THÔNG TIN TÀI LIỆU
1 Chapter 8: WORKING WITH COMPUTER ACCOUNTS 2 CHAPTER OVERVIEW !!"#$% "&'!$" "!$"#$%( %)$%%" Chapter 8: WORKING WITH COMPUTER ACCOUNTS 3 UNDERSTANDING COMPUTER OBJECTS *#)"""&' ')$%( $"+$%)"#"# !$" "")#"!$" $ $%,%$%%""& ' "#"!$"( "#%)'"# $!$"- -"! "$!$$ %'"! !%"#%"!"#%$" Chapter 8: WORKING WITH COMPUTER ACCOUNTS 4 CREATING COMPUTER OBJECTS $%($%."& ' $%"("! !$"/ $%("!%"#& '"!$% $$"!0)")%!!/ $%%"")!!%"# !$"(""#/ $%%"!"& '$%%"( &"#%$% $"# ",+ Chapter 8: WORKING WITH COMPUTER ACCOUNTS 5 $%%" %%" %"! )"$%"!$""))$%%) %"" %"%"#$%%""! ,! %""$ 12 0"!,3444567 ,!#"!%$))'"!+!!" %""$%12 0"!,3444567 Chapter 8: WORKING WITH COMPUTER ACCOUNTS 6 CREATING COMPUTER OBJECTS USING ACTIVE DIRECTORY USERS AND COMPUTERS Permission Requirements: Administrators Account Operators Delegated control Chapter 8: WORKING WITH COMPUTER ACCOUNTS 7 CREATING COMPUTER OBJECTS USING DSADD.EXE )),$%%""! &!$"$)#$%" $%%""$ Example: DSAdd computer “CN=MyComputer,CN=Computers,DC=MyCompany,DC=Com” Chapter 8: WORKING WITH COMPUTER ACCOUNTS 8 CREATING COMPUTER OBJECTS USING NETDOM.EXE $$"!0)"%)' $)%"!! %.! $%/ &"8%8) )!" "!,&3442"))" "))'%"""#%)/$ Example: Netdom add MyComputer /Domain:Contoso.com /UserD:Admin /PasswordD:Secret /OU:Organization Chapter 8: WORKING WITH COMPUTER ACCOUNTS 9 JOINING COMPUTERS TO A DOMAIN Chapter 8: WORKING WITH COMPUTER ACCOUNTS 10 JOINING A DOMAIN USING NETDOM.EXE )),$%("! !$" $$$"!)" )),!&)! $)" (""# $%!$" !$("9// [...]... 14 LOCATING DC COMPUTER OBJECTS • Computer accounts for domain controllers are placed in the system-created domain controllers OU by default • The Default Domain Controllers Policy GPO is applied to the container Chapter 8: WORKING WITH COMPUTER ACCOUNTS 15 LOCATING OTHER COMPUTER OBJECTS • Non–domain-controller computer accounts are placed in the Computers systemcreated container by default • Computer... support group policy Chapter 8: WORKING WITH COMPUTER ACCOUNTS 16 REDIRECTING COMPUTER OBJECTS • Allows an alternative default location for computer accounts to be specified • Use the Redircmp.exe command-line utility • Works only on Windows Server 2003 domain functional level • Automatically redirects all computer accounts • Can be overridden by explicit computer account creation commands Example: Redircmp... 8: WORKING WITH COMPUTER ACCOUNTS 20 DELETING COMPUTER OBJECTS • Manually through Active Directory Users and Computers • Automatically by changing the domain membership on the computer • Using a command-line tool such as Dsrm Chapter 8: WORKING WITH COMPUTER ACCOUNTS 21 DISABLING COMPUTER OBJECTS Chapter 8: WORKING WITH COMPUTER ACCOUNTS 22 RESETTING A COMPUTER OBJECT • Necessary when replacing or upgrading... domain controller Chapter 8: WORKING WITH COMPUTER ACCOUNTS 23 MANAGING REMOTE COMPUTERS • Allows you to perform management tasks across the network • Actually a shortcut to the Computer Management MMC snap-in Chapter 8: WORKING WITH COMPUTER ACCOUNTS 24 MANAGING COMPUTER OBJECTS FROM THE COMMAND LINE Dsmod • Used to modify existing computer account objects Dsrm • Used to remove computer account objects... WORKING WITH COMPUTER ACCOUNTS 26 DELETING COMPUTER OBJECT PROPERTIES WITH DSRM.EXE • Can be used to delete computer account objects from the command line • Requires confirmation of deletion unless the -noprompt switch is used Example: DSrm CN=MyComp,CN=Computers,DC=Contoso,DC=com Chapter 8: WORKING WITH COMPUTER ACCOUNTS 27 TROUBLESHOOTING COMPUTER ACCOUNTS: PROBLEMS • Messages at logon indicate that . $ $%,%$%%""& ' "#"!$"( "#%)'"# $!$" - - "! "$!$$ %'"! !%"#%"!"#%$" Chapter
Ngày đăng: 13/07/2014, 05:21
Xem thêm: Giáo trình ACNA - Chap08 pptx