Cours Module 3: Configuring active directory objects and trusts

……….

Demonstration: Configuring AD DS User Accounts

In this demonstration, you will see how to configure AD DS user accounts

Default AD DS Groups

Default groups are designed to manage shared resources and delegate specific domain-wide administrative roles

• Account operators
• Administrators
• Backup operators
• Incoming forest
• trust builders
• Network configuration
• operators
• Performance log users
• Performance monitor
• users
• Pre-Windows 2000
• compatible access
• Print operators
• Remote Desktop
• users
• Replicator
• Server operators
• Users

AD DS Special Identities

Designed to provide access to resources without administrative or user interaction

• Anonymous logon
• Authenticated users
• Batch
• Creator group
• Creator owner
• Dialup
• Everyone
• Interactive
• Local system
• Network
• Self
• Service
• Terminal Server users
• Other organization
• This organization

Discussion: Using Default Groups and  Special Identities
Using the scenario, answer the questions in your workbook
Demonstration: Configuring AD DS  Group Accounts
In this demonstration, you will see how to configure AD DS group accounts
Demonstration: Configuring Additional AD DS Objects
In this demonstration, you will see how to configure additional AD DS objects
Options for Assigning Access to Resources
When assigning access to resources:
• Plan for the lowest level of permissions
• Keep the plan as simple as possible
• Document the plan
Options include:
• Adding user accounts to the ACL on the resource
• Adding user accounts to groups, and adding the groups to the ACL on the resource
• Adding user accounts to account groups, adding the account groups to resource groups, and adding the resource groups to the ACL on the resource
Configuring AD DS Objects Using
Command Line Tools
Command line tools:
• Dsadd
• Dsmod
• Dsrm
• Dsget
• net user
• Net group
• Net computer
What Is Windows PowerShell?
Windows PowerShell is a scripting and command line technology that you can use to manage AD DS and other Windows components
Windows PowerShell features include:
• Powerful single line cmdlets
• Aliases
• Variables
• Pipelining
• Scripting support
• Access to all cmd.exe commands

………