Active Directory Cookbook

Active Directory Cookbook

Released September 2003
Publisher(s): O'Reilly Media, Inc.
ISBN: 9780596004644

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Buy on Amazon
Start your free trial

Book description

Those of you who run networks on Windows 2000 know the benefits of using Active Directory for managing user information and permissions. You also know what a bear it can be. The newer version included with Windows Server 2003 has over 100 new and updated features to simplify deployment, but once it's in place many system administrators still find Active Directory challenging. If you're among those looking for practical hands-on support, help is here with our new Active Directory Cookbook for Windows Server 2003 & Windows 2000, a unique problem-solving guide that offers quick answers for both versions of the directory. The book contains hundreds of step-by-step solutions for both common and uncommon problems that you might encounter with Active Directory on a daily basis--including recipes to deal with the Lightweight Directory Access Protocol (LDAP), multi-master replication, Domain Name System (DNS), Group Policy, the Active Directory Schema, and many other features. Author Robbie Allen, a Senior Systems Architect at Cisco Systems and co-author of our Active Directory tutorial, based this collection of troubleshooting recipes on his own experience, along with input from Windows administrators throughout the industry. Each recipe includes a discussion to explain how and why the solution works, so you can adapt the problem-solving techniques to similar situations. If your company is considering an upgrade from Windows NT or 2000 to Windows Server 2003, the Active Directory Cookbook for Windows Server 2003 & Windows 2000 will help reduce the time and trouble it takes to configure and deploy Active Directory for your network. This Cookbook is also a perfect companion to Active Directory, the tutorial that experts hail as the best source for understanding Microsoft's network directory service. While Active Directory provides the big picture, Active Directory Cookbook for Windows Server 2003 & Windows 2000 gives you the quick solutions you need to cope with day-to-day dilemmas. Together, these books supply the knowledge and tools so you can get the most out of Active Directory to manage users, groups, computers, domains, organizational units, and security policies on your network.

Table of contents

  1. Active Directory Cookbook
    1. Foreword
    2. Preface
      1. Who Should Read This Book?
      2. What’s in This Book?
      3. Conventions Used in This Book
      4. We’d Like Your Feedback!
      5. Acknowledgments
    3. 1. Getting Started
      1. Approach to the Book
        1. At Least Three Ways to Do It!
        2. Windows 2000 Versus Windows Server 2003
      2. 1.1. Where to Find the Tools
        1. Running Tools with Alternate Credentials
        2. Targeting Specific Domain Controllers
      3. 1.2. Getting Familiar with LDIF
      4. 1.3. Programming Notes
        1. Serverless Binds
        2. Running Scripts Using Alternate Credentials
        3. Defining Variables and Error Checking
      5. 1.4. Replaceable Text
      6. 1.5. Where to Find More Information
        1. Command-Line Tools
        2. Microsoft Knowledge Base
        3. Microsoft Developers Network
        4. Web Sites
        5. Newsgroups
        6. Mailing Lists
        7. Books
        8. Magazines
    4. 2. Forests, Domains, and Trusts
      1. Introduction
        1. The Anatomy of a Domain
        2. The Anatomy of a Trust
        3. The Anatomy of a Forest
      2. 2.1. Creating a Forest
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      3. 2.2. Removing a Forest
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      4. 2.3. Creating a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      5. 2.4. Removing a Domain
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      6. 2.5. Removing an Orphaned Domain
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      7. 2.6. Finding the Domains in a Forest
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      8. 2.7. Finding the NetBIOS Name of a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      9. 2.8. Renaming a Domain
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      10. 2.9. Changing the Mode of a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      11. 2.10. Using ADPrep to Prepare a Domain or Forest for Windows Server 2003
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      12. 2.11. Determining if ADPrep Has Completed
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      13. 2.12. Checking Whether a Windows 2000 Domain Controller Can Be Upgraded to Windows Server 2003
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      14. 2.13. Raising the Functional Level of a Windows Server 2003 Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      15. 2.14. Raising the Functional Level of a Windows Server 2003 Forest
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      16. 2.15. Creating a Trust Between a Windows NT Domain and an AD Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      17. 2.16. Creating a Transitive Trust Between Two AD Forests
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
      18. 2.17. Creating a Shortcut Trust Between Two AD Domains
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
      19. 2.18. Creating a Trust to a Kerberos Realm
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      20. 2.19. Viewing the Trusts for a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      21. 2.20. Verifying a Trust
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      22. 2.21. Resetting a Trust
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
        4. See Also
      23. 2.22. Removing a Trust
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      24. 2.23. Enabling SID Filtering for a Trust
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      25. 2.24. Finding Duplicate SIDs in a Domain
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
    5. 3. Domain Controllers, Global Catalogs, and FSMOs
      1. Introduction
        1. The Anatomy of a Domain Controller
      2. 3.1. Promoting a Domain Controller
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      3. 3.2. Promoting a Domain Controller from Media
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      4. 3.3. Demoting a Domain Controller
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      5. 3.4. Automating the Promotion or Demotion of a Domain Controller
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      6. 3.5. Troubleshooting Domain Controller Promotion or Demotion Problems
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      7. 3.6. Removing an Unsuccessfully Demoted Domain Controller
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      8. 3.7. Renaming a Domain Controller
        1. Problem
        2. Solution
          1. Windows 2000 Active Directory
          2. Windows Server 2003 Active Directory
        3. Discussion
        4. See Also
      9. 3.8. Finding the Domain Controllers for a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      10. 3.9. Finding the Closest Domain Controller
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      11. 3.10. Finding a Domain Controller’s Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      12. 3.11. Moving a Domain Controller to a Different Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      13. 3.12. Finding the Services a Domain Controller Is Advertising
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      14. 3.13. Configuring a Domain Controller to Use an External Time Source
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      15. 3.14. Finding the Number of Logon Attempts Made Against a Domain Controller
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      16. 3.15. Enabling the /3GB Switch to Increase the LSASS Cache
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      17. 3.16. Cleaning Up Distributed Link Tracking Objects
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      18. 3.17. Enabling and Disabling the Global Catalog
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      19. 3.18. Determining if Global Catalog Promotion Is Complete
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      20. 3.19. Finding the Global Catalog Servers in a Forest
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      21. 3.20. Finding the Domain Controllers or Global Catalog Servers in a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      22. 3.21. Finding Domain Controllers and Global Catalogs via DNS
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      23. 3.22. Changing the Preference for a Domain Controller
        1. Problem
        2. Solution
        3. Discussion
      24. 3.23. Disabling the Global Catalog Requirement During a Windows 2000 Domain Login
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      25. 3.24. Disabling the Global Catalog Requirement During a Windows 2003 Domain Login
        1. Problem
        2. Solution
      26. 3.25. Finding the FSMO Role Holders
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      27. 3.26. Transferring a FSMO Role
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      28. 3.27. Seizing a FSMO Role
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      29. 3.28. Finding the PDC Emulator FSMO Role Owner via DNS
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
    6. 4. Searching and Manipulating Objects
      1. Introduction
        1. The Anatomy of an Object
      2. 4.1. Viewing the RootDSE
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      3. 4.2. Viewing the Attributes of an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      4. 4.3. Using LDAP Controls
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      5. 4.4. Using a Fast or Concurrent Bind
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      6. 4.5. Searching for Objects in a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      7. 4.6. Searching the Global Catalog
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      8. 4.7. Searching for a Large Number of Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      9. 4.8. Searching with an Attribute-Scoped Query
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      10. 4.9. Searching with a Bitwise Filter
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      11. 4.10. Creating an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      12. 4.11. Modifying an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      13. 4.12. Modifying a Bit-Flag Attribute
        1. Problem
        2. Solution
          1. Using VBScript
        3. Discussion
        4. See Also
      14. 4.13. Dynamically Linking an Auxiliary Class
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      15. 4.14. Creating a Dynamic Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      16. 4.15. Refreshing a Dynamic Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      17. 4.16. Modifying the Default TTL Settings for Dynamic Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      18. 4.17. Moving an Object to a Different OU or Container
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      19. 4.18. Moving an Object to a Different Domain
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      20. 4.19. Renaming an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      21. 4.20. Deleting an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      22. 4.21. Deleting a Container That Has Child Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      23. 4.22. Viewing the Created and Last Modified Timestamp of an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      24. 4.23. Modifying the Default LDAP Query Policy
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      25. 4.24. Exporting Objects to an LDIF File
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
        4. See Also
      26. 4.25. Importing Objects Using an LDIF File
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
          1. Using a command-line interface
        4. See Also
      27. 4.26. Exporting Objects to a CSV File
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
          1. Using a command-line interface
        4. See Also
      28. 4.27. Importing Objects Using a CSV File
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
          1. Using a command-line interface
        4. See Also
    7. 5. Organizational Units
      1. Introduction
        1. The Anatomy of an Organizational Unit
      2. 5.1. Creating an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      3. 5.2. Enumerating the OUs in a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
      4. 5.3. Enumerating the Objects in an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
      5. 5.4. Deleting the Objects in an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 5.5. Deleting an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 5.6. Moving the Objects in an OU to a Different OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      8. 5.7. Moving an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      9. 5.8. Determining How Many Child Objects an OU Has
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      10. 5.9. Delegating Control of an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      11. 5.10. Allowing OUs to Be Created Within Containers
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      12. 5.11. Linking a GPO to an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
    8. 6. Users
      1. Introduction
        1. The Anatomy of a User
      2. 6.1. Creating a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      3. 6.2. Creating a Large Number of Users
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      4. 6.3. Creating an inetOrgPerson User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      5. 6.4. Modifying an Attribute for Several Users at Once
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      6. 6.5. Moving a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 6.6. Renaming a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      8. 6.7. Copying a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using VBScript
        4. See Also
      9. 6.8. Unlocking a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      10. 6.9. Finding Locked Out Users
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      11. 6.10. Troubleshooting Account Lockout Problems
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      12. 6.11. Viewing the Account Lockout and Password Policies
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      13. 6.12. Enabling and Disabling a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      14. 6.13. Finding Disabled Users
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      15. 6.14. Viewing a User’s Group Membership
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      16. 6.15. Changing a User’s Primary Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      17. 6.16. Transferring a User’s Group Membership to Another User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      18. 6.17. Setting a User’s Password
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      19. 6.18. Setting a User’s Password via LDAP
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      20. 6.19. Setting a User’s Password via Kerberos
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      21. 6.20. Preventing a User from Changing His Password
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      22. 6.21. Requiring a User to Change Her Password at Next Logon
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      23. 6.22. Preventing a User’s Password from Expiring
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      24. 6.23. Finding Users Whose Passwords Are About to Expire
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using Perl
        3. Discussion
        4. See Also
      25. 6.24. Setting a User’s Account Options (userAccountControl)
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      26. 6.25. Setting a User’s Account to Expire in the Future
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      27. 6.26. Finding Users Whose AccountsAre About to Expire
        1. Problem
        2. Solution
          1. Using Perl
        3. Discussion
        4. See Also
      28. 6.27. Determining a User’s Last Logon Time
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      29. 6.28. Finding Users Who Have Not Logged On Recently
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using Perl
        3. Discussion
        4. See Also
      30. 6.29. Setting a User’s Profile Attributes
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      31. 6.30. Viewing a User’s Managed Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      32. 6.31. Modifying the Default Display Name Used When Creating Users in ADUC
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      33. 6.32. Creating a UPN Suffix for a Forest
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
    9. 7. Groups
      1. Introduction
        1. The Anatomy of a Group
      2. 7.1. Creating a Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      3. 7.2. Viewing the Direct Members of a Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      4. 7.3. Viewing the Nested Members of a Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      5. 7.4. Adding and Removing Members of a Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 7.5. Moving a Group
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      7. 7.6. Changing the Scope or Type of a Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      8. 7.7. Delegating Control for Managing Membership of a Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      9. 7.8. Resolving a Primary Group ID
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      10. 7.9. Enabling Universal Group Membership Caching
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
    10. 8. Computers
      1. Introduction
        1. The Anatomy of a Computer
      2. 8.1. Creating a Computer
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      3. 8.2. Creating a Computer for a Specific User or Group
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      4. 8.3. Joining a Computer to a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      5. 8.4. Moving a Computer
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 8.5. Renaming a Computer
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      7. 8.6. Testing the Secure Channel for a Computer
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      8. 8.7. Resetting a Computer
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      9. 8.8. Finding Inactive or Unused Computers
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using Perl
        3. Discussion
          1. Using a command-line interface
          2. Using Perl
        4. See Also
      10. 8.9. Changing the Maximum Number of Computers a User Can Join to the Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      11. 8.10. Finding Computers with a Particular OS
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      12. 8.11. Binding to the Default Container for Computers
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      13. 8.12. Changing the Default Container for Computers
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    11. 9. Group Policy Objects (GPOs)
      1. Introduction
        1. Managing GPOs
      2. 9.1. Finding the GPOs in a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      3. 9.2. Creating a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      4. 9.3. Copying a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      5. 9.4. Deleting a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      6. 9.5. Viewing the Settings of a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      7. 9.6. Modifying the Settings of a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface or VBScript
        3. Discussion
        4. See Also
      8. 9.7. Importing Settings into a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      9. 9.8. Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
      10. 9.9. Installing Applications with a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
      11. 9.10. Disabling the User or Computer Settings in a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      12. 9.11. Listing the Links for GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      13. 9.12. Creating a GPO Link to an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      14. 9.13. Blocking Inheritance of GPOs on an OU
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      15. 9.14. Applying a Security Filter to a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      16. 9.15. Creating a WMI Filter
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      17. 9.16. Applying a WMI Filter to a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      18. 9.17. Backing Up a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      19. 9.18. Restoring a GPO
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using VBScript
        4. See Also
      20. 9.19. Simulating the RSoP
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      21. 9.20. Viewing the RSoP
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      22. 9.21. Refreshing GPO Settings on a Computer
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      23. 9.22. Restoring a Default GPO
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
    12. 10. Schema
      1. Introduction
        1. The Anatomy of Schema Objects
      2. 10.1. Registering the Active Directory Schema MMC Snap-in
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      3. 10.2. Enabling Schema Updates
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      4. 10.3. Generating an OID to Use for a New Class or Attribute
        1. Problem
        2. Solution
        3. Discussion
      5. 10.4. Generating a GUID to Use for a New Class or Attribute
        1. Problem
        2. Solution
        3. Discussion
      6. 10.5. Extending the Schema
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      7. 10.6. Documenting Schema Extensions
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      8. 10.7. Adding a New Attribute
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      9. 10.8. Viewing an Attribute
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      10. 10.9. Adding a New Class
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      11. 10.10. Viewing a Class
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      12. 10.11. Indexing an Attribute
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      13. 10.12. Modifying the Attributes That Are Copied When Duplicating a User
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      14. 10.13. Modifying the Attributes Included with Ambiguous Name Resolution
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      15. 10.14. Adding or Removing an Attribute in the Global Catalog
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      16. 10.15. Finding the Nonreplicated and Constructed Attributes
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      17. 10.16. Finding the Linked Attributes
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      18. 10.17. Finding the Structural, Auxiliary, Abstract, and 88 Classes
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      19. 10.18. Finding the Mandatory and Optional Attributes of a Class
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      20. 10.19. Modifying the Default Security of a Class
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      21. 10.20. Deactivating Classes and Attributes
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      22. 10.21. Redefining Classes and Attributes
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      23. 10.22. Reloading the Schema Cache
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    13. 11. Site Topology
      1. Introduction
        1. The Anatomy of Site Topology Objects
      2. 11.1. Creating a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      3. 11.2. Listing the Sites
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      4. 11.3. Deleting a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      5. 11.4. Creating a Subnet
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 11.5. Listing the Subnets
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 11.6. Finding Missing Subnets
        1. Problem
        2. Solution
      8. 11.7. Creating a Site Link
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      9. 11.8. Finding the Site Links for a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      10. 11.9. Modifying the Sites That Are Part of a Site Link
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      11. 11.10. Modifying the Cost for a Site Link
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      12. 11.11. Disabling Site Link Transitivity or Site Link Schedules
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      13. 11.12. Creating a Site Link Bridge
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      14. 11.13. Finding the Bridgehead Servers for a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      15. 11.14. Setting a Preferred Bridgehead Server for a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      16. 11.15. Listing the Servers
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      17. 11.16. Moving a Domain Controller to a Different Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      18. 11.17. Configuring a Domain Controller to Cover Multiple Sites
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      19. 11.18. Viewing the Site Coverage for a Domain Controller
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      20. 11.19. Disabling Automatic Site Coverage for a Domain Controller
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      21. 11.20. Finding the Site for a Client
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      22. 11.21. Forcing a Host to a Particular Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      23. 11.22. Creating a Connection Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      24. 11.23. Listing the Connection Objects for a Server
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      25. 11.24. Load-Balancing Connection Objects
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
      26. 11.25. Finding the ISTG for a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      27. 11.26. Transferring the ISTG to Another Server
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      28. 11.27. Triggering the KCC
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      29. 11.28. Determining if the KCC Is Completing Successfully
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
      30. 11.29. Disabling the KCC for a Site
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      31. 11.30. Changing the Interval at Which the KCC Runs
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    14. 12. Replication
      1. Introduction
      2. 12.1. Determining if Two Domain Controllers Are in Sync
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      3. 12.2. Viewing the Replication Status of Several Domain Controllers
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
      4. 12.3. Viewing Unreplicated Changes Between Two Domain Controllers
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      5. 12.4. Forcing Replication from One Domain Controller to Another
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 12.5. Changing the Intra-Site Replication Interval
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 12.6. Changing the Inter-Site Replication Interval
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      8. 12.7. Disabling Inter-Site Compression of Replication Traffic
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      9. 12.8. Checking for Potential Replication Problems
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      10. 12.9. Enabling Enhanced Logging of Replication Events
        1. Problem
        2. Solution
        3. See Also
      11. 12.10. Enabling Strict or Loose Replication Consistency
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      12. 12.11. Finding Conflict Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      13. 12.12. Viewing Object Metadata
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    15. 13. Domain Name System (DNS)
      1. Introduction
        1. The Anatomy of a DNS Object
      2. 13.1. Creating a Forward Lookup Zone
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      3. 13.2. Creating a Reverse Lookup Zone
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      4. 13.3. Viewing a Server’s Zones
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      5. 13.4. Converting a Zone to an AD-Integrated Zone
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 13.5. Moving AD-Integrated Zones into an Application Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 13.6. Delegating Control of a Zone
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      8. 13.7. Creating and Deleting Resource Records
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        4. See Also
      9. 13.8. Querying Resource Records
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      10. 13.9. Modifying the DNS Server Configuration
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      11. 13.10. Scavenging Old Resource Records
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      12. 13.11. Clearing the DNS Cache
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      13. 13.12. Verifying That a Domain Controller Can Register Its Resource Records
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      14. 13.13. Registering a Domain Controller’s Resource Records
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      15. 13.14. Preventing a Domain Controller from Dynamically Registering All Resource Records
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      16. 13.15. Preventing a Domain Controller from Dynamically Registering Certain Resource Records
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      17. 13.16. Deregistering a Domain Controller’s Resource Records
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
      18. 13.17. Allowing Computers to Use a Different Domain Suffix from Their AD Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    16. 14. Security and Authentication
      1. Introduction
      2. 14.1. Enabling SSL/TLS
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      3. 14.2. Encrypting LDAP Traffic with SSL, TLS, or Signing
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      4. 14.3. Enabling Anonymous LDAP Access
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      5. 14.4. Restricting Hosts from Performing LDAP Queries
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      6. 14.5. Using the Delegation of Control Wizard
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      7. 14.6. Customizing the Delegation of Control Wizard
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      8. 14.7. Viewing the ACL for an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      9. 14.8. Customizing the ACL Editor
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      10. 14.9. Viewing the Effective Permissions on an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
      11. 14.10. Changing the ACL of an Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      12. 14.11. Changing the Default ACL for an Object Class in the Schema
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      13. 14.12. Comparing the ACL of an Object to the Default Defined in the Schema
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      14. 14.13. Resetting an Object’s ACL to the Default Defined in the Schema
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
      15. 14.14. Preventing the LM Hash of a Password from Being Stored
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      16. 14.15. Enabling List Object Access Mode
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using VBScript
        3. Discussion
        4. See Also
      17. 14.16. Modifying the ACL on Administrator Accounts
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      18. 14.17. Viewing and Purging Your Kerberos Tickets
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      19. 14.18. Forcing Kerberos to Use TCP
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      20. 14.19. Modifying Kerberos Settings
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
    17. 15. Logging, Monitoring, and Quotas
      1. Introduction
        1. The Anatomy of a Quota Object Container
        2. The Anatomy of a Quota Object
      2. 15.1. Enabling Extended dcpromo Logging
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      3. 15.2. Enabling Diagnostics Logging
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      4. 15.3. Enabling NetLogon Logging
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      5. 15.4. Enabling GPO Client Logging
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 15.5. Enabling Kerberos Logging
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 15.6. Enabling DNS Server Debug Logging
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      8. 15.7. Viewing DNS Server Performance Statistics
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
          1. Using a command-line interface
          2. Using VBScript
        4. See Also
      9. 15.8. Enabling Inefficient and Expensive LDAP Query Logging
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      10. 15.9. Using the STATS Control to View LDAP Query Statistics
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      11. 15.10. Using Perfmon to Monitor AD
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
      12. 15.11. Using Perfmon Trace Logs to Monitor AD
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      13. 15.12. Enabling Auditing of Directory Access
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      14. 15.13. Creating a Quota
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      15. 15.14. Finding the Quotas Assigned to a Security Principal
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      16. 15.15. Changing How Tombstone Objects Count Against Quota Usage
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      17. 15.16. Setting the Default Quota for All Security Principals in a Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      18. 15.17. Finding the Quota Usage for a Security Principal
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
    18. 16. Backup, Recovery, DIT Maintenance, and Deleted Objects
      1. Introduction
        1. The Anatomy of a Deleted Object
      2. 16.1. Backing Up Active Directory
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      3. 16.2. Restarting a Domain Controller in Directory Services Restore Mode
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      4. 16.3. Resetting the Directory Service Restore Mode Administrator Password
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
        3. Discussion
        4. See Also
      5. 16.4. Performing a Nonauthoritative Restore
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      6. 16.5. Performing an Authoritative Restore of an Object or Subtree
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      7. 16.6. Performing a Complete Authoritative Restore
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      8. 16.7. Checking the DIT File’s Integrity
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      9. 16.8. Moving the DIT Files
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      10. 16.9. Repairing or Recovering the DIT
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      11. 16.10. Performing an Online Defrag Manually
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      12. 16.11. Determining How Much Whitespace Is in the DIT
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      13. 16.12. Performing an Offline Defrag to Reclaim Space
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      14. 16.13. Changing the Garbage Collection Interval
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      15. 16.14. Logging the Number of Expired Tombstone Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      16. 16.15. Determining the Size of the Active Directory Database
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
        4. See Also
      17. 16.16. Searching for Deleted Objects
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      18. 16.17. Restoring a Deleted Object
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      19. 16.18. Modifying the Tombstone Lifetime for a Domain
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    19. 17. Application Partitions
      1. Introduction
        1. The Anatomy of an Application Partition
      2. 17.1. Creating and Deleting an Application Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      3. 17.2. Finding the Application Partitions in a Forest
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      4. 17.3. Adding or Removing a Replica Server for an Application Partition
        1. Problem
        2. Solution
          1. Using a command-line interface
          2. Using VBScript
        3. Discussion
        4. See Also
      5. 17.4. Finding the Replica Servers for an Application Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      6. 17.5. Finding the Application Partitions Hosted by a Server
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      7. 17.6. Verifying Application Partitions Are Instantiated on a Server Correctly
        1. Problem
        2. Solution
          1. Using a command-line interface
        3. Discussion
      8. 17.7. Setting the Replication Notification Delay for an Application Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
      9. 17.8. Setting the Reference Domain for an Application Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
      10. 17.9. Delegating Control of Managing an Application Partition
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using VBScript
        3. Discussion
        4. See Also
    20. 18. Interoperability and Integration
      1. Introduction
      2. 18.1. Accessing AD from a Non-Windows Platform
        1. Problem
        2. Solution
          1. Using a graphical user interface
          2. Using a command-line interface
          3. Using a programming language
        3. Discussion
        4. See Also
      3. 18.2. Programming with .NET
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      4. 18.3. Programming with DSML
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      5. 18.4. Programming with Perl
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      6. 18.5. Programming with Java
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      7. 18.6. Programming with Python
        1. Problem
        2. Solution
        3. Discussion
      8. 18.7. Integrating with MIT Kerberos
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      9. 18.8. Integrating with Samba
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      10. 18.9. Integrating with Apache
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      11. 18.10. Replacing NIS
        1. Problem
        2. Solution
        3. See Also
      12. 18.11. Using BIND for DNS
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
      13. 18.12. Authorizing a Microsoft DHCP Server
        1. Problem
        2. Solution
          1. Using a graphical user interface
        3. Discussion
        4. See Also
      14. 18.13. Using VMWare for Testing AD
        1. Problem
        2. Solution
        3. Discussion
        4. See Also
    21. A. Tool List
      1. ACL Diagnostics Command (acldiag.exe)
      2. Active Directory Domains and Trusts Snap-in (domain.msc)
      3. Active Directory Installation Wizard (dcpromo.exe)
      4. Active Directory Load Balancer Command (adlb.exe)
      5. Active Directory Schema Snap-in (schmmgmt.msc)
      6. Active Directory Sites and Services (dssite.msc)
      7. Active Directory Users and Computers Snap-in (dsa.msc)
      8. AD Prep Utility (adprep.exe)
      9. ADSI Edit (adsiedit.msc)
      10. Audit Policy Command (auditpol.exe)
      11. Backup Wizard (ntbackup.exe)
      12. CSVDE Command (csvde.exe)
      13. Default Domain Controller Security Policy Snap-in (dcpol.msc)
      14. Default Domain Security Policy Snap-in (dompol.msc)
      15. Default Group Policy Restore Command (dcgpofix.exe)
      16. DNS Snap-in (dnsmgmt.msc)
      17. DNSCmd Command (dnscmd.exe)
      18. Domain Controller Diagnosis Command (dcdiag.exe)
      19. DS ACL Command (dsacls.exe)
      20. DS Add Command (dsadd.exe)
      21. DS Get Command (dsget.exe)
      22. DS Modify Command (dsmodify.exe)
      23. DS Move Command (dsmove.exe)
      24. DS Query Command (dsquery.exe)
      25. DS Remove Command (dsrm.exe)
      26. Enumprop Command (enumprop.exe)
      27. Group Policy Management Console (gpmc.msc)
      28. Group Policy Object Editor (gpedit.msc)
      29. Group Policy Verification Tool (gpotool.exe)
      30. Group Policy Results Command (gpresult.exe)
      31. Group Policy Refresh Command (gpupdate.exe)
      32. IP Configuration (ipconfig.exe)
      33. Kerberos List (klist.exe)
      34. Kerberos Tray (kerbtray.exe)
      35. LDIFDE Command (ldifde.exe)
      36. LDP (ldp.exe)
      37. Move Tree Command (movetree.exe)
      38. Netdom Command (netdom.exe)
      39. Network Connectivity Tester (netdiag.exe)
      40. NLTest Command (nltest.exe)
      41. Nslookup Command (nslookup.exe)
      42. NTDS Util Command (ntdsutil.exe)
      43. OID Generator Command (oidgen.exe)
      44. Redirect Default Computers Command (redircmp.exe)
      45. Redirect Default Users Command (redirusr.exe)
      46. Reg Command (reg.exe)
      47. Registry Editor (regedit.exe)
      48. Rename Domain Command (rendom.exe)
      49. Replication Diagnostics Command (repadmin.exe)
      50. Replication Monitor (replmon.exe)
      51. Resultant Set of Policy Snap-in (rsop.msc)
      52. SecEdit Command (secedit.exe)
      53. Time Service (w32tm.exe)
      54. Unlock (unlock.exe)
      55. UUID Generator Command (uuidgen.exe)
      56. WinNT32 Command (winnt32.exe)
    22. Index
    23. Colophon

Product information

  • Title: Active Directory Cookbook
  • Author(s):
  • Release date: September 2003
  • Publisher(s): O'Reilly Media, Inc.
  • ISBN: 9780596004644