|
Chapter 5
Active Directory Manages Objects
| Computers | Users | Files | Printers | |
| Each object managed must have certain information stored, such as a unique identifier, descriptions, etc. Computers and users both get accounts created. | Client computer or member server | can request access to resources | ||
| These accounts must have a unique name. | SID | logon name | ||
| A unique name within an OU is the relative distinquished name. | server522 | Administrator | ||
| A unique name with the container info is just the distinquished name. | server522.templejc.edu recall dc= | |||
| A User Principal Name is the UPN. | Administrator@server522.templejc.edu recall cn= |
Creating Users
Must supply:- log on
- details
- password
*assigned, never change
*assigned, allow change (how often?)
*assigned, force change (when?) - contact info
- group
*as whe have yet to discuss creating groups, we must assume there are some already created. They are
-administrators: lots of rights, that can't be adjusted
-guests: few of rights, that can't be adjusted
-users: everyone is a member of this group
*We can create other groups as well.
-distribution groups, just for group emailing
-security groups: every other kind of group is a security related group
*Since 2003 can be a domain, among trees or among forests, group members must match. They are
-domain local groups: permission in the local domain they are placed in
-global groups: permission in the trees of other trusted domains
-universal groups: permission in the whole forest
Printers and Shared Folder
Might be configured as something aside from an Active Directory object... will discuss in future chapters.Creating Objects
© R. Craig Collins, 2005
We rate with RSACi. Last Updated Aug 23, 2005