"Computer Name\" sekmesinde \"Change\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <li>\"Domain\" radyo d\u00fc\u011fmesini se\u00e7in ve etki alan\u0131 ad\u0131n\u0131 girin<\/li> <li>Y\u00f6netici kimlik bilgilerini girin<\/li> <li>Sunucuyu yeniden ba\u015flat\u0131n<\/li> <\/ol> <strong>Not<\/strong>: Windows Server'\u0131 bir etki alan\u0131na katmadan \u00f6nce, bu sunucunun etki alan\u0131 denetleyicisi (DC) olmad\u0131\u011f\u0131ndan emin olun. Bir DC ba\u015fka bir etki alan\u0131na kat\u0131lamaz. <h3>macOS Cihazlar<\/h3> macOS cihazlar\u0131n\u0131 Active Directory etki alan\u0131na katma: <ol> <li>Apple men\u00fcs\u00fc &gt; Sistem Tercihleri &gt; Kullan\u0131c\u0131lar ve Gruplar &gt; A\u011f Hesap Sunucusu'na t\u0131klay\u0131n<\/li> <li>Kilit simgesini t\u0131klay\u0131n ve y\u00f6netici \u015fifresini girin <ul> <li>d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <\/ul> <\/li> <li>Sunucu adresi olarak etki alan\u0131 ad\u0131n\u0131 veya bir DC'nin IP adresini girin<\/li> <li>\"Sunucu Ayarlar\u0131n\u0131 A\u00e7\"a t\u0131klay\u0131n<\/li> <li>Active Directory sekmesini se\u00e7in<\/li> <li>A\u015fa\u011f\u0131daki bilgileri doldurun: <ul> <li>Active Directory Etki Alan\u0131: sirketim.local<\/li> <li>Bilgisayar Kimli\u011fi: Mac'inizin ad\u0131<\/li> <li>AD Y\u00f6netici Kullan\u0131c\u0131 ve \u015eifre<\/li> <\/ul> <\/li> <li>Ba\u011flan'a t\u0131klay\u0131n<\/li> <\/ol> <h3>Linux Sistemler<\/h3> Linux sistemleri SSSD (System Security Services Daemon) veya Winbind kullanarak Active Directory'e kat\u0131labilir: <strong>SSSD ile Kat\u0131l\u0131m (Ubuntu \u00f6rne\u011fi)<\/strong>: <ol> <li>Gerekli paketleri y\u00fckleyin: <pre><code >sudo apt update sudo apt install realmd sssd sssd-tools libnss-sss libpam-sss adcli samba-common-bin oddjob oddjob-mkhomedir packagekit <\/code><\/pre> <\/li> <li>Realm discover komutu ile etki alan\u0131n\u0131 ke\u015ffedin: <pre><code >sudo realm discover sirketim.local <\/code><\/pre> <\/li> <li>Etki alan\u0131na kat\u0131l\u0131n: <pre><code >sudo realm join sirketim.local -U Administrator <\/code><\/pre> <\/li> <li>Eri\u015fimleri yap\u0131land\u0131r\u0131n: <pre><code >sudo realm permit -g 'Domain Admins' <\/code><\/pre> <\/li> <li>Otomatik ev dizini olu\u015fturma: <pre><code >sudo pam-auth-update --enable mkhomedir <\/code><\/pre> <\/li> <\/ol> <h2>\u00d6nceden Etki Alan\u0131 Bilgisayar Hesab\u0131 Olu\u015fturma<\/h2> Bazen bilgisayarlar\u0131 etki alan\u0131na katmadan \u00f6nce Active Directory'de bilgisayar hesaplar\u0131n\u0131 olu\u015fturmak gerekebilir. Bu, \u00f6zellikle belirli bir OU'ya bilgisayar hesaplar\u0131 yerle\u015ftirmek veya toplu kat\u0131l\u0131m senaryolar\u0131nda yararl\u0131d\u0131r. <h3>Active Directory Kullan\u0131c\u0131lar\u0131 ve Bilgisayarlar\u0131 MMC Snap-in'i Kullanarak<\/h3> <ol> <li><strong>Active Directory Kullan\u0131c\u0131lar\u0131 ve Bilgisayarlar\u0131 A\u00e7ma<\/strong>: <ul> <li>Windows + R tu\u015flar\u0131na bas\u0131n, \"dsa.msc\" yaz\u0131n ve Enter'a bas\u0131n.<\/li> <\/ul> <\/li> <li><strong>Hedef OU'yu Se\u00e7me<\/strong>: <ul> <li>Bilgisayar hesab\u0131n\u0131 olu\u015fturmak istedi\u011finiz konumda (OU) sa\u011f t\u0131klay\u0131n.<\/li> <li>Yeni &gt; Bilgisayar'\u0131 se\u00e7in.<\/li> <\/ul> <\/li> <li><strong>Bilgisayar Bilgilerini Girme<\/strong>: <ul> <li>Bilgisayar ad\u0131n\u0131 girin (\u00f6rn. LAPTOP01).<\/li> <li>\u0130ste\u011fe ba\u011fl\u0131 olarak, kullan\u0131c\u0131y\u0131 veya grubu bilgisayar\u0131 etki alan\u0131na katmak i\u00e7in yetkilendirin.<\/li> <li>\"Tamam\" d\u00fc\u011fmesine t\u0131klay\u0131n.<\/li> <\/ul> <\/li> <\/ol> <h3>PowerShell ile Bilgisayar Hesab\u0131 Olu\u015fturma<\/h3> PowerShell kullanarak daha fazla otomatikle\u015ftirme ve kontrol sa\u011flanabilir: <ol> <li><strong>PowerShell'i Y\u00f6netici Olarak A\u00e7ma<\/strong>: <ul> <li>PowerShell'i y\u00f6netici olarak ba\u015flat\u0131n.<\/li> <\/ul> <\/li> <li><strong>Temel Bilgisayar Hesab\u0131 Olu\u015fturma<\/strong>: <pre><code >New-ADComputer -Name \"LAPTOP01\" -SamAccountName \"LAPTOP01\" -Path \"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" <\/code><\/pre> <\/li> <li><strong>Daha Fazla \u00d6zellikle Bilgisayar Hesab\u0131 Olu\u015fturma<\/strong>: <pre><code >New-ADComputer -Name \"LAPTOP01\" -SamAccountName \"LAPTOP01\" -Path \"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" -Description \"Finans Departman\u0131 Laptop\" -Location \"\u0130stanbul Ofisi\" -Enabled $true <\/code><\/pre> <\/li> <\/ol> <h3>Toplu Bilgisayar Hesab\u0131 Olu\u015fturma<\/h3> CSV dosyas\u0131 veya dizi kullanarak birden fazla bilgisayar hesab\u0131 olu\u015fturabilirsiniz: <ol> <li><strong>CSV Dosyas\u0131ndan Toplu Olu\u015fturma<\/strong>: <ul> <li>A\u015fa\u011f\u0131daki formatta bir CSV dosyas\u0131 haz\u0131rlay\u0131n (computers.csv): <pre><code>ComputerName,Description,OU LAPTOP01,Finans Laptop,OU=Laptops,OU=Computers,DC=sirketim,DC=local LAPTOP02,Pazarlama Laptop,OU=Laptops,OU=Computers,DC=sirketim,DC=local DESKTOP01,\u0130nsan Kaynaklar\u0131 PC,OU=Desktops,OU=Computers,DC=sirketim,DC=local <\/code><\/pre> <\/li> <li>PowerShell komutunu \u00e7al\u0131\u015ft\u0131r\u0131n: <pre><code >Import-Csv -Path \"C:\\Temp\\computers.csv\" | ForEach-Object { New-ADComputer -Name $_.ComputerName -SamAccountName $_.ComputerName -Path $_.OU -Description $_.Description -Enabled $true } <\/code><\/pre> <\/li> <\/ul> <\/li> <li><strong>PowerShell Dizisi Kullanarak Olu\u015fturma<\/strong>: <pre><code >$computers = @( @{Name=\"LAPTOP01\"; Description=\"Finans Laptop\"; OU=\"OU=Laptops,OU=Computers,DC=sirketim,DC=local\"}, @{Name=\"LAPTOP02\"; Description=\"Pazarlama Laptop\"; OU=\"OU=Laptops,OU=Computers,DC=sirketim,DC=local\"}, @{Name=\"DESKTOP01\"; Description=\"\u0130nsan Kaynaklar\u0131 PC\"; OU=\"OU=Desktops,OU=Computers,DC=sirketim,DC=local\"} ) foreach ($computer in $computers) { New-ADComputer -Name $computer.Name -SamAccountName $computer.Name -Path $computer.OU -Description $computer.Description -Enabled $true } <\/code><\/pre> <\/li> <\/ol> <h2>Sorun Giderme<\/h2> <h3>Yayg\u0131n Hatalar ve \u00c7\u00f6z\u00fcmleri<\/h3> <strong>1. \"Belirtilen etki alan\u0131 mevcut de\u011fil veya eri\u015filemiyor\" Hatas\u0131<\/strong> Olas\u0131 Nedenler ve \u00c7\u00f6z\u00fcmler: <ul> <li><strong>DNS Sorunlar\u0131<\/strong>: Bilgisayar\u0131n DNS ayarlar\u0131n\u0131 kontrol edin, etki alan\u0131 DNS sunucusunu g\u00f6sterdi\u011finden emin olun. <pre><code>ipconfig \/all <\/code><\/pre> <\/li> <li><strong>A\u011f Ba\u011flant\u0131s\u0131<\/strong>: Etki alan\u0131 denetleyicisine ping atarak ba\u011flant\u0131y\u0131 kontrol edin. <pre><code>ping dc01.sirketim.local <\/code><\/pre> <\/li> <li><strong>Hatal\u0131 Etki Alan\u0131 Ad\u0131<\/strong>: Do\u011fru etki alan\u0131 ad\u0131n\u0131 kulland\u0131\u011f\u0131n\u0131zdan emin olun.<\/li> <li><strong>G\u00fcvenlik Duvar\u0131<\/strong>: Gerekli ba\u011flant\u0131 noktalar\u0131n\u0131n a\u00e7\u0131k oldu\u011funu kontrol edin.<\/li> <\/ul> <strong>2. \"Yeterli eri\u015fim haklar\u0131na sahip de\u011filsiniz\" Hatas\u0131<\/strong> Olas\u0131 Nedenler ve \u00c7\u00f6z\u00fcmler: <ul> <li><strong>Yetersiz \u0130zinler<\/strong>: Etki alan\u0131 y\u00f6neticisi veya bilgisayar hesaplar\u0131n\u0131 y\u00f6netme yetkisine sahip bir hesap kullan\u0131n.<\/li> <li><strong>Kimlik Do\u011frulama Format\u0131<\/strong>: DOMAIN\\username format\u0131n\u0131 do\u011fru kulland\u0131\u011f\u0131n\u0131zdan emin olun.<\/li> <li><strong>Parola Politikalar\u0131<\/strong>: Hesap kilidi veya parola s\u00fcresi dolmu\u015f olabilir.<\/li> <\/ul> <strong>3. \"Belirtilen bilgisayar hesab\u0131 zaten var\" Hatas\u0131<\/strong> Olas\u0131 Nedenler ve \u00c7\u00f6z\u00fcmler: <ul> <li><strong>Mevcut Hesap<\/strong>: Active Directory'de ayn\u0131 adl\u0131 bir bilgisayar hesab\u0131 zaten var. <ul> <li>Mevcut hesab\u0131 silin veya s\u0131f\u0131rlay\u0131n: <pre><code >Reset-ComputerMachinePassword -Server \"DC01.sirketim.local\" -Credential (Get-Credential) <\/code><\/pre> <\/li> <li>Farkl\u0131 bir bilgisayar ad\u0131 kullan\u0131n.<\/li> <\/ul> <\/li> <\/ul> <strong>4. \"G\u00fcvenli Kanal Olu\u015fturulamad\u0131\" Hatas\u0131<\/strong> Olas\u0131 Nedenler ve \u00c7\u00f6z\u00fcmler: <ul> <li><strong>Zaman Senkronizasyonu<\/strong>: Bilgisayar ve etki alan\u0131 aras\u0131ndaki zaman fark\u0131 kontrol edin (5 dakikadan az olmal\u0131). <pre><code>w32tm \/resync <\/code><\/pre> <\/li> <li><strong>Hasarl\u0131 Bilgisayar Hesab\u0131<\/strong>: G\u00fcvenli kanal\u0131 s\u0131f\u0131rlay\u0131n: <pre><code >Test-ComputerSecureChannel -Repair <\/code><\/pre> <\/li> <li><strong>Eski Bilgisayar Hesab\u0131<\/strong>: Hesab\u0131 Active Directory'den silin ve yeniden kat\u0131l\u0131m yap\u0131n.<\/li> <\/ul> <h3>Etki Alan\u0131na Kat\u0131l\u0131m Ba\u015far\u0131s\u0131z Oldu\u011funda<\/h3> <ol> <li><strong>Etki Alan\u0131 Uyumlulu\u011funu Kontrol Edin<\/strong>: <ul> <li>Windows s\u00fcr\u00fcm\u00fcn\u00fcz\u00fcn etki alan\u0131na kat\u0131l\u0131m\u0131 destekledi\u011finden emin olun.<\/li> <li>Home s\u00fcr\u00fcmleri desteklenmez.<\/li> <\/ul> <\/li> <li><strong>Sistem Kay\u0131tlar\u0131n\u0131 Kontrol Edin<\/strong>: <ul> <li>Windows Olay G\u00f6r\u00fcnt\u00fcleyicisi'ni a\u00e7\u0131n (eventvwr.msc).<\/li> <li>\"Windows Kay\u0131tlar\u0131\" &gt; \"Sistem\" ve \"G\u00fcvenlik\" kay\u0131tlar\u0131n\u0131 inceleyin.<\/li> <li>Hata kodlar\u0131 ve a\u00e7\u0131klamalar\u0131 not edin.<\/li> <\/ul> <\/li> <li><strong>NetSetup.log Dosyas\u0131n\u0131 \u0130nceleyin<\/strong>: <ul> <li><code>%windir%\\debug\\NetSetup.log<\/code> dosyas\u0131n\u0131 kontrol edin.<\/li> <li>Kat\u0131l\u0131m s\u00fcrecindeki hatalar\u0131 ve nedenleri g\u00f6sterebilir.<\/li> <\/ul> <\/li> <li><strong>A\u011f Ba\u011flant\u0131s\u0131n\u0131 Test Edin<\/strong>: <pre><code >nslookup sirketim.local nslookup -type=SRV _ldap._tcp.sirketim.local <\/code><\/pre> <\/li> <li><strong>Komut Sat\u0131r\u0131 Tan\u0131lama Ara\u00e7lar\u0131<\/strong>: <pre><code >dcdiag \/test:dns \/v nltest \/dsgetdc:sirketim.local <\/code><\/pre> <\/li> <\/ol> <h3>Bilgisayar Hesab\u0131 Sorunlar\u0131<\/h3> <ol> <li><strong>Bilgisayar Hesab\u0131n\u0131 S\u0131f\u0131rlama<\/strong>: <pre><code >Reset-ComputerMachinePassword -Server \"DC01.sirketim.local\" -Credential (Get-Credential) <\/code><\/pre> <\/li> <li><strong>G\u00fcvenli Kanal\u0131 Test Etme ve Onarma<\/strong>: <pre><code >Test-ComputerSecureChannel -Verbose Test-ComputerSecureChannel -Repair -Credential (Get-Credential) <\/code><\/pre> <\/li> <li><strong>Hesap Durumunu Kontrol Etme<\/strong>: <pre><code >Get-ADComputer -Identity \"LAPTOP01\" -Properties * | Select-Object Name, Enabled, PasswordLastSet, LastLogonDate <\/code><\/pre> <\/li> <li><strong>Devre D\u0131\u015f\u0131 B\u0131rak\u0131lm\u0131\u015f Hesab\u0131 Etkinle\u015ftirme<\/strong>: <pre><code >Enable-ADAccount -Identity \"LAPTOP01$\" <\/code><\/pre> <\/li> <\/ol> <h2>G\u00fcvenlik Hususlar\u0131 ve En \u0130yi Uygulamalar<\/h2> Etki alan\u0131na bilgisayar kat\u0131l\u0131m\u0131 s\u0131ras\u0131nda g\u00fcvenli\u011fi optimize etmek i\u00e7in: <ol> <li><strong>Ayr\u0131cal\u0131kl\u0131 Hesap Y\u00f6netimi<\/strong>: <ul> <li>Etki alan\u0131na kat\u0131l\u0131m i\u00e7in minimum gerekli haklara sahip hesaplar kullan\u0131n.<\/li> <li>Etki alan\u0131 y\u00f6neticisi hesab\u0131n\u0131 yerine delegated admin kullanmay\u0131 tercih edin.<\/li> <\/ul> <\/li> <li><strong>Organizasyon Birimi (OU) Stratejisi<\/strong>: <ul> <li>Bilgisayarlar\u0131 i\u015flevsel veya co\u011frafi konuma g\u00f6re OU'lara ay\u0131r\u0131n.<\/li> <li>Yeni kat\u0131lan bilgisayarlar i\u00e7in bir \"Staging\" OU kullan\u0131n.<\/li> <\/ul> <\/li> <li><strong>Bilgisayar Hesab\u0131 Ya\u015fam D\u00f6ng\u00fcs\u00fc Y\u00f6netimi<\/strong>: <ul> <li>Eski ve kullan\u0131lmayan bilgisayar hesaplar\u0131 i\u00e7in temizleme politikas\u0131 olu\u015fturun.<\/li> <li>90+ g\u00fcn inaktif bilgisayar hesaplar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n veya ta\u015f\u0131y\u0131n.<\/li> <\/ul> <\/li> <li><strong>Bilgisayar Nesneleri \u0130\u00e7in \u0130sim Standartlar\u0131<\/strong>: <ul> <li>Tutarl\u0131 bir adland\u0131rma standard\u0131 uygulay\u0131n (\u00f6rn. LOKASYON-T\u0130P-SER\u0130NO).<\/li> <li>Bilgisayar a\u00e7\u0131klamalar\u0131nda ayr\u0131nt\u0131l\u0131 bilgiler (departman, kullan\u0131c\u0131) bulundurun<\/li> <\/ul> <\/li> <li><strong>Kat\u0131l\u0131m \u0130zinlerini Yetkilendirme<\/strong>: <ul> <li>Belirli gruplar\u0131n veya kullan\u0131c\u0131lar\u0131n belirli OU'lara bilgisayar eklemesine izin verin.<\/li> <\/ul> <pre><code >Set-ADOrganizationalUnit -Identity \"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" -ManagedBy \"CN=IT Support,OU=Groups,DC=sirketim,DC=local\" # Delegasyon izinlerini ayarlamak i\u00e7in a\u015fa\u011f\u0131daki komutu kullanabilirsiniz dsacls \"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" \/G \"SIRKETIM\\IT Support:CCDC;Computer\" # veya PowerShell kullanarak daha detayl\u0131 izinler: $ou = \"OU=Laptops,OU=Computers,DC=sirketim,DC=local\" $group = \"IT Support\" $acl = Get-Acl -Path \"AD:\\$ou\" $sid = (Get-ADGroup $group).SID # Bilgisayar olu\u015fturma izni $objectGuid = \"bf967a86-0de6-11d0-a285-00aa003049e2\" # Bilgisayar nesnesi GUID'i $acl.AddAccessRule((New-Object System.DirectoryServices.ActiveDirectoryAccessRule($sid, \"CreateChild\", \"Allow\", $objectGuid, \"All\"))) # Bilgisayarlar\u0131 y\u00f6netme izni $acl.AddAccessRule((New-Object System.DirectoryServices.ActiveDirectoryAccessRule($sid, \"ReadProperty, WriteProperty\", \"Allow\", \"Descendents\", $objectGuid))) # ACL'yi uygulama Set-Acl -AclObject $acl -Path \"AD:\\$ou\" <\/code><\/pre> Bu \u015fekilde, belirli gruplar\u0131n veya kullan\u0131c\u0131lar\u0131n yaln\u0131zca belirli OU'larda bilgisayar hesaplar\u0131 olu\u015fturmas\u0131na ve y\u00f6netmesine izin verilir. Bu, g\u00fcvenli\u011fi art\u0131r\u0131r ve Active Directory yap\u0131n\u0131z\u0131n daha iyi kontrol edilmesini sa\u011flar. <h2>Etki Alan\u0131ndan \u00c7\u0131karma<\/h2> Baz\u0131 durumlarda, bir bilgisayar\u0131 etki alan\u0131ndan \u00e7\u0131karmak gerekebilir. \u0130\u015fte bu i\u015flemi ger\u00e7ekle\u015ftirmenin ad\u0131mlar\u0131: <h3>GUI ile Etki Alan\u0131ndan \u00c7\u0131karma<\/h3> <ol> <li>Sistem \u00d6zellikleri penceresini a\u00e7\u0131n (Windows + Pause\/Break veya Ayarlar &gt; Sistem &gt; Hakk\u0131nda &gt; Sistem bilgileri)<\/li> <li>\"Bilgisayar Ad\u0131\" sekmesinde \"De\u011fi\u015ftir\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <li>\"\u00c7al\u0131\u015fma grubu\" se\u00e7ene\u011fini i\u015faretleyin ve bir \u00e7al\u0131\u015fma grubu ad\u0131 girin (genellikle \"WORKGROUP\")<\/li> <li>Yerel y\u00f6netici kimlik bilgilerini girin<\/li> <li>Bilgisayar\u0131 yeniden ba\u015flat\u0131n<\/li> <\/ol> <h3>PowerShell ile Etki Alan\u0131ndan \u00c7\u0131karma<\/h3> <pre><code >Remove-Computer -UnjoinDomainCredential (Get-Credential) -PassThru -Restart -Force <\/code><\/pre> veya yeni bir \u00e7al\u0131\u015fma grubuna kat\u0131lma: <pre><code >Remove-Computer -WorkgroupName \"WORKGROUP\" -UnjoinDomainCredential (Get-Credential) -PassThru -Restart -Force <\/code><\/pre> <h3>Active Directory'de Eski Bilgisayar Hesaplar\u0131n\u0131 Temizleme<\/h3> Bir bilgisayar etki alan\u0131ndan \u00e7\u0131kar\u0131ld\u0131ktan sonra, Active Directory'de bilgisayar hesab\u0131n\u0131 temizlemek i\u00e7in: <pre><code >Remove-ADComputer -Identity \"LAPTOP01\" -Confirm:$false <\/code><\/pre> veya toplu temizleme i\u00e7in: <pre><code ># 90 g\u00fcnd\u00fcr oturum a\u00e7mam\u0131\u015f bilgisayarlar\u0131 bul ve sil $staleComputers = Get-ADComputer -Filter {LastLogonTimeStamp -lt (Get-Date).AddDays(-90)} -Properties LastLogonTimeStamp $staleComputers | Remove-ADComputer -Confirm:$false <\/code><\/pre> <h2><\/h2> Bilgisayarlar\u0131 Active Directory etki alan\u0131na katmak, BT altyap\u0131n\u0131z\u0131 etkin bir \u015fekilde y\u00f6netmenin temel bir par\u00e7as\u0131d\u0131r. Bu rehberde sunulan y\u00f6ntemleri ve en iyi uygulamalar\u0131 izleyerek, sorunsuz bir etki alan\u0131na kat\u0131lma s\u00fcreci sa\u011flayabilir ve organizasyonunuzun BT kaynaklar\u0131n\u0131 daha g\u00fcvenli ve merkezi bir \u015fekilde y\u00f6netebilirsiniz. Farkl\u0131 senaryolar i\u00e7in farkl\u0131 kat\u0131l\u0131m y\u00f6ntemleri se\u00e7ebilirsiniz. Tekil sistemler i\u00e7in GUI y\u00f6ntemi kolay olabilirken, toplu da\u011f\u0131t\u0131mlar i\u00e7in PowerShell veya komut sat\u0131r\u0131 ara\u00e7lar\u0131 daha uygundur. Modern bulut entegrasyonuna ge\u00e7iyorsan\u0131z, Azure AD veya hibrit kat\u0131l\u0131m se\u00e7eneklerini de\u011ferlendirebilirsiniz. Hangi y\u00f6ntemi se\u00e7erseniz se\u00e7in, s\u00fcrecin d\u00fczg\u00fcn bir \u015fekilde planlanmas\u0131, belgelendirilmesi ve y\u00f6netilmesi, uzun vadeli ba\u015far\u0131 i\u00e7in \u00e7ok \u00f6nemlidir.<\/li> <\/ol>","excerpt":"Kurumsal a\u011flarda, bilgisayarlar\u0131 bir Windows Active Directory etki alan\u0131na (domain) katmak, BT y\u00f6netiminin temel ta\u015flar\u0131ndan biridir. Bu...","created_at":"2025-04-05 16:43:30","updated_at":"2026-09-23 17:38:29","category_id":6,"view_count":1024,"reading_time":16,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-05 16:43:30","featured_image":"resimyok.jpg","slug":"bilgisayarlari-windows-active-directory-etki-alanina-katma","category_name":"Sistem","category_slug":"sistem"}