diff --git a/docset/winserver2025-ps/ActiveDirectory/Set-ADComputer.md b/docset/winserver2025-ps/ActiveDirectory/Set-ADComputer.md index 7ab7c4c450..4ccbdd10a9 100644 --- a/docset/winserver2025-ps/ActiveDirectory/Set-ADComputer.md +++ b/docset/winserver2025-ps/ActiveDirectory/Set-ADComputer.md @@ -816,7 +816,7 @@ Accept wildcard characters: False Specifies the accounts which can act on the behalf of users to services running as this computer account. This parameter sets the **msDS-AllowedToActOnBehalfOfOtherIdentity** attribute of a computer account object. -`Running Set-ADComputer without specifying the first principal will cause it to get overridden` +You can specify the Distinguished Name of an account when it is from the same domain as the account in focus. When you want a security principal from another domain, you need to construct an ADPrincipal object with the desired account, for example using Get-ADGroup. ```yaml Type: ADPrincipal[]