2.1 - Active Directory

Question 1

Active Directory

Answer 1

• A database of everything on the network
  – Computers, user accounts, file shares,
  printers, groups, and more
• Manage authentication
  – Users login using their AD credentials
• Centralized access control
  – Determine which users can access resources
• Commonly used by the help desk
  – Reset passwords
  – Add and remove accounts

Question 2

Domain

Answer 2

• The name associated with this related
  group of users, computers, and resources
  – Each domain has a name
• Domain controllers store this central domain database
  – Active Directory is the service that
  manages this directory
• Often referenced when troubleshooting
  – Is this computer on the domain?
  – Can you reset the domain password?

Question 3

Organizational units (OU)

Answer 3

• Keep the (very large) database organized
  – Users, Computers
• Create your own hierarchy
  – Countries, states, buildings, departments, etc.
• Apply policies to an OU
  – Can be very large:
  – Domain Users
  – Can be for a specific group:
  – Marketing, North America,
  – Pegasus galaxy

Question 4

Login script

Answer 4

• Automate a series of tasks during login
  – Assign a script to a specific user, group, or OU
• Associate the script with a Group Policy
  – User Configuration > Policies >
  – Windows Settings > Scripts
• Create different login scripts for different OUs
  – Customize based on your needs

Question 5

Group Policy/updates

Answer 5

• Manage the computers or users with Group Policies
  – Local and Domain policies
  – Group Policy Management Editor
• A central console
  – Login scripts
  – Network configurations (QoS)
  – Security parameters
  Update a client with the gpupdate utility:
  > gpupdate /force

Question 6

Home folder

Answer 6

• Assign a user Home folder to a network folder
  – Manage and backup files from the network
  – Avoid storing files on the local computer
• When added to the user profile, the directories
  are automatically created
  – And proper permissions are assigned
• Requires some training
  – Encourage users to store files on the
  network Home folder

Question 7

Folder redirection

Answer 7

• Some users and applications use the
  Windows Library folders
  – Desktop, Downloads,
  – Music, Documents, etc.
• Redirect the folders to a network share
  – Group Policy > User Configuration >
  – Windows settings > Folder Redirection
• This is often paired with the Offline Files feature
  – You’re not always connected

Question 8

Security groups

Answer 8

• Create a group
  – Assign permissions to the group
• Set the rights and permissions to the group
  – Add users to the group
• Some built-in groups
  – Users, guests
  – Remote management users
  – Event Log Readers
• Save time
  – Avoid confusion and mistakes