Lec7 More on Installing and Configuring Active Directory

Lec7 More on Installing and Configuring Active Directory

1. computer accounts

   • computer object
     • specify the computer's name,where located+ premited to managed?
     • inherit group policy setting from other objects like domain, sites + orgnizational unit
     • can be members of groups + inherits permissions from group objects
   • no login user if no AD in computer
     • DC checks validity for user in CA
     • password not user-controlled+created auto
     • computer sends acount name + password

2. Adding computer to AD domain

   • creating a computer account
   • joining the computer to the domain
     • contact a domain controller
     • establishes a trust relationship with DC
     • change security ID (SID) to match the computer

3. Managing User and Computer Accounts

4. Organizational Units

   • hierarchically group objects
   • • benefits of using OUs
   • • the OU structure
   • container in AD
   • elegating authority

5. Groups

   • advantageous
   • access token
   • types of groups
   • group scope
     • • domain local scope
     • • global scope
     • • universal scope
   • nesting groups