Hi everyone,

bit of a strange one, but just wondering if anyone on here knows alot about active directory.

i need to know the basics by tomorrow, can any one help?


cheers

 

when you say basics, how basic?
what tasks do yo uneed to perform or do you just need an overview of the infrastructure?

 

As above really, need more info

 

http://en.wikipedia.org/wiki/Active_directory

here's a basic start.
i'd stay off microsoft's site until you can be a bit more specific about what you need to know..

 

hi guys,

basically i need to know a little about,

AD Security
AD Distribution groups
organisational groups
group policys


cheers

 

the link looks good MARKb_s1

 

couple of pretty big subjects there with the GPOs and security.

distribution groups and organisational (security) groups are basically just collections of users with one being used for email distribution and the other being used for security permissions.

distribution groups can be nested by default (i.e. a group can go inside another group).

security groups are a bit more complicated.. there are different types... and can only be nested if the domain is in "native" mode. (i.e. no windows nt4 domain controllers still participating in the domain). however, global groups (on the domain) can always be made members of local groups on workstations..
typically permissions on a file or folder or other resource such as printer would be applied at group level rather than user level as it's more efficient.

e.g. we have a group in our domain which has all the desktop support staff in. this group is then added to the local administrators group at point of build on all our workstations. this way, all desktop support have admin rights on all workstations in the building. then if someone leaves or starts in the support team, we just need to remove or add them to the global group rather than visiting every workstation and adding them there manually.

bit more info here:
http://www.microsoft.com/windows/win...ups_1intro.htm

 

thanks alot for the info matey! time to get reading ((((

 

group policy can be used for a huge array of tasks, from restricting access to certain icons or the desktop on a workstation, to deploying applications, to running logon/off scripts, distributing printers, controlling the look and feel of the user environment, controlling security settings and so on.. i can't remember the numbers off the top of my head, but there were a few thousand configurable items in windows 2000 gpos, which increased to 100000 or so in xp iirc. vista is an even bigger can of worms.

if you're going to be working with group policy, the best recommendation i can make is use Group Policy Management console. (GPMC) it greatly simplifies management and testing of GPOs and can tell you which settings are actually in force for a workstation and/or user and which policy it's contained in. this is especially useful in an environment like mine where we have nearly 350 policies linked and enforced at various levels in our uk domain.

 

no worries mate hope it helps. any questions just ask..