Active Directory Organizational Units 3.1 Manage Active Directory Objects Active Directory Organizational Units TestOut Server Pro 2016: Identity
Section Skill Overview Delete organizational units. TestOut Server Pro 2016: Identity
Key Terms Container TestOut Server Pro 2016: Identity
Key Definitions Container: A container is a built-in object used for organizing network resources within a domain. However, unlike OUs, a container cannot be altered without making changes to the Active Directory schema. TestOut Server Pro 2016: Identity
Active Directory Organizational Structure Container Organizational Units TestOut Server Pro 2016: Identity
Active Directory Containers Are automatically created by installing AD. Cannot be deleted or renamed. Should not be modified or used by the administrator. Cannot apply Group Policy Objects . Container Object TestOut Server Pro 2016: Identity
The Active Directory Administrator Is automatically created by installing AD. Has full domain control. Should only be use only when required. Should incorporate a strong password. By default, is a group member of: Administrator Domain Admins Enterprise Admins Can modify the Active Directory schema. Group Policy Creators Owners Schema Admins TestOut Server Pro 2016: Identity
Default Computer Container By default, new computers are added to the container named Computers Use redircmp to change the location for new computers Requires Windows 2003 or higher functional level Example: redircmp ou=ACME_Comp,dc=CorpNet,dc=xyz TestOut Server Pro 2016: Identity
Organizational Unit Created by administrators. Active Directory creates the Domain Controllers OU. Used to organize users and computers. Organizational Unit When promoting a server, computers in the Computer OU are moved to the Domain Controller OU. TestOut Server Pro 2016: Identity
Distinguished Name Every object has a distinguished name. Includes the common name and its place in AD. Distinguished names with spaces require quotes. CorpNet.com CN=Shad,OU=Tech,DC=CorpNet,CD=com Common Name Location in Active Directory TestOut Server Pro 2016: Identity
Distinguished Name Every object has a distinguished name. Includes the common name and its place in AD. Distinguished names with spaces require quotes. The distinguished names include all objects and its type. Each part referenced individually. Type Designator Common Name CN Container Organizational Unit OU Domain DC TestOut Server Pro 2016: Identity
Organizational Unit Design Mirror the logical structure of your company. Used for effective: Administration (control delegation) Group Policy implementation Bank.com OUs to match organization TestOut Server Pro 2016: Identity
Summary Use OUs to aid in management. TestOut Server Pro 2016: Identity
In-Class Practice Do the following labs: 3.1.5 Delete Organizational Units TestOut Server Pro 2016: Identity
Class Discussion How can you protect objects from accidental deletion? TestOut Server Pro 2016: Identity