1. © Wiley Inc. 2006. All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition (70-294) Chapter 5: Administering the Active Directory

2. Organizational Unit Contents 2 © Wiley Inc. 2006. All Rights Reserved. Users Groups Computers Shared folders Contacts Printers Other OUs

3. Purpose of OUs 3 © Wiley Inc. 2006. All Rights Reserved. To organize the objects within Active Directory Delegation of administrative control Do not take the place of standard user and group permissions Contain objects only from within the domain in which they reside

4. Benefits of OUs 4 © Wiley Inc. 2006. All Rights Reserved. Smallest unit to which you can assign directory permissions Can easily change the OU structure OU structure can support many different levels of hierarchy Child objects can inherit OU settings Can set Group Policy settings on OUs Easily delegate administration of OUs (and objects within) to users and groups

5. Considerations for OU Naming 5 © Wiley Inc. 2006. All Rights Reserved. Keep the names and descriptions simple Pay attention to limitations Pay attention to hierarchical consistency

6. OU Inheritance 6 © Wiley Inc. 2006. All Rights Reserved. By default, OUs inherit the permissions of the parent container when the OU is moved By using built-in tools provided with Windows Server 2003, you can move or copy OUs only within the same domain

7. Delegation of Administrative Control 7 © Wiley Inc. 2006. All Rights Reserved. Delegation occurs when a higher security authority assigns permissions to a lesser security authority Allows you to distribute the various roles and responsibilities of IT throughout the organization Two main concerns: –Parent-child relationships –Inheritance settings

8. Group Policies 8 © Wiley Inc. 2006. All Rights Reserved. Collections of permissions that you can apply to objects within the Active Directory Assigned at the site, domain, and OU levels

9. Creating OUs 9 © Wiley Inc. 2006. All Rights Reserved. Active Directory Users and Computers allows you to quickly add/move/change OUs Operation can be tedious for large organizations

10. Moving, Deleting, and Renaming OUs 10 © Wiley Inc. 2006. All Rights Reserved. Accomplished with Active Directory Users and Computers tool Allow you to reflect real-world changes to business units, departments, and employee roles

11. OU Properties 11 © Wiley Inc. 2006. All Rights Reserved. Properties can be modified Use Active Directory Users and Computers tool and right-click on the OU, then select Properties

12. Delegating Control 12 © Wiley Inc. 2006. All Rights Reserved. Use Delegation of Control Wizard Accessed through the Active Directory Users and Computers administrative tool

13. Common OU Problems 13 © Wiley Inc. 2006. All Rights Reserved. Inheritance Delegation of administration Organizational issues

14. Organizational Sections of AD Users and Computers Tool 14 © Wiley Inc. 2006. All Rights Reserved. Built-In Computers Domain controllers Foreign security principals Users

15. AD Objects to Create and Manage 15 © Wiley Inc. 2006. All Rights Reserved. Computer Contact Group Organizational Unit Printer Shared Folder User

16. Properties for Users 16 © Wiley Inc. 2006. All Rights Reserved. General Address Account Profile Telephones Organization Member Of Dial-in Environment Sessions Remote Control Terminal Services Profile COM+

17. Properties for Groups 17 © Wiley Inc. 2006. All Rights Reserved. General Operating System Member Of Location Managed By Dial-in

18. Filter Options 18 © Wiley Inc. 2006. All Rights Reserved. Choose filter objects by their specific types Access from the View menu in the MMC, and choose Filter Options

19. Publishing AD Objects 19 © Wiley Inc. 2006. All Rights Reserved. Publishing makes an AD object available Two main publishable objects: –Printer objects –Shared Folder objects General process is unchanged from earlier versions of Windows