Active Directory Cookbook
Formato: | Libro |
---|---|
Lengua: | inglés |
Datos de publicación: |
Sebastopol :
O'Reilly,
2003
|
Edición: | 1st ed. |
Temas: | |
Acceso en línea: | Consultar en el Cátalogo |
Descripción Física: | xxvi, 593 p. : il. |
ISBN: | 059600464 |
Tabla de Contenidos:
- Chapter 1 Getting Started
- Approach to the Book
- Where to Find the Tools
- Getting Familiar with LDIF
- Programming Notes
- Replaceable Text
- Where to Find More Information
- Chapter 2 Forests, Domains, and Trusts
- Introduction
- Creating a Forest
- Removing a Forest
- Creating a Domain
- Removing a Domain
- Removing an Orphaned Domain
- Finding the Domains in a Forest
- Finding the NetBIOS Name of a Domain
- Renaming a Domain
- Changing the Mode of a Domain
- Using ADPrep to Prepare a Domain or Forest for Windows Server 2003
- Determining if ADPrep Has Completed
- Checking Whether a Windows 2000 Domain Controller Can Be Upgraded to Windows Server 2003
- Raising the Functional Level of a Windows Server 2003 Domain
- Raising the Functional Level of a Windows Server 2003 Forest
- Creating a Trust Between a Windows NT Domain and an AD Domain
- Creating a Transitive Trust Between Two AD Forests
- Creating a Shortcut Trust Between Two AD Domains
- Creating a Trust to a Kerberos Realm
- Viewing the Trusts for a Domain
- Verifying a Trust
- Resetting a Trust
- Removing a Trust
- Enabling SID Filtering for a Trust
- Finding Duplicate SIDs in a Domain
- Chapter 3 Domain Controllers, Global Catalogs, and FSMOs
- Introduction
- Promoting a Domain Controller
- Promoting a Domain Controller from Media
- Demoting a Domain Controller
- Automating the Promotion or Demotion of a Domain Controller
- Troubleshooting Domain Controller Promotion or Demotion Problems
- Removing an Unsuccessfully Demoted Domain Controller
- Renaming a Domain Controller
- Finding the Domain Controllers for a Domain
- Finding the Closest Domain Controller
- Finding a Domain Controller’s Site
- Moving a Domain Controller to a Different Site
- Finding the Services a Domain Controller Is Advertising
- Configuring a Domain Controller to Use an External Time Source
- Finding the Number of Logon Attempts Made Against a Domain Controller
- Enabling the /3GB Switch to Increase the LSASS Cache
- Cleaning Up Distributed Link Tracking Objects
- Enabling and Disabling the Global Catalog
- Determining if Global Catalog Promotion Is Complete
- Finding the Global Catalog Servers in a Forest
- Finding the Domain Controllers or Global Catalog Servers in a Site
- Finding Domain Controllers and Global Catalogs via DNS
- Changing the Preference for a Domain Controller
- Disabling the Global Catalog Requirement During a Windows 2000 Domain Login
- Disabling the Global Catalog Requirement During a Windows 2003 Domain Login
- Finding the FSMO Role Holders
- Transferring a FSMO Role
- Seizing a FSMO Role
- Finding the PDC Emulator FSMO Role Owner via DNS
- Chapter 4 Searching and Manipulating Objects
- Introduction
- Viewing the RootDSE
- Viewing the Attributes of an Object
- Using LDAP Controls
- Using a Fast or Concurrent Bind
- Searching for Objects in a Domain
- Searching the Global Catalog
- Searching for a Large Number of Objects
- Searching with an Attribute-Scoped Query
- Searching with a Bitwise Filter
- Creating an Object
- Modifying an Object
- Modifying a Bit-Flag Attribute
- Dynamically Linking an Auxiliary Class
- Creating a Dynamic Object
- Refreshing a Dynamic Object
- Modifying the Default TTL Settings for Dynamic Objects
- Moving an Object to a Different OU or Container
- Moving an Object to a Different Domain
- Renaming an Object
- Deleting an Object
- Deleting a Container That Has Child Objects
- Viewing the Created and Last Modified Timestamp of an Object
- Modifying the Default LDAP Query Policy
- Exporting Objects to an LDIF File
- Importing Objects Using an LDIF File
- Exporting Objects to a CSV File
- Importing Objects Using a CSV File
- Chapter 5 Organizational Units
- Introduction
- Creating an OU
- Enumerating the OUs in a Domain
- Enumerating the Objects in an OU
- Deleting the Objects in an OU
- Deleting an OU
- Moving the Objects in an OU to a Different OU
- Moving an OU
- Determining How Many Child Objects an OU Has
- Delegating Control of an OU
- Allowing OUs to Be Created Within Containers
- Linking a GPO to an OU
- Chapter 6 Users
- Introduction
- Creating a User
- Creating a Large Number of Users
- Creating an inetOrgPerson User
- Modifying an Attribute for Several Users at Once
- Moving a User
- Renaming a User
- Copying a User
- Unlocking a User
- Finding Locked Out Users
- Troubleshooting Account Lockout Problems
- Viewing the Account Lockout and Password Policies
- Enabling and Disabling a User
- Finding Disabled Users
- Viewing a User’s Group Membership
- Changing a User’s Primary Group
- Transferring a User’s Group Membership to Another User
- Setting a User’s Password
- Setting a User’s Password via LDAP
- Setting a User’s Password via Kerberos
- Preventing a User from Changing His Password
- Requiring a User to Change Her Password at Next Logon
- Preventing a User’s Password from Expiring
- Finding Users Whose Passwords Are About to Expire
- Setting a User’s Account Options (userAccountControl)
- Setting a User’s Account to Expire in the Future
- Finding Users Whose AccountsAre About to Expire
- Determining a User’s Last Logon Time
- Finding Users Who Have Not Logged On Recently
- Setting a User’s Profile Attributes
- Viewing a User’s Managed Objects
- Modifying the Default Display Name Used When Creating Users in ADUC
- Creating a UPN Suffix for a Forest
- Chapter 7 Groups
- Introduction
- Creating a Group
- Viewing the Direct Members of a Group
- Viewing the Nested Members of a Group
- Adding and Removing Members of a Group
- Moving a Group
- Changing the Scope or Type of a Group
- Delegating Control for Managing Membership of a Group
- Resolving a Primary Group ID
- Enabling Universal Group Membership Caching
- Chapter 8 Computers
- Introduction
- Creating a Computer
- Creating a Computer for a Specific User or Group
- Joining a Computer to a Domain
- Moving a Computer
- Renaming a Computer
- Testing the Secure Channel for a Computer
- Resetting a Computer
- Finding Inactive or Unused Computers
- Changing the Maximum Number of Computers a User Can Join to the Domain
- Finding Computers with a Particular OS
- Binding to the Default Container for Computers
- Changing the Default Container for Computers
- Chapter 9 Group Policy Objects (GPOs)
- Introduction
- Finding the GPOs in a Domain
- Creating a GPO
- Copying a GPO
- Deleting a GPO
- Viewing the Settings of a GPO
- Modifying the Settings of a GPO
- Importing Settings into a GPO
- Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPO
- Installing Applications with a GPO
- Disabling the User or Computer Settings in a GPO
- Listing the Links for GPO
- Creating a GPO Link to an OU
- Blocking Inheritance of GPOs on an OU
- Applying a Security Filter to a GPO
- Creating a WMI Filter
- Applying a WMI Filter to a GPO
- Backing Up a GPO
- Restoring a GPO
- Simulating the RSoP
- Viewing the RSoP
- Refreshing GPO Settings on a Computer
- Restoring a Default GPO
- Chapter 10 Schema
- Introduction
- Registering the Active Directory Schema MMC Snap-in
- Enabling Schema Updates
- Generating an OID to Use for a New Class or Attribute
- Generating a GUID to Use for a New Class or Attribute
- Extending the Schema
- Documenting Schema Extensions
- Adding a New Attribute
- Viewing an Attribute
- Adding a New Class
- Viewing a Class
- Indexing an Attribute
- Modifying the Attributes That Are Copied When Duplicating a User
- Modifying the Attributes Included with Ambiguous Name Resolution
- Adding or Removing an Attribute in the Global Catalog
- Finding the Nonreplicated and Constructed Attributes
- Finding the Linked Attributes
- Finding the Structural, Auxiliary, Abstract, and 88 Classes
- Finding the Mandatory and Optional Attributes of a Class
- Modifying the Default Security of a Class
- Deactivating Classes and Attributes
- Redefining Classes and Attributes
- Reloading the Schema Cache
- Chapter 11 Site Topology
- Introduction
- Creating a Site
- Listing the Sites
- Deleting a Site
- Creating a Subnet
- Listing the Subnets
- Finding Missing Subnets
- Creating a Site Link
- Finding the Site Links for a Site
- Modifying the Sites That Are Part of a Site Link
- Modifying the Cost for a Site Link
- Disabling Site Link Transitivity or Site Link Schedules
- Creating a Site Link Bridge
- Finding the Bridgehead Servers for a Site
- Setting a Preferred Bridgehead Server for a Site
- Listing the Servers
- Moving a Domain Controller to a Different Site
- Configuring a Domain Controller to Cover Multiple Sites
- Viewing the Site Coverage for a Domain Controller
- Disabling Automatic Site Coverage for a Domain Controller
- Finding the Site for a Client
- Forcing a Host to a Particular Site
- Creating a Connection Object
- Listing the Connection Objects fo