Scribd
Upload
25 views

Network Administration#4

This document discusses managing Active Directory Domain Services. It covers defining containers like organizational units and built-in containers. It also discusses managing user accounts, computer accounts, and groups. It describes how to create different account types and organizational units, set properties for user accounts, and create different types of groups for assigning permissions.

Uploaded by

happylifehome924
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
25 views

Network Administration#4

This document discusses managing Active Directory Domain Services. It covers defining containers like organizational units and built-in containers. It also discusses managing user accounts, computer accounts, and groups. It describes how to create different account types and organizational units, set properties for user accounts, and create different types of groups for assigning permissions.

Uploaded by

happylifehome924
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 15

Previous lecture

• Intro to Backup Domain Controllers


• Types of Backup Domain Controllers
• Promoting to Backup Domain Controllers
• Flexible Single Master Operations Role
CHAPTER 4
Managing Active Directory Domain Services
Lecture Outline

• Active Directory Overview


• Defining Containers
• Managing User & Computer Accounts
• Managing OUs & Groups
Active Directory Overview

• Active Directory Domain Services stores information about users, computers, and
other devices on network.
• AD DS helps administrators securely manage these information and facilitates
resource sharing and collaboration between users.
• AD treats all parts of the network as objects such as: Users, Resources, &
Services.
Containers

Objects that contain other objects are called containers. Containers are built-in
objects and integral part of the Active Directory, that cannot be altered without
making changes to the Active Directory schema.
Type of Containers
Default Containers: Built-in, Computers, Users, & Foreign Security Principles
Generic / Created Containers: Organizational Units
Organizational Units

OU is just like a container, which are created by administrators for any purpose and
can be manipulated by applying GPOs, permissions, child OUs, and delegates.
• Creating an OU
• Creating a child OU
• Creating users on OU
Computer Accounts

Computer account is an interface between Active Directory and actual physical


computer.
By default there are two containers which store computer records in Active Directory
Computers: is for non domain controllers such as: Member Servers, and Clients
Machine.
Domain Controllers: is for domain controllers such as: DC, ADC, & RODC
Creating Computer Accounts
For creating Client Machine we simply need to join our computer / machine to a
domain environment.
Please note the steps for joining a machine to domain:
• Assign the same class IP Address to both server & client machine.
• On computer properties change client membership from workgroup to domain.
User Accounts

User accounts provide an interface between actual users and Active Directory.
By default user accounts are created on user container in Active Directory.
There are several ways in order to create user accounts in AD DS.
• GUI Mode
• Template Account
• Batch File
User Properties

User properties are used to store user attributes such as: Name, Address, City, Account
Info.
General Properties
which is common to every one like: City, State/Province, Country, Zip Code, Department.
Specific Properties
special information of a user: Name, Phone/Home number, Email.
How to restrict a user to logon to a specific machine?
How to restrict a user to logon to machine on specific time?
Groups

In Active Directory groups are used for granting permissions or privileges to a set of
users instead of a single user.
Active Directory includes predefine security groups, some of them reside in Built-in
container the rest reside on users container.
Built-in: built-in local security groups
Users: Mostly global security groups, universal groups, & local security groups
Creating Groups

Group wizard creation object contain:


Group Scope
• Domain Local: Can contain users, computers, global groups and universal groups from
any domain in the forest and any trusted domain.
• Global: can contain users, computers and groups from same domain.
• Universal: can contain users and groups (global and universal) from any domain in the
forest.
Group Type
• Security: used for assigning access and permissions
• Distribution: used for email purposes
Any Question ?
[email protected]
Summary

• Active Directory Overview


• Defining Containers
• Managing User & Computer Accounts
• Managing OUs & Groups

You might also like