by rashid khan lesson 5-directory assistance: administration using active directory users and...
TRANSCRIPT
by Rashid Khan
Lesson 5-Directory Assistance: Lesson 5-Directory Assistance: Administration Using Active Administration Using Active
Directory Users and ComputersDirectory Users and Computers
by Rashid Khan
OverviewOverview• Identify Active Directory objects.• Create objects using the Active
Directory Users and Computers tool.• Manage objects using the Active
Directory Users and Computers tool.
by Rashid Khan
Identify Active Directory Identify Active Directory ObjectsObjects
The Active Directory objects are:– Computer– User– Contact– Group– Organizational unit (OU)– Printer and shared folder
by Rashid Khan
ComputerComputer• A computer account uniquely identifies
a client computer or a member server.• It allows a computer to join a domain.• It allows to remotely administer the
computer over the network.• It is one of the security principals in a
domain.
by Rashid Khan
UserUser• A user account is also a security
principal.• It allows users to log on to the
network and becomes their network identity.
• To create a user account, the user’s full name, logon name, and the initial password are required.
by Rashid Khan
ContactContact• Contacts are created to provide
contact information for those who are not members of the network.
• The contact’s full name is required to create a contact.
by Rashid Khan
GroupGroup• Groups are the primary mechanism
for managing network security.• A group or a group account is a
security principal that is used to collectively manage resource access for other security principals.
by Rashid Khan
GroupGroup• Groups can be referred to as
distribution and security groups.• The different types of security groups
have different group scopes.• The group scope provides access to
resources at different levels within the overall logical network.
by Rashid Khan
GroupGroupThe three types of security groups are:
– Domain local groups – Can be given permissions for the domain in which they were created.
– Global groups – Can become members of a group in other trusted domains.
– Universal groups – Can be given permissions throughout all trusted domains, without having to join any other group.
by Rashid Khan
Organizational UnitOrganizational UnitOUs:
– Are used to subdivide a domain into manageable segments. This helps organize the network.
– Help administrators to delegate administrative tasks of the OU to other users.
by Rashid Khan
Printer and Shared FolderPrinter and Shared Folder• An Active Directory object representing
a shared folder or printer, enables users to search for resources.
• The process of creating an Active Directory object for a shared resource is referred to as publishing.
• Shared printers on a Windows Server 2003 computer are automatically published.
by Rashid Khan
Create Objects Using Active Create Objects Using Active Directory Users and Directory Users and
ComputersComputers• The Active Directory Users and
Computer interface.• The initial Active Directory containers
and objects.
by Rashid Khan
The Active Directory Users The Active Directory Users and Computer Interfaceand Computer Interface
• The consistent design of the Microsoft Management Console (MMC) makes it easy to work with tools that are otherwise unfamiliar to the administrator.
• The Active Directory Users and Computer interface displays a hierarchy of containers. These containers in turn contain other containers and various Active Directory objects.
by Rashid Khan
The Active Directory Users The Active Directory Users and Computer Interfaceand Computer Interface
The Active Directory Users and Computer Interface
by Rashid Khan
The Active Directory Users The Active Directory Users and Computer Interfaceand Computer Interface
Domain Controllers
by Rashid Khan
The Active Directory Users The Active Directory Users and Computer Interfaceand Computer Interface
Advanced Features
by Rashid Khan
The Active Directory Users The Active Directory Users and Computer Interfaceand Computer Interface
The Users Container
by Rashid Khan
The Active Directory Users The Active Directory Users and Computer Interfaceand Computer Interface
User Description
by Rashid Khan
The Initial Active Directory The Initial Active Directory Containers and ObjectsContainers and Objects
The five default containers that form the basic structure of a domain are:
• Builtin – Contains the security groups included with the installation of Active Directory.
• Computers – Is the default location for upgraded computer accounts from previous network operating systems such as Windows NT.
• Domain Controllers (DCs) – Contains DCs for the domain that can be used to apply security policies to OUs.
by Rashid Khan
The Initial Active Directory The Initial Active Directory Containers and ObjectsContainers and Objects
The five default containers that form the basic structure of a domain are (continued):
• ForeignSecurityPrincipals – Holds SIDs of security principals from external, trusted domains.
• Users – Is the location for upgraded user accounts from Windows NT and the initial administrator account.
by Rashid Khan
Create Objects Using Active Create Objects Using Active Directory Users and ComputersDirectory Users and Computers
• Computer and user accounts are the most frequently created Active Directory objects.
• The OUs may not be created as frequently, but they should be planned properly before creation.
by Rashid Khan
Create Objects Using Active Create Objects Using Active Directory Users and ComputersDirectory Users and Computers
New Object: Computer
by Rashid Khan
Create Objects Using Active Directory Users and Create Objects Using Active Directory Users and
ComputersComputers
Computer Name
by Rashid Khan
Create Objects Using Active Create Objects Using Active Directory Users and ComputersDirectory Users and Computers
New Object: User
by Rashid Khan
Create Objects Using Active Create Objects Using Active Directory Users and ComputersDirectory Users and Computers
User Password
by Rashid Khan
Create Objects Using Active Create Objects Using Active Directory Users and ComputersDirectory Users and Computers
New Object: Organizational Unit
by Rashid Khan
Manage Objects Using Active Manage Objects Using Active Directory Users and ComputersDirectory Users and Computers
• Object properties.• Basic Active Directory Users and
Computers object management.
by Rashid Khan
The Object Properties Dialog The Object Properties Dialog BoxBox
• The computer account properties dialog box.
• The user account properties dialog box.
• The organizational unit properties dialog box.
by Rashid Khan
The Computer Account The Computer Account Properties Dialog BoxProperties Dialog Box
The computer account properties dialog box
by Rashid Khan
The Computer Account The Computer Account Properties Dialog BoxProperties Dialog Box
The various tabs available in the computer account properties dialog box are:
• General• Operating System• Member Of
by Rashid Khan
The Computer Account The Computer Account Properties Dialog BoxProperties Dialog Box
The various tabs available in the computer account properties dialog box are (continued):
• Delegation• Location • Managed By• Dial-in
by Rashid Khan
The User Account Properties The User Account Properties Dialog BoxDialog Box
The user account properties dialog box
by Rashid Khan
The User Account Properties The User Account Properties Dialog BoxDialog Box
The various tabs available in the user account properties dialog box are:
• General• Address • Account• Profile
by Rashid Khan
The various tabs available in the user account properties dialog box are (continued):
• Telephones• Organization• Terminal Services Profile• Sessions
by Rashid Khan
The User Account Properties The User Account Properties Dialog BoxDialog Box
The various tabs available in the user account properties dialog box are (continued):
• Terminal Services Profile• Sessions• Environment• Remote control • COM+
by Rashid Khan
The Organizational Unit The Organizational Unit Properties Dialog BoxProperties Dialog Box
The organizational unit
properties dialog box
by Rashid Khan
The Organizational Unit The Organizational Unit Properties Dialog BoxProperties Dialog Box
The various tabs available in the organizational unit properties dialog box are:
• General• Managed By• Com+• Group Policy
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
• Managing the basic Active Directory Users and Computers involves moving and editing the objects.
• Windows 2003 allows to move the objects by dragging and dropping.
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
Active Directory Users and Computers Interface
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
The Location Tab
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
Selecting a User or Contact
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
The Managed By Tab
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
Selecting Groups
by Rashid Khan
SummarySummary
• Various Active Directory objects are user and computer accounts, group or group accounts, organizational units (OUs), printers, and shared folders.
• Active Directory objects can be created using the Active Directory Users and Computers interface.
• Objects within the Active Directory User and Computers interface can be managed using the object properties.
• Managing basic Active Directory users and objects involves moving and editing Active Directory objects.
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
Selecting a Group From a List of Groups
by Rashid Khan
Basic Active Directory Users and Basic Active Directory Users and Computers Object ManagementComputers Object Management
The Member Of Tab