© Wiley Inc. 2006. All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.

Slides:



Advertisements
Similar presentations
By Rashid Khan Lesson 5-Directory Assistance: Administration Using Active Directory Users and Computers.
Advertisements

MOAC : Installing and Configuring Windows Server 2012
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.
Chapter 6 Introducing Active Directory
7.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
Hands-On Microsoft Windows Server 2003 Administration Chapter 4 Managing Group Policy.
9.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
MIS Chapter 91 Ch. 9 – Implement and Use Group Policy MIS 431 – created Spring 2006.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 10: Server Administration.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.
Administering Active Directory
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
Chapter 5: Configuring Users and Groups. Windows Vista User Accounts User accounts are the primary means of authentication Built-in Accounts –Administrator:
Chapter 4 Introduction to Active Directory and Account Management
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 10: Server Administration.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
Understanding Active Directory
Guide to MCSE , Enhanced 1 Activity 9-1: Creating a Group Policy Object Using the MMC Objective: To create a GPO using the Group Policy Object Editor.
1 Chapter Overview Creating User and Computer Objects Maintaining User Accounts Creating User Profiles.
Chapter 7 WORKING WITH GROUPS.
Chapter 7 Managing OUs and Active Directory Accounts
Hands-On Microsoft Windows Server 2008
(ITI310) By Eng. BASSEM ALSAID SESSIONS
Guide to MCSE , Enhanced 1 Activity 10-1: Restarting Windows Server 2003 Objective: to restart Windows Server 2003 Start  Shut Down  Restart Configure.
11 WORKING WITH USER ACCOUNTS Chapter 6. Chapter 6: WORKING WITH USER ACCOUNTS2 CHAPTER OVERVIEW Understand the differences between local user and domain.
11 SHARING FILE SYSTEM RESOURCES Chapter 9. Chapter 9: SHARING FILE SYSTEM RESOURCES2 CHAPTER OVERVIEW Create and manage file system shares and work with.
Overview of Active Directory Domain Services Lesson 1.
9.1 © 2004 Pearson Education, Inc. Lesson 9: Implementing Group Policy in Windows 2000 Server Exam Microsoft® Windows® 2000 Directory Services Infrastructure.
Chapter 4 Introduction to Active Directory and Account Management
Module 1: Introduction to Administering Accounts and Resources
9.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory Chapter 3: Introducing Active Directory.
Corso referenti S.I.R.A. – Modulo 2 07 – Group Policy 20/11 – 27/11 – 05/12 11/12 – 13/12 (gruppo 1) 12/12 – 15/12 (gruppo 2) Cristiano Gentili, Massimiliano.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.
5.1 © 2004 Pearson Education, Inc. Lesson 5: Administering User Accounts Exam Microsoft® Windows® 2000 Directory Services Infrastructure Goals 
7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.
Security Planning and Administrative Delegation Lesson 6.
70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory, Enhanced Chapter 5: Active Directory Logical Design.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 10: Server Administration.
Module 7 Active Directory and Account Management.
© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.
Introduction to Microsoft Management Console (MMC) MMC is a common console framework for management applications. MMC provides a common environment for.
11.1 © 2004 Pearson Education, Inc. Exam Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 11: Planning.
Active Directory Travis Favors Ryan Manuel Robert Rayer.
Section 4: Understanding the Architecture of Group Policy Processing Group Policy Components in AD DS Understanding the Group Policy Processing Sequence.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 14: Windows Server 2003 Security Features.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
Hands-On Microsoft Windows Server 2008 Chapter 4-Part 1 Introduction to Active Directory and Account Manager.
Module 3 Creating Groups and Organizational Units.
1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.
Windows 2000 Security Yingzi Jin. Introduction n Active Directory n Group Policy n Encrypting File System.
© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.
Administering Groups Chapter Eight. Exam Objectives In this Chapter:  Plan a security group hierarchy based upon delegation requirements  Plan a security.
OVERVIEW OF ACTIVE DIRECTORY
© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.
MIS Chapter 41 Chapter 4 – Implementing and Managing Group and Computer Accounts MIS 431 – Created Spring 2006.
1 Chapter Overview Using Group Objects Understanding Default Groups Creating Group Objects Managing Administrative Access.
11 DESIGNING AN ADMINISTRATIVE SECURITY STRUCTURE Chapter 7.
10.1 © 2004 Pearson Education, Inc. Lesson 10: Specifying Group Policy Settings Exam Microsoft® Windows® 2000 Directory Services Infrastructure.
MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition (70-294) Chapter 1: Overview of the Active.
1.1 Microsoft® Windows® 2003 Server Group Policy Management Prof. Abdul Hameed.
Windows Active Directory – What is it? Definition - Active Directory is a centralized and standardized system that automates network management of user.
Module 8: Implementing Group Policy. Overview Multimedia: Introduction to Group Policy Implementing Group Policy Objects Implementing GPOs on a Domain.
(ITI310) SESSIONS 6-7-8: Active Directory.
Module 8: Implementing Group Policy
Presentation transcript:

© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition (70-294) Chapter 5: Administering the Active Directory

Organizational Unit Contents 2 © Wiley Inc All Rights Reserved. Users Groups Computers Shared folders Contacts Printers Other OUs

Purpose of OUs 3 © Wiley Inc All Rights Reserved. To organize the objects within Active Directory Delegation of administrative control Do not take the place of standard user and group permissions Contain objects only from within the domain in which they reside

Benefits of OUs 4 © Wiley Inc All Rights Reserved. Smallest unit to which you can assign directory permissions Can easily change the OU structure OU structure can support many different levels of hierarchy Child objects can inherit OU settings Can set Group Policy settings on OUs Easily delegate administration of OUs (and objects within) to users and groups

Considerations for OU Naming 5 © Wiley Inc All Rights Reserved. Keep the names and descriptions simple Pay attention to limitations Pay attention to hierarchical consistency

OU Inheritance 6 © Wiley Inc All Rights Reserved. By default, OUs inherit the permissions of the parent container when the OU is moved By using built-in tools provided with Windows Server 2003, you can move or copy OUs only within the same domain

Delegation of Administrative Control 7 © Wiley Inc All Rights Reserved. Delegation occurs when a higher security authority assigns permissions to a lesser security authority Allows you to distribute the various roles and responsibilities of IT throughout the organization Two main concerns: –Parent-child relationships –Inheritance settings

Group Policies 8 © Wiley Inc All Rights Reserved. Collections of permissions that you can apply to objects within the Active Directory Assigned at the site, domain, and OU levels

Creating OUs 9 © Wiley Inc All Rights Reserved. Active Directory Users and Computers allows you to quickly add/move/change OUs Operation can be tedious for large organizations

Moving, Deleting, and Renaming OUs 10 © Wiley Inc All Rights Reserved. Accomplished with Active Directory Users and Computers tool Allow you to reflect real-world changes to business units, departments, and employee roles

OU Properties 11 © Wiley Inc All Rights Reserved. Properties can be modified Use Active Directory Users and Computers tool and right-click on the OU, then select Properties

Delegating Control 12 © Wiley Inc All Rights Reserved. Use Delegation of Control Wizard Accessed through the Active Directory Users and Computers administrative tool

Common OU Problems 13 © Wiley Inc All Rights Reserved. Inheritance Delegation of administration Organizational issues

Organizational Sections of AD Users and Computers Tool 14 © Wiley Inc All Rights Reserved. Built-In Computers Domain controllers Foreign security principals Users

AD Objects to Create and Manage 15 © Wiley Inc All Rights Reserved. Computer Contact Group Organizational Unit Printer Shared Folder User

Properties for Users 16 © Wiley Inc All Rights Reserved. General Address Account Profile Telephones Organization Member Of Dial-in Environment Sessions Remote Control Terminal Services Profile COM+

Properties for Groups 17 © Wiley Inc All Rights Reserved. General Operating System Member Of Location Managed By Dial-in

Filter Options 18 © Wiley Inc All Rights Reserved. Choose filter objects by their specific types Access from the View menu in the MMC, and choose Filter Options

Publishing AD Objects 19 © Wiley Inc All Rights Reserved. Publishing makes an AD object available Two main publishable objects: –Printer objects –Shared Folder objects General process is unchanged from earlier versions of Windows