If an object is published and listed in Active Directory, you can locate it by using the Find option on the Active Directory Users And Computers console. The Find option enables you to search for users, contacts, groups, computers, printers, shared folders, OUs, remote installation servers, and remote installation clients. Find also provides the capability to build custom search queries and to perform common administrative queries for users, contacts, and groups. Using Find, you enter various search criteria, which are used to create a Lightweight Directory Access Protocol (LDAP) query to search the global catalog to locate Active Directory objects.
To locate Active Directory objects, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
In the console tree, right-click the domain, OU, or container in which you want to search, and click Find.
In the Find dialog box, shown in Figure 9-1, select the object type for which you want to search in the Find list. Ensure that the domain, OU, or container in which you want to search is selected in the In list. Note that the object type you select invokes a tab by the same name underneath the Find list. The contents of this tab change depending on the object type selected. If you want to begin your search now, click Find Now. Otherwise, proceed to the next step to provide additional criteria to filter your search.
The Run As program allows a user to run specific tools anci programs with permissions other than those provided by the account with which the user is currently logged on. Therefore, you can use the Run As program to run administrative tools with either local or domain administrator rights and permissions while logged on as a normal user. The Run As program can be used to start any program, Microsoft Management Console (MMC) tool, or Control Panel item, as long as
You provide the appropriate user account and password information
The user account has the ability to log on to the computer
The program, MMC tool, or Control Panel item is available on the system and to the user account
The Run As program is usually used to run programs as an administrator, although it is not limited to administrator accounts. Any user with multiple accounts can use Run As to run a program, MMC tool, or Control Panel item with alternate credentials. The Run As program can be invoked on the desktop or by using the Runas command.
To invoke the Run As program from the desktop, complete the following steps:
1.In Windows Explorer, or on the Start menu, right-click the program, MMC tool, or Control Panel item you want to open, and then click Run As.
In the Run As dialog box, shown in , click The Following User.
Type the user name and password of the account you want to use in the User Name and Password boxes, respectively. Click OK.
If you attempt to start a program, MMC tool, or Control Panel item from a network loca?tion using the Run As program, it might fail if the credentials used to connect to the network share are different from the credentials used to start the program. The credentials used to run the program might not be able to gain access to the same network share. If the Run As program fails, the Secondary Logon service might not be running. You can set the Secondary Logon service to start automatically when the system starts using the Secondary Logon Service option in the Services console.
Domain user accounts are created using the Active Directory Users And Computers console. To use either tool, you must have administrator privileges. This lesson takes you step-by-step through creating user accounts and setting user account properties.
Creating Domain User Accounts
Use the Active Directory Users And Computers console to create a new domain user account. When you create the domain user account, the user logon name is by default associated with the domain in which you are creating the domain user account. However, you can associate a user logon name with any domain in which you have permissions to create domain user accounts. You must select the container in which to create the new account. Although you can create the domain user account in the Users container by default, you should add actual users to a custom OU. OUs are discussed in detail in Chapter 6, “Implementing an OU Structure.”
To create domain user accounts, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
2.Click the domain, right-click the OU in which the domain user account will be stored, point to New, and then click User.
3.In the New Object-User dialog box, shown in , set the domain user name options as described in Table 7-3. Click Next.
Type the user’s first name. An entry in this, the Initials, or the Last Name box is required.
Type the user’s initials, if applicable. An entry in this, the First Name, or the Last Name box is required. Do not use a period after the last initial; a period is entered automatically.
Type the user’s last name. An entry in this, the Initials, or the First Name box is required.
No action is necessary, because the user’s complete name is entered automatically from information you entered in the First Name, Initials, and Last Name boxes. The name must be unique within the OU or container where you create the user account. The full name is the one displayed in the OLI or container where the user account is located in the directory.
The User Logon Name box is accompanied by a domain name list. The user logon name and the domain name together uniquely iden?tify the user throughout the entire network. Based on your naming conventions, type the user’s unique logon name in the box (on the left). The logon name is required and in combination with the domain name on the right must be unique within the domain. The current domain name is entered automatically from the list (on the right) of domains for which you have the appropriate permissions, but you may select another instead.
No action is necessary because an entry is entered automatically. The entry is the user’s unique logon name that is used to log on from earlier versions of Windows, such as Microsoft Windows NT 4 or Windows NT 3.5.1. An entry is required, and must be unique within the domain. If you entered any of the following: in the User Logon Name box, a message appears, reminding you that these characters are not valid for pre-Windows 2000 systems and that the characters will be replaced with the underscore symbol for the pre-Windows 2000 user logon.
Microsoft Exam 70-680 TS: Windows 7, Configuring is a . MCTS is a certification awarded by the Microsoft Corporation to the individuals who clear the said examination. These MCTS examinations have the purpose of creating specific technologies specialization in the given fields such as MCTS Windows 7, Configuring; Windows 7, Pre-installing for OEMs, etc. This certification tests an individual’s thorough knowledge in the specified field.
In the present day, most people are using mobile phones than having a telephone line. In reality, lots of people are shocked if you do not have a cell phone. Research shows that over half of the country’s inhabitants notably those who are extremely developed have a cell phone. When a person would use a cell phone than a telephone, he must have studied severa […]
There’s actually very little that we’ve done to prepare for boondocking. Last year we dry-camped a lot of times without each one “extra” prep function utilizing simple conservation and the generator to excellent off our batteries daily. This winter we supplemental a few extra boondocking luxuries, but none of these are really crucial. Here’s what I consider […]
The Lotto Black Ebook Rip-Off or Not? Read my unbiased review and discover the incredibly correct indicator that I accustomed to ascertain whether or not or not the Lotto Black Guide is truly price investing in. Read more on The Lotto Black E-Book Scam? An Unbiased Review… No tags for this post. […]
