Active Directory Cookbook (Sebastopol : O'Reilly, 2003)
Chapter 1 Getting Started -- Approach to the Book -- Where to Find the Tools -- Getting Familiar with LDIF -- Programming Notes -- Replaceable Text -- Where to Find More Information -- Chapter 2 Forests, Domains, and Trusts -- Introduction -- Creating a Forest -- Removing a Forest -- Creating a Domain -- Removing a Domain -- Removing an Orphaned Domain -- Finding the Domains in a Forest -- Finding the NetBIOS Name of a Domain -- Renaming a Domain -- Changing the Mode of a Domain -- Using ADPrep to Prepare a Domain or Forest for Windows Server 2003 -- Determining if ADPrep Has Completed -- Checking Whether a Windows 2000 Domain Controller Can Be Upgraded to Windows Server 2003 -- Raising the Functional Level of a Windows Server 2003 Domain -- Raising the Functional Level of a Windows Server 2003 Forest -- Creating a Trust Between a Windows NT Domain and an AD Domain -- Creating a Transitive Trust Between Two AD Forests -- Creating a Shortcut Trust Between Two AD Domains -- Creating a Trust to a Kerberos Realm -- Viewing the Trusts for a Domain -- Verifying a Trust -- Resetting a Trust -- Removing a Trust -- Enabling SID Filtering for a Trust -- Finding Duplicate SIDs in a Domain -- Chapter 3 Domain Controllers, Global Catalogs, and FSMOs -- Introduction -- Promoting a Domain Controller -- Promoting a Domain Controller from Media -- Demoting a Domain Controller -- Automating the Promotion or Demotion of a Domain Controller -- Troubleshooting Domain Controller Promotion or Demotion Problems -- Removing an Unsuccessfully Demoted Domain Controller -- Renaming a Domain Controller -- Finding the Domain Controllers for a Domain -- Finding the Closest Domain Controller -- Finding a Domain Controller’s Site -- Moving a Domain Controller to a Different Site -- Finding the Services a Domain Controller Is Advertising -- Configuring a Domain Controller to Use an External Time Source -- Finding the Number of Logon Attempts Made Against a Domain Controller -- Enabling the /3GB Switch to Increase the LSASS Cache -- Cleaning Up Distributed Link Tracking Objects -- Enabling and Disabling the Global Catalog -- Determining if Global Catalog Promotion Is Complete -- Finding the Global Catalog Servers in a Forest -- Finding the Domain Controllers or Global Catalog Servers in a Site -- Finding Domain Controllers and Global Catalogs via DNS -- Changing the Preference for a Domain Controller -- Disabling the Global Catalog Requirement During a Windows 2000 Domain Login -- Disabling the Global Catalog Requirement During a Windows 2003 Domain Login -- Finding the FSMO Role Holders -- Transferring a FSMO Role -- Seizing a FSMO Role -- Finding the PDC Emulator FSMO Role Owner via DNS -- Chapter 4 Searching and Manipulating Objects -- Introduction -- Viewing the RootDSE -- Viewing the Attributes of an Object -- Using LDAP Controls -- Using a Fast or Concurrent Bind -- Searching for Objects in a Domain -- Searching the Global Catalog -- Searching for a Large Number of Objects -- Searching with an Attribute-Scoped Query -- Searching with a Bitwise Filter -- Creating an Object -- Modifying an Object -- Modifying a Bit-Flag Attribute -- Dynamically Linking an Auxiliary Class -- Creating a Dynamic Object -- Refreshing a Dynamic Object -- Modifying the Default TTL Settings for Dynamic Objects -- Moving an Object to a Different OU or Container -- Moving an Object to a Different Domain -- Renaming an Object -- Deleting an Object -- Deleting a Container That Has Child Objects -- Viewing the Created and Last Modified Timestamp of an Object -- Modifying the Default LDAP Query Policy -- Exporting Objects to an LDIF File -- Importing Objects Using an LDIF File -- Exporting Objects to a CSV File -- Importing Objects Using a CSV File -- Chapter 5 Organizational Units -- Introduction -- Creating an OU -- Enumerating the OUs in a Domain -- Enumerating the Objects in an OU -- Deleting the Objects in an OU -- Deleting an OU -- Moving the Objects in an OU to a Different OU -- Moving an OU -- Determining How Many Child Objects an OU Has -- Delegating Control of an OU -- Allowing OUs to Be Created Within Containers -- Linking a GPO to an OU -- Chapter 6 Users -- Introduction -- Creating a User -- Creating a Large Number of Users -- Creating an inetOrgPerson User -- Modifying an Attribute for Several Users at Once -- Moving a User -- Renaming a User -- Copying a User -- Unlocking a User -- Finding Locked Out Users -- Troubleshooting Account Lockout Problems -- Viewing the Account Lockout and Password Policies -- Enabling and Disabling a User -- Finding Disabled Users -- Viewing a User’s Group Membership -- Changing a User’s Primary Group -- Transferring a User’s Group Membership to Another User -- Setting a User’s Password -- Setting a User’s Password via LDAP -- Setting a User’s Password via Kerberos -- Preventing a User from Changing His Password -- Requiring a User to Change Her Password at Next Logon -- Preventing a User’s Password from Expiring -- Finding Users Whose Passwords Are About to Expire -- Setting a User’s Account Options (userAccountControl) -- Setting a User’s Account to Expire in the Future -- Finding Users Whose AccountsAre About to Expire -- Determining a User’s Last Logon Time -- Finding Users Who Have Not Logged On Recently -- Setting a User’s Profile Attributes -- Viewing a User’s Managed Objects -- Modifying the Default Display Name Used When Creating Users in ADUC -- Creating a UPN Suffix for a Forest -- Chapter 7 Groups -- Introduction -- Creating a Group -- Viewing the Direct Members of a Group -- Viewing the Nested Members of a Group -- Adding and Removing Members of a Group -- Moving a Group -- Changing the Scope or Type of a Group -- Delegating Control for Managing Membership of a Group -- Resolving a Primary Group ID -- Enabling Universal Group Membership Caching -- Chapter 8 Computers -- Introduction -- Creating a Computer -- Creating a Computer for a Specific User or Group -- Joining a Computer to a Domain -- Moving a Computer -- Renaming a Computer -- Testing the Secure Channel for a Computer -- Resetting a Computer -- Finding Inactive or Unused Computers -- Changing the Maximum Number of Computers a User Can Join to the Domain -- Finding Computers with a Particular OS -- Binding to the Default Container for Computers -- Changing the Default Container for Computers -- Chapter 9 Group Policy Objects (GPOs) -- Introduction -- Finding the GPOs in a Domain -- Creating a GPO -- Copying a GPO -- Deleting a GPO -- Viewing the Settings of a GPO -- Modifying the Settings of a GPO -- Importing Settings into a GPO -- Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPO -- Installing Applications with a GPO -- Disabling the User or Computer Settings in a GPO -- Listing the Links for GPO -- Creating a GPO Link to an OU -- Blocking Inheritance of GPOs on an OU -- Applying a Security Filter to a GPO -- Creating a WMI Filter -- Applying a WMI Filter to a GPO -- Backing Up a GPO -- Restoring a GPO -- Simulating the RSoP -- Viewing the RSoP -- Refreshing GPO Settings on a Computer -- Restoring a Default GPO -- Chapter 10 Schema -- Introduction -- Registering the Active Directory Schema MMC Snap-in -- Enabling Schema Updates -- Generating an OID to Use for a New Class or Attribute -- Generating a GUID to Use for a New Class or Attribute -- Extending the Schema -- Documenting Schema Extensions -- Adding a New Attribute -- Viewing an Attribute -- Adding a New Class -- Viewing a Class -- Indexing an Attribute -- Modifying the Attributes That Are Copied When Duplicating a User -- Modifying the Attributes Included with Ambiguous Name Resolution -- Adding or Removing an Attribute in the Global Catalog -- Finding the Nonreplicated and Constructed Attributes -- Finding the Linked Attributes -- Finding the Structural, Auxiliary, Abstract, and 88 Classes -- Finding the Mandatory and Optional Attributes of a Class -- Modifying the Default Security of a Class -- Deactivating Classes and Attributes -- Redefining Classes and Attributes -- Reloading the Schema Cache -- Chapter 11 Site Topology -- Introduction -- Creating a Site -- Listing the Sites -- Deleting a Site -- Creating a Subnet -- Listing the Subnets -- Finding Missing Subnets -- Creating a Site Link -- Finding the Site Links for a Site -- Modifying the Sites That Are Part of a Site Link -- Modifying the Cost for a Site Link -- Disabling Site Link Transitivity or Site Link Schedules -- Creating a Site Link Bridge -- Finding the Bridgehead Servers for a Site -- Setting a Preferred Bridgehead Server for a Site -- Listing the Servers -- Moving a Domain Controller to a Different Site -- Configuring a Domain Controller to Cover Multiple Sites -- Viewing the Site Coverage for a Domain Controller -- Disabling Automatic Site Coverage for a Domain Controller -- Finding the Site for a Client -- Forcing a Host to a Particular Site -- Creating a Connection Object -- Listing the Connection Objects fo
Keywords: MICROSOFT WINDOWS SERVER 2003; MICROSOFT WINDOWS 2000