3.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.

Slides:



Advertisements
Similar presentations
Chapter 6 Introducing Active Directory
Advertisements

Chapter 4 Chapter 4: Planning the Active Directory and Security.
Introduction to Active Directory
6.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
15.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft® Windows® Server 2003 Active Directory Infrastructure.
70-270, MCSE/MCSA Guide to Installing and Managing Microsoft Windows XP Professional and Windows Server 2003 Chapter One Introduction to Windows.
1.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 1: Introduction to Windows Server 2003.
1 Chapter 1 Introduction to Windows Server Two main goals for Net Admin Make network resources available to users Files, folders, printers, etc.
Hands-On Microsoft Windows Server 2003 Administration Chapter 5 Administering File Resources.
Administering Active Directory
Hands-On Microsoft Windows Server 2003 Administration Chapter 1 Windows Server 2003 Network Administration.
By Rashid Khan Lesson 4-Preparing to Serve: Understanding Microsoft Networking.
Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.
Chapter 4 Introduction to Active Directory and Account Management
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 1: Introduction to Windows Server 2003.
7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.
Chapter 8: Network Operating Systems and Windows Server 2003-Based Networking Network+ Guide to Networks Third Edition.
Understanding Active Directory
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 1: Introduction to Windows Server 2003.
Module 1: Introduction to Active Directory
A centralized system.  Active Directory is Microsoft's trademarked directory service, an integral part of the Windows architecture. Like other directory.
Hands-On Microsoft Windows Server 2008
Hands-On Microsoft Windows Server 2008
Introduction to Active Directory Services Completely integrated with Microsoft Windows 2000 Server Integrates the Internet concept of namespace with the.
Overview of Active Directory Domain Services Lesson 1.
Nassau Community College
(ITI310) SESSIONS : Active Directory By Eng. BASSEM ALSAID.
BZUPAGES.COM An Introduction to. BZUPAGES.COM Introduction Large corporations today face the following problems Finding a certain file. Seeing everything.
9.1 © 2004 Pearson Education, Inc. Lesson 9: Implementing Group Policy in Windows 2000 Server Exam Microsoft® Windows® 2000 Directory Services Infrastructure.
Directory services Unit objectives
11 REVIEWING MICROSOFT ACTIVE DIRECTORY CONCEPTS Chapter 1.
Chapter 4 Introduction to Active Directory and Account Management
Windows Server 2008 Chapter 4 Last Update
9.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory Chapter 3: Introducing Active Directory.
Working with domains and Active Directory
Chapter 7: WORKING WITH GROUPS
KAPLAN SCHOOL OF INFORMATION SYSTEMS AND TECHNOLOGY Welcome to Unit 4 IT278 Network Administration Course Name – IT278 Network Administration Instructor.
7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.
70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory, Enhanced Chapter 5: Active Directory Logical Design.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 1: Introduction to Windows Server 2003.
September 18, 2002 Windows 2000 Server Active Directory By Jerry Haggard.
Module 7 Active Directory and Account Management.
Active Directory Maryam Izadi. Topics Covered NT Vs 2000/2003 Active Directory LDAP MMC.
 Identify Active Directory functions and Benefits.  Identify the major components that make up an Active Directory structure.  Identify how DNS relates.
Page 1 Active Directory and DNS Lecture 2 Hassan Shuja 09/14/2004.
By Rashid Khan Lesson 6-Building a Directory Service.
Hands-On Microsoft Windows Server 2008 Chapter 4-Part 1 Introduction to Active Directory and Account Manager.
1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.
Active Directory Infrastructure Microsoft Windows 2003 Active Directory Infrastructure MCSE Exam
1 Active Directory Administration Tasks And Tools Active Directory Administration Tasks Active Directory Administrative Tools Using Microsoft Management.
OVERVIEW OF ACTIVE DIRECTORY
Introduction to Active Directory
1 Active Directory Service in Windows 2000 Li Yang SID: November 2000.
Module 1: Introduction to Active Directory
Logical and Physical Network Design 1. Active Directory Objects Objects Represent Network Resources (Users,Groups,Computers,Printers) Attributes Store.
Hussain Ali Department of Computer Engineering KFUPM, Dhahran, Saudi Arabia Active Directory.
CEG 2400 Fall 2012 Directory Services Active Directory Tree Domain.
Windows 2003 Architecture, Active Directory & DNS Lecture # 3 Hassan Shuja 02/14/2006.
1 Introduction to Active Directory Directory Services Uniquely identify users and resources on a network Provide a single point of network management.
MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition (70-294) Chapter 1: Overview of the Active.
Active Directory Domain Services (AD DS). Identity and Access (IDA) – An IDA infrastructure should: Store information about users, groups, computers and.
Planning an Active Directory Deployment Lesson 1.
Overview of Active Directory Domain Services Lesson 1.
Overview of Active Directory Domain Services
(ITI310) SESSIONS 6-7-8: Active Directory.
Objectives Differentiate between the different editions of Windows Server 2003 Explain Windows Server 2003 network models and server roles Identify concepts.
Introduction to Active Directory Directory Services
Presentation transcript:

3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Goals  Identify the features of Active Directory  Understand Active Directory architecture  Examine underlying Active Directory concepts  Understand the basic elements of Active Directory  Plan the implementation of Active Directory  Install Active Directory  Work with Microsoft Management Console (MMC) and snap-ins  Create organizational units  Manage Active Directory objects

3.2 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Identifying the Features of Active Directory  Active Directory is the directory service for Windows Server 2003  Features  Centralized management  Security  Object-oriented storage  Hierarchical organization  Multi-master replication  Integration with DNS  Lightweight Directory Access Protocol (LDAP) support  Standard name formats  Scalability (Skill 1)

3.3 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-1 Active Directory (Skill 1)

3.4 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-2 Replication (Skill 1)

3.5 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing Active Directory Architecture  Active Directory is built in a layered architecture in which the layers represent processes that provide directory services to client applications  Active Directory includes three service layers, several interfaces and protocols, and the underlying Data Store  Service layers of Active Directory  Directory System Agent (DSA) Layer  Database Layer  Extensible Storage Engine Layer  Data Store contains the Active Directory database records (Skill 2)

3.6 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-3 Active Directory Architecture (Skill 2)

3.7 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Examining Underlying Active Directory Concepts Schema  Contains formal definitions of every object class that can be created in an Active Directory forest  Contains formal definitions of every attribute that can exist in an Active Directory object  Is the database design, which can be extended by adding new object classes or new attributes (Skill 3)

3.8 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-4 Schema (Skill 3)

3.9 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Examining Underlying Active Directory Concepts (2) Global catalog  Stores a full Read-Write replica of all object attributes in the directory for its host domain  Stores a partial replica of all object attributes contained in the directory for every domain in the forest along with universal groups and group members  Has the ability to search the entire forest, but also keeps the database relatively light, allowing for improved replication  Global catalog server is the name of the domain controller that maintains the global catalog (Skill 3)

3.10 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-5 Global Catalog in Active Directory (Skill 3)

3.11 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Examining Underlying Active Directory Concepts (3) Namespace  Bounded area in which the names used to identify objects are resolved  Defines the domain structure in Active Directory  Provides name resolution through the use of the Domain Name System (DNS), which is central to the operation of Windows networks  Without proper name resolution, users cannot locate resources on the network  Domains with contiguous namespaces are members of the same tree  A forest is a collection of domains sharing the same schema, configuration, and global catalog (Skill 3)

3.12 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-6 Contiguous namespaces (tree) (Skill 3)

3.13 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-7 Disjointed namespaces (multiple trees) (Skill 3)

3.14 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Examining Underlying Active Directory Concepts (4)  Active Directory uniquely identifies each object  Globally Unique Identifier (GUID)  Distinguished Name (DN)  Relative Distinguished Name (RDN)  User Principal Name (UPN) (Skill 3)

3.15 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-8 Naming conventions (Skill 3)

3.16 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-9 The DN and RDN for a user object (Skill 3)

3.17 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory Object  Any “thing” (tangible or abstract) about which data is stored  Can be a network resource, such as a user, group, printer, or a virtual object such as a forest, tree, domain, or OU  Each is defined by a set of attributes related to its properties  When you create an object, the Active Directory is populated with some of the attributes for the object (Skill 4)

3.18 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (2) Common types of objects  Computer  User  Group  Shared Folder  Printer (Skill 4)

3.19 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (3) Domain  A group of computers and devices on a network that constitute a single security boundary within Active Directory, but can span more than one physical location  Each has its own security policies and security relationships with other domains  Domains co-existing under the same namespace form a single tree  When multiple domains are connected by trust relationships and share a common schema, configuration, and global catalog, they constitute a forest (Skill 4)

3.20 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (4) Types of computers in a domain  Domain controller  A computer that stores a replica of the directory database  Stores security policies and accounts  Member server  A Windows NT 4.0, 2000, or Server 2003 computer that is part of a domain  Does not store a replica of the directory database  Client computers  Computers running operating systems that can communicate with the Active Directory for user authentication and resource access (Skill 4)

3.21 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-10 Hierarchical structure of Active Directory (Skill 4)

3.22 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (5) Organizational unit (OU)  A container object for organizing objects within a domain  Can contain users, groups, resources, and other OUs  Enables the delegation of administration to distinct segments of the directory, which provides more flexibility in managing the objects in a business unit, department, or other organizational division  Administration of grouped OUs  Creation and organization of child OUs  Delegation of permissions within specific OUs  Assignment of Group Policy links (Skill 4)

3.23 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (6) Tree  A set of one or more domains in a hierarchical structure  The first domain created in the forest is called the forest root and this is where the forest name is specified  All domain trees in a forest share the same forest root  If a new tree is created after the forest root, the first domain that is added to this tree is called the root domain  Domains under the root domain are called child domains  Any domain immediately above another domain is called the parent domain (Skill 4)

3.24 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-11 Multiple domains in a tree (Skill 4)

3.25 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (7) Forest  A group of one or more Active Directory domains sharing a common schema, configuration, global catalog, and two-way, transitive trusts  All trees in a given forest trust each other through transitive two- way trust relationships  A forest exists as a set of cross-referenced objects and trust relationships known to the member trees  Trees in a forest form a hierarchy for the purposes of trust (Skill 4)

3.26 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-12 Forest (Skill 4)

3.27 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Introducing the Basic Elements of Active Directory (8) Sites  A location in a network holding Active Directory servers  Defined as one or more well connected TCP/IP subnets, meaning that network connectivity is highly reliable and fast (Skill 4)

3.28 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-13 Site (Skill 4)

3.29 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Planning the Implementation of Active Directory Key planning steps  Understand the business requirements of your organization  Plan the namespace  Design the site  Combine subnets that run over high bandwidth network connections so they are economical and reliable  Create one or more sites for domains that spread over two or more far-reaching geographic locations  Plan the domain structure (Skill 5)

3.30 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-14 A domain/OU structure for an organization (Skill 5)

3.31 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Installing Active Directory  After completing the planning phase, install Active Directory on the Windows Server 2003 using the Active Directory Installation Wizard (Dcpromo.exe)  After first-time installation  Active Directory forest is created  First domain created in the forest is the forest root  Forest root comprises the first Active Directory tree and this first domain is called the root domain  Domains created under the root domain are called child domains (Skill 6)

3.32 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Installing Active Directory (2) Mixed mode  When you create a domain, by default the domain is configured to run in Windows 2000 mixed mode  Allows the coexistence of Windows NT, Windows 2000, and Windows Server 2003 domains Windows 2000 native mode  If your domain consists of only Windows 2000 domain controllers, you can switch to Windows 2000 native mode  Native mode supports Windows 2000 and Windows Server 2003 domains (Skill 6)

3.33 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Installing Active Directory (3) Windows Server 2003 interim mode  If your domain has only Windows NT 4.0 servers, and you upgrade a server to Windows Server 2003, you can use Windows Server 2003 interim mode  Used when there are no Windows 2000 servers and you upgrade a Windows NT PDC to Windows Server 2003 Windows Server 2003 mode  If your domain consists of only Windows Server 2003 domain controllers, you can switch to Windows Server 2003 mode  Supports the full Windows Server 2003 Active Directory implementation (Skill 6)

3.34 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-15 Detecting Local Area network settings (Skill 6)

3.35 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-16 The Server Role screen (Skill 6)

3.36 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-17 The Operating System Compatibility screen (Skill 6)

3.37 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-18 The Domain Controller Type screen (Skill 6)

3.38 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-19 The Create New Domain screen (Skill 6)

3.39 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-20 Specifying the full DNS domain name (Skill 6)

3.40 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-21 The NetBIOS Domain Name screen (Skill 6)

3.41 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-22 The Permissions screen (Skill 6)

3.42 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Working with Microsoft Management Console (MMC) and Snap-Ins Microsoft Management Console (MMC)  An ISV (Independent Software Vendor)-extensible, common console framework for management applications  Provides a common host environment for snap-ins, which provide the actual management behavior  Does not provide any management functionality by itself (Skill 7)

3.43 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Working with Microsoft Management Console (MMC) and Snap-Ins (2) Snap-ins  Used to perform administrative tasks  Manage computers, services, and networks  Edit multiple user objects  Save queries  Quickly select objects using the improved object picker component (Skill 7)

3.44 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Working with Microsoft Management Console (MMC) and Snap-Ins (3) Snap-in types  Stand-alone snap-in  Often referred to simply as a snap-in  Provides management functionality without requiring support from another snap-in  Used to perform administrative tasks even if no other snap-in is present in the console  Extension snap-ins  Often referred to simply as an extension  Require a parent snap-in above it in the console tree  Extend the functionality provided by other snap-ins (Skill 7)

3.45 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-23 An empty console window (Skill 7)

3.46 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-24 Setting the Author mode in the Console Options dialog box (Skill 7)

3.47 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-25 The Add Standalone Snap-in dialog box (Skill 7)

3.48 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-26 Using a snap-in to manage the local computer (Skill 7)

3.49 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-27 Removing snap-in extensions (Skill 7)

3.50 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-28 Console Root with selected extensions (Skill 7)

3.51 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Creating Organizational Units  You use the Active Directory Users and Computers console to create an organizational unit (OU) and to add objects to OUs  You can create an OU in a domain, in a domain controller object, or in another OU if you have been delegated permission to do so  By default, Windows Server 2003 grants permission to members of the Administrators group to create an OU (Skill 8)

3.52 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-29 Creating an Organizational Unit (OU) (Skill 8)

3.53 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-30 The Marketing OU added to the domain (Skill 8)

3.54 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-31 Creating a new user object (Skill 8)

3.55 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-32 Properties dialog box (Skill 8)

3.56 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Managing Active Directory Objects  Searching for objects  Global catalog contains partial information about objects in a forest  Use the Find Users, Contacts, and Groups dialog box  Delegating administrative control  Allows you to delegate complete or partial administrative control  Use the Delegation of Control Wizard  Modifying objects  Allows you to modify objects to meet changing needs  Use the Properties dialog box  Moving objects  Allows you to move objects to meet changing needs  Use the Move dialog box (Skill 9)

3.57 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-33 The Find Users, Contacts, and Groups dialog box (Skill 9)

3.58 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-34 Finding a user in Active Directory (Skill 9)

3.59 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Managing Active Directory Objects (2) Securing resources  Object security  Active Directory provides a set of security descriptors for each object called a Discretionary Access Control List (DACL) defining how the object can be accessed  Each file or folder on an NTFS drive has a DACL, which contains Access Control Entries (ACEs)  ACEs contain the SID of the user or group and the permissions associated with that user or group  Account logon security protects a computer and its resources from unauthorized access (Skill 9)

3.60 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-35 Finding the Distinguished Name (Skill 9)

3.61 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory Figure 3-36 Moving a user object (Skill 9)