book

Active Directory Cookbook, 3rd Edition

by Laura E. Hunter, Robbie Allen

December 2008

Intermediate to advanced

1087 pages

28h 18m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Active Directory Cookbook
A Note Regarding Supplemental Files
Preface
1. Who Should Read This Book?2. What’s in This Book?3. Conventions Used in This Book4. Using Code ExamplesSafari® Books Online5. We’d Like Your Feedback!6. AcknowledgmentsRobbie Allen, from the First EditionLaura E. Hunter, from the Second EditionLaura E. Hunter, from the Third Edition
1. Getting Started
1.1. Approach to the BookAt Least Three Ways to Do It!Windows 2000, Windows Server 2003, R2, and Windows Server 20081.2. Where to Find the ToolsRunning Tools with Alternate CredentialsTargeting Specific Domain Controllers1.3. Getting Familiar with LDIF1.4. Programming NotesServerless BindsRunning Scripts Using Alternate CredentialsDefining Variables and Error Checking1.5. Replaceable Text1.6. Where to Find More InformationCommand-Line ToolsMicrosoft Knowledge BaseMicrosoft Developers NetworkWebsitesNewsgroupsMailing ListsBooks and Magazines
2. Forests, Domains, and Trusts
2.0. IntroductionThe Anatomy of a ForestThe Anatomy of a DomainThe Anatomy of a Trust2.1. Creating a ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also2.2. Removing a ForestProblemSolutionDiscussionSee Also2.3. Creating a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also2.4. Removing a DomainProblemSolutionDiscussionSee Also2.5. Removing an Orphaned DomainProblemSolutionUsing a command-line interfaceDiscussionSee Also2.6. Finding the Domains in a ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also2.7. Finding the NetBIOS Name of a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion2.8. Renaming a DomainProblemSolutionDiscussionSee Also2.9. Raising the Domain Mode to Windows 2000 Native ModeProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also2.10. Viewing and Raising the Functional Level of a Windows Server 2003 or 2008 DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also2.11. Raising the Functional Level of a Windows Server 2003 or 2008 ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also2.12. Using AdPrep to Prepare a Domain or Forest for Windows Server 2003 or 2008ProblemSolutionDiscussionSee Also2.13. Determining Whether AdPrep Has CompletedProblemSolutionDiscussionSee Also2.14. Checking If a Windows Domain Controller Can Be Upgraded to Windows Server 2003 or 2008ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also2.15. Creating an External TrustProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionUsing PowerShellSee Also2.16. Creating a Transitive Trust Between Two AD ForestsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussion2.17. Creating a Shortcut Trust Between Two AD DomainsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussion2.18. Creating a Trust to a Kerberos RealmProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also2.19. Viewing the Trusts for a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also2.20. Verifying a TrustProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also2.21. Resetting a TrustProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing PowerShellSee Also2.22. Removing a TrustProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion2.23. Enabling SID Filtering for a TrustProblemSolutionUsing a command-line interfaceUsing PowerShellDiscussionUsing PowerShellSee Also2.24. Enabling Quarantine for a TrustProblemSolutionUsing a command-line interfaceDiscussion2.25. Managing Selective Authentication for a TrustProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussion2.26. Finding Duplicate SIDs in a DomainProblemSolutionUsing a command-line interfaceDiscussionSee Also2.27. Adding Additional Fields to Active Directory Users and ComputersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing VBScriptSee Also
3. Domain Controllers, Global Catalogs, and FSMOs
3.0. IntroductionThe Anatomy of a Domain Controller3.1. Promoting a Domain ControllerProblemSolutionDiscussionSee Also3.2. Promoting a Read-Only Domain ControllerProblemSolutionDiscussionSee Also3.3. Performing a Two-Stage RODC InstallationProblemSolutionDiscussionSee Also3.4. Modifying the Password Replication PolicyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing VBScriptSee Also3.5. Promoting a Windows Server 2003 Domain Controller from MediaProblemSolutionDiscussionSee Also3.6. Promoting a Windows Server 2008 Domain Controller from MediaProblemSolutionDiscussionSee Also3.7. Demoting a Domain ControllerProblemSolutionUsing a graphical user interfaceDiscussionSee Also3.8. Automating the Promotion or Demotion of a Domain ControllerProblemSolutionDiscussionSee Also3.9. Troubleshooting Domain Controller Promotion or Demotion ProblemsProblemSolutionDiscussionSee Also3.10. Verifying the Promotion of a Domain ControllerProblemSolutionUsing a command-line interfaceDiscussionSee Also3.11. Removing an Unsuccessfully Demoted Domain ControllerProblemSolutionDiscussionSee Also3.12. Renaming a Domain ControllerProblemSolutionWindows 2000 Active DirectoryWindows Server 2003 Active DirectoryDiscussionSee Also3.13. Finding the Domain Controllers for a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also3.14. Finding the Closest Domain ControllerProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also3.15. Finding a Domain Controller’s SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also3.16. Moving a Domain Controller to a Different SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also3.17. Finding the Services a Domain Controller Is AdvertisingProblemSolutionDiscussionSee Also3.18. Restoring a Deleted Domain ControllerProblemUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also3.19. Resetting the TCP/IP Stack on a Domain ControllerProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also3.20. Configuring a Domain Controller to Use an External Time SourceProblemSolutionUsing the RegistryUsing VBScriptDiscussionSee Also3.21. Finding the Number of Logon Attempts Made Against a Domain ControllerProblemSolutionDiscussionSee Also3.22. Enabling the /3GB Switch to Increase the LSASS CacheProblemSolutionUsing a command-line interfaceDiscussionSee Also3.23. Cleaning Up Distributed Link Tracking ObjectsProblemSolutionDiscussionSee Also3.24. Enabling and Disabling the Global CatalogProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also3.25. Determining Whether Global Catalog Promotion Is CompleteProblemSolutionUsing the RegistryUsing a command-line interfaceUsing PowerShellDiscussionSee Also3.26. Finding the Global Catalog Servers in a ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also3.27. Finding the Domain Controllers or Global Catalog Servers in a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion3.28. Finding Domain Controllers and Global Catalogs via DNSProblemSolutionDiscussionSee Also3.29. Changing the Preference for a Domain ControllerProblemSolutionDiscussionSee Also3.30. Disabling the Global Catalog Requirement During a Domain LoginProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also3.31. Disabling the Global Catalog Requirement for Windows Server 2003 or Windows Server 2008ProblemSolution3.32. Finding the FSMO Role HoldersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also3.33. Transferring a FSMO RoleProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also3.34. Seizing a FSMO RoleProblemSolutionUsing a command-line interfaceUsing VBScriptDiscussionSee Also3.35. Finding the PDC Emulator FSMO Role Owner via DNSProblemSolutionUsing a command-line interfaceDiscussionSee Also3.36. Finding the PDC Emulator FSMO Role Owner via WINSProblemSolutionUsing a command-line interfaceDiscussionSee Also
4. Searching and Manipulating Objects
4.0. IntroductionThe Anatomy of an Object4.1. Viewing the RootDSEProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also4.2. Viewing the Attributes of an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also4.3. Counting Objects in Active DirectoryProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShell4.4. Using LDAP ControlsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.5. Using a Fast or Concurrent BindProblemSolutionUsing a graphical user interfaceDiscussionSee Also4.6. Connecting to an Object GUIDProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.7. Connecting to a Well-Known GUIDProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.8. Searching for Objects in a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also4.9. Searching the Global CatalogProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also4.10. Searching for a Large Number of ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also4.11. Searching with an Attribute-Scoped QueryProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.12. Searching with a Bitwise FilterProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also4.13. Creating an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also4.14. Modifying an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also4.15. Modifying a Bit Flag AttributeProblemSolutionUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also4.16. Dynamically Linking an Auxiliary ClassProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.17. Creating a Dynamic ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.18. Refreshing a Dynamic ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.19. Modifying the Default TTL Settings for Dynamic ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing a command-line interfaceUsing VBScriptSee Also4.20. Moving an Object to a Different OU or ContainerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also4.21. Moving an Object to a Different DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also4.22. Referencing an External DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.23. Renaming an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also4.24. Deleting an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also4.25. Deleting a Container That Has Child ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also4.26. Viewing the Created and Last Modified Timestamp of an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also4.27. Modifying the Default LDAP Query PolicyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also4.28. Exporting Objects to an LDIF FileProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing a command-line interfaceSee Also4.29. Importing Objects Using an LDIF FileProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also4.30. Exporting Objects to a CSV FileProblemSolutionUsing a command-line interfaceUsing PowerShellDiscussionUsing a command-line interfaceSee Also4.31. Importing Objects Using a CSV FileProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also
5. Organizational Units
5.0. IntroductionThe Anatomy of an Organizational Unit5.1. Creating an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also5.2. Enumerating the OUs in a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScript5.3. Finding an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also5.4. Enumerating the Objects in an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also5.5. Deleting the Objects in an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also5.6. Deleting an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also5.7. Moving the Objects in an OU to a Different OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also5.8. Moving an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also5.9. Renaming an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also5.10. Modifying an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also5.11. Determining Approximately How Many Child Objects an OU HasProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also5.12. Delegating Control of an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also5.13. Assigning or Removing a Manager for an OUProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also5.14. Linking a GPO to an OUProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also5.15. Protecting an OU Against Accidental DeletionProblemSolutionUsing a graphical user interface (Windows Server 2008 only)Using a command-line interface (all versions)Using PowerShell (all versions)Discussion
6. Users
6.0. IntroductionThe Anatomy of a User6.1. Modifying the Default Display Name Used When Creating Users in ADUCProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.2. Creating a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also6.3. Creating a Large Number of UsersProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceSee Also6.4. Creating an inetOrgPerson UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.5. Converting a user Object to an inetOrgPerson Object (or Vice Versa)ProblemUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.6. Modifying an Attribute for Several Users at OnceProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.7. Deleting a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also6.8. Setting a User’s Profile AttributesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.9. Moving a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.10. Redirecting Users to an Alternative OUProblemUsing a graphical user interfaceUsing the command-line interfaceDiscussionSee Also6.11. Renaming a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.12. Copying a UserProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceSee Also6.13. Finding Locked-Out UsersProblemSolutionUsing a command-line interfaceUsing PowerShellDiscussionSee Also6.14. Unlocking a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.15. Troubleshooting Account Lockout ProblemsProblemSolutionUsing a graphical user interfaceDiscussionSee Also6.16. Viewing the Domain-Wide Account Lockout and Password PoliciesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also6.17. Applying a Fine-Grained Password Policy to a User ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also6.18. Viewing the Fine-Grained Password Policy That Is in Effect for a User AccountProblemSolutionUsing a graphical user interfaceUsing a command promptUsing PowerShellDiscussionSee Also6.19. Enabling and Disabling a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.20. Finding Disabled UsersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.21. Viewing a User’s Group MembershipProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also6.22. Removing All Group Memberships from a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also6.23. Changing a User’s Primary GroupProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.24. Copying a User’s Group Membership to Another UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.25. Setting a User’s PasswordProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.26. Preventing a User from Changing a PasswordProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also6.27. Requiring a User to Change a Password at Next LogonProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion6.28. Preventing a User’s Password from ExpiringProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also6.29. Finding Users Whose Passwords Are About to ExpireProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also6.30. Viewing the RODCs That Have Cached a User’s PasswordProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.31. Setting a User’s Account Options (userAccountControl)ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShell$objUser.SetInfo()DiscussionSee Also6.32. Setting a User’s Account to ExpireProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also6.33. Determining a User’s Last Logon TimeProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also6.34. Finding Users Who Have Not Logged On RecentlyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also6.35. Viewing and Modifying a User’s Permitted Logon HoursProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScript and PowerShellSee Also6.36. Viewing a User’s Managed ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion6.37. Creating a UPN Suffix for a ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also6.38. Restoring a Deleted UserProblemSolutionUsing a graphical user interfaceUsing a command line interfaceDiscussionSee Also6.39. Protecting a User Against Accidental DeletionProblemSolutionUsing a graphical user interface (Windows Server 2008 only)Using a command-line interface (all versions)Using PowerShell (all versions)Discussion
7. Groups
7.0. IntroductionThe Anatomy of a Group7.1. Creating a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.2. Viewing the Permissions of a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also7.3. Viewing the Direct Members of a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.4. Viewing the Nested Members of a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.5. Adding and Removing Members of a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.6. Moving a Group Within a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also7.7. Moving a Group to Another DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussion7.8. Changing the Scope or Type of a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.9. Modifying Group AttributesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also7.10. Creating a Dynamic GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also7.11. Delegating Control for Managing Membership of a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.12. Resolving a Primary Group IDProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also7.13. Enabling Universal Group Membership CachingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also7.14. Restoring a Deleted GroupProblemSolutionUsing a graphical user interfaceUsing a command line interfaceDiscussionSee Also7.15. Protecting a Group Against Accidental DeletionProblemSolutionUsing a graphical user interface (Windows Server 2008 only)Using a command-line interface (all versions)Using PowerShell (all versions)Discussion7.16. Applying a Fine-Grained Password Policy to a Group ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also

8. Computer Objects
8.0. Introduction8.1. The Anatomy of a computer Object8.2. Creating a ComputerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also8.3. Creating a Computer for a Specific User or GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also8.4. Deleting a ComputerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShell8.5. Joining a Computer to a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also8.6. Moving a Computer Within the Same DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also8.7. Moving a Computer to a New DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also8.8. Renaming a ComputerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also8.9. Adding or Removing a Computer Account from a GroupProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also8.10. Testing the Secure Channel for a ComputerProblemSolutionUsing a command-line interfaceDiscussionSee Also8.11. Resetting a Computer AccountProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also8.12. Finding Inactive or Unused ComputersProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also8.13. Changing the Maximum Number of Computers a User Can Join to the DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also8.14. Modifying the Attributes of a computer ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also8.15. Finding Computers with a Particular OSProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion8.16. Binding to the Default Container for ComputersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also8.17. Changing the Default Container for ComputersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also8.18. Listing All the Computer Accounts in a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScript and PowerShellSee Also8.19. Identifying a Computer RoleProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing a command-line interfaceUsing VBScript8.20. Protecting a Computer Against Accidental DeletionProblemSolutionUsing a graphical user interface (Windows Server 2008 only)Using a command-line interface (all versions)Using PowerShell (all versions)Discussion8.21. Viewing the RODCs That Have Cached a Computer’s PasswordProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also
9. Group Policy Objects
9.0. IntroductionManaging GPOs9.1. Finding the GPOs in a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.2. Creating a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also9.3. Copying a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing VBScriptUsing PowerShellSee Also9.4. Deleting a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.5. Viewing the Settings of a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.6. Modifying the Settings of a GPOProblemSolutionUsing a graphical user interfaceUsing PowerShellUsing a command-line interface, VBScript, or PowerShellDiscussionSee Also9.7. Importing Settings into a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.8. Creating a Migration TableProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also9.9. Creating Custom Group Policy SettingsProblemSolutionDiscussionSee Also9.10. Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPOProblemSolutionUsing a graphical user interfaceDiscussion9.11. Installing Applications with a GPOProblemSolutionUsing a graphical user interfaceDiscussion9.12. Disabling the User or Computer Settings in a GPOProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also9.13. Listing the Links for a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.14. Creating a GPO Link to an OUProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.15. Blocking Inheritance of GPOs on an OUProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also9.16. Enforcing the Settings of a GPO LinkProblemSolutionUsing a graphical user interfaceUsing VBScriptDiscussionUsing VBScriptSee Also9.17. Applying a Security Filter to a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.18. Delegating Administration of GPOsProblemSolutionUsing a graphical user interfaceDiscussionSee Also9.19. Importing a Security TemplateProblemSolutionUsing a graphical user interfaceDiscussionSee Also9.20. Creating a WMI FilterProblemSolutionUsing a graphical user interfaceUsing VBScriptDiscussionSee Also9.21. Applying a WMI Filter to a GPOProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.22. Configuring Loopback Processing for a GPOProblemSolutionUsing a graphical user interfaceDiscussionSee Also9.23. Backing Up a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptUsing PowerShellSee Also9.24. Restoring a GPOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also9.25. Simulating the RSoPProblemSolutionUsing a graphical user interfaceDiscussionSee Also9.26. Viewing the RSoPProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also9.27. Refreshing GPO Settings on a ComputerProblemSolutionUsing a command-line interfaceUsing PowerShellDiscussionUsing PowerShellSee Also9.28. Restoring a Default GPOProblemSolutionUsing a command-line interfaceDiscussion9.29. Creating a Fine-Grained Password PolicyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionUsing a command-line interfaceSee Also9.30. Editing a Fine-Grained Password PolicyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also9.31. Viewing the Effective PSO for a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also
10. Schema
10.0. IntroductionThe Anatomy of Schema Objects10.1. Registering the Active Directory Schema MMC Snap-inProblemSolutionDiscussionSee Also10.2. Enabling Schema UpdatesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also10.3. Generating an OID to Use for a New Class or AttributeProblemSolutionDiscussionSee Also10.4. Extending the SchemaProblemSolutionDiscussionSee Also10.5. Preparing the Schema for an Active Directory UpgradeProblemSolutionFrom a graphical user interfaceDiscussionSee Also10.6. Documenting Schema ExtensionsProblemSolutionDiscussionSee Also10.7. Adding a New AttributeProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.8. Viewing an AttributeProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.9. Adding a New ClassProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.10. Viewing a ClassProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.11. Indexing an AttributeProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.12. Modifying the Attributes That Are Copied When Duplicating a UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.13. Adding Custom Information to ADUCProblemSolutionUsing VBScriptDiscussionSee Also10.14. Modifying the Attributes Included with ANRProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.15. Modifying the Set of Attributes Stored on a Global CatalogProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.16. Finding Nonreplicated and Constructed AttributesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.17. Finding the Linked AttributesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion10.18. Finding the Structural, Auxiliary, Abstract, and 88 ClassesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion10.19. Finding the Mandatory and Optional Attributes of a ClassProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion10.20. Modifying the Default Security of a ClassProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceSee Also10.21. Managing the Confidentiality BitProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.22. Adding an Attribute to the Read-Only Filtered Attribute Set (RO-FAS)ProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.23. Deactivating Classes and AttributesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.24. Redefining Classes and AttributesProblemSolutionDiscussionSee Also10.25. Reloading the Schema CacheProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also10.26. Managing the Schema Master FSMOProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also
11. Site Topology
11.0. IntroductionThe Anatomy of Site Topology Objects11.1. Creating a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.2. Listing Sites in a ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion11.3. Renaming a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.4. Deleting a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.5. Delegating Control of a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceSee Also11.6. Configuring Universal Group Caching for a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.7. Creating a SubnetProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.8. Listing the SubnetsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.9. Finding Missing SubnetsProblemSolutionSee Also11.10. Deleting a SubnetProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also11.11. Changing a Subnet’s Site AssignmentProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.12. Creating a Site LinkProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also11.13. Finding the Site Links for a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion11.14. Modifying the Sites That Are Part of a Site LinkProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also11.15. Modifying the Cost for a Site LinkProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion11.16. Enabling Change Notification for a Site LinkProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.17. Modifying Replication SchedulesProblemSolutionUsing a command-line interfaceUsing VBScriptDiscussionUsing VBScriptSee Also11.18. Disabling Site Link Transitivity or Site Link SchedulesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.19. Creating a Site Link BridgeProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.20. Finding the Bridgehead Servers for a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also11.21. Setting a Preferred Bridgehead Server for a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.22. Listing the ServersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion11.23. Moving a Domain Controller to a Different SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.24. Configuring a Domain Controller to Cover Multiple SitesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also11.25. Viewing the Site Coverage for a Domain ControllerProblemSolutionUsing a command-line interfaceUsing VBScriptDiscussionSee Also11.26. Disabling Automatic Site Coverage for a Domain ControllerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.27. Finding the Site for a ClientProblemSolutionUsing a command-line interfaceUsing VBScriptDiscussionSee Also11.28. Forcing a Host into a Particular SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.29. Creating a Connection ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also11.30. Listing the connection Objects for a ServerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.31. Load-Balancing connection ObjectsProblemSolutionUsing a command-line interfaceDiscussion11.32. Finding the ISTG for a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also11.33. Transferring the ISTG to Another ServerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.34. Triggering the KCCProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also11.35. Determining Whether the KCC Is Completing SuccessfullyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussion11.36. Disabling the KCC for a SiteProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also11.37. Changing the Interval at Which the KCC RunsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also
12. Replication
12.0. Introduction12.1. Determining Whether Two Domain Controllers Are in SyncProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.2. Viewing the Replication Status of Several Domain ControllersProblemSolutionUsing a command-line interfaceDiscussion12.3. Viewing Unreplicated Changes Between Two Domain ControllersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also12.4. Forcing Replication from One Domain Controller to AnotherProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also12.5. Enabling and Disabling ReplicationProblemSolutionUsing a command-line interfaceDiscussionSee Also12.6. Changing the Intra-Site Replication IntervalProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.7. Changing the Intra-Site Notification DelayProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.8. Changing the Inter-Site Replication IntervalProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.9. Disabling Inter-Site Compression of Replication TrafficProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.10. Checking for Potential Replication ProblemsProblemSolutionDiscussionSee Also12.11. Enabling Enhanced Logging of Replication EventsProblemSolutionSee Also12.12. Enabling Strict or Loose Replication ConsistencyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.13. Finding Conflict ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.14. Finding Orphaned ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.15. Listing the Replication Partners for a DCProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also12.16. Viewing Object MetadataProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also
13. DNS and DHCP
13.0. IntroductionThe Anatomy of a DNS Object13.1. Creating a Forward Lookup ZoneProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also13.2. Creating a Reverse Lookup ZoneProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.3. Viewing a Server’s ZonesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also13.4. Converting a Zone to an AD-Integrated ZoneProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also13.5. Moving AD-Integrated Zones into an Application PartitionProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also13.6. Configuring Zone TransfersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.7. Configuring ForwardingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.8. Delegating Control of an Active Directory Integrated ZoneProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.9. Creating and Deleting Resource RecordsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also13.10. Querying Resource RecordsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also13.11. Modifying the DNS Server ConfigurationProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.12. Scavenging Old Resource RecordsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion13.13. Clearing the DNS CacheProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion13.14. Verifying That a Domain Controller Can Register Its Resource RecordsProblemSolutionUsing a command-line interfaceDiscussionSee Also13.15. Enabling DNS Server Debug LoggingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.16. Registering a Domain Controller’s Resource RecordsProblemSolutionUsing a command-line interfaceDiscussionSee Also13.17. Deregistering a Domain Controller’s Resource RecordsProblemSolutionUsing a command-line interfaceDiscussion13.18. Preventing a Domain Controller from Dynamically Registering All Resource RecordsProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.19. Preventing a Domain Controller from Dynamically Registering Certain Resource RecordsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.20. Allowing Computers to Use a Different Domain Suffix Than Their AD DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also13.21. Authorizing a DHCP ServerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionUsing a graphical user interfaceUsing a command-line interfaceSee Also13.22. Locating Unauthorized DHCP ServersProblemSolutionUsing a command-line interfaceDiscussionSee Also13.23. Restricting DHCP AdministratorsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also
14. Security and Authentication
14.0. Introduction14.1. Enabling SSL/TLSProblemSolutionUsing a graphical user interface in Windows 2000 Server and Windows Server 2003Using a graphical user interface in Windows Server 2008DiscussionSee Also14.2. Encrypting LDAP Traffic with SSL, TLS, or SigningProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also14.3. Disabling LDAP Signing or EncryptionProblemSolutionUsing the RegistryUsing PowerShellDiscussionSee Also14.4. Enabling Anonymous LDAP AccessProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionSee Also14.5. Restricting Anonymous Access to Active DirectoryProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also14.6. Using the Delegation of Control WizardProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also14.7. Customizing the Delegation of Control WizardProblemSolutionDiscussionSee Also14.8. Revoking Delegated PermissionsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also14.9. Viewing the ACL for an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also14.10. Customizing the ACL EditorProblemSolutionDiscussionSee Also14.11. Viewing the Effective Permissions on an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also14.12. Configuring Permission InheritanceProblemSolutionUsing a VBScriptUsing VBScriptUsing PowerShellDiscussionSee Also14.13. Changing the ACL of an ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also14.14. Changing the Default ACL for an Object Class in the SchemaProblemSolutionUsing a graphical user interfaceDiscussionSee Also14.15. Comparing the ACL of an Object to the Default Defined in the SchemaProblemSolutionUsing a command-line interfaceDiscussionSee Also14.16. Resetting an Object’s ACL to the Default Defined in the SchemaProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussion14.17. Preventing the LM Hash of a Password from Being StoredProblemSolutionUsing a graphical user interfaceDiscussionSee Also14.18. Enabling Strong Domain AuthenticationProblemSolutionUsing a graphical user interfaceDiscussionSee Also14.19. Enabling List Object Access ModeProblemSolutionUsing a graphical user interfaceUsing VBScriptDiscussionUsing VBScriptSee Also14.20. Modifying the ACL on Administrator AccountsProblemSolutionDiscussionSee Also14.21. Viewing and Purging Your Kerberos TicketsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also14.22. Forcing Kerberos to Use TCPProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also14.23. Modifying Kerberos SettingsProblemSolutionUsing a graphical user interfaceDiscussionSee Also14.24. Viewing Access TokensProblemUsing a command-line interfaceDiscussionSee Also
15. Logging, Monitoring, and Quotas
15.0. IntroductionThe Anatomy of a Quota Object ContainerThe Anatomy of a Quota Object15.1. Enabling Extended dcpromo LoggingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also15.2. Enabling Diagnostics LoggingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also15.3. Enabling NetLogon LoggingProblemSolutionUsing a command-line interfaceDiscussionSee Also15.4. Enabling GPO Client LoggingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also15.5. Enabling Kerberos LoggingProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also15.6. Viewing DNS Server Performance StatisticsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also15.7. Monitoring the File Replication ServiceProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also15.8. Monitoring the Windows Time ServiceProblemSolutionUsing a command-line interfaceDiscussionSee Also15.9. Enabling Inefficient and Expensive LDAP Query LoggingProblemSolutionDiscussionSee Also15.10. Using the STATS Control to View LDAP Query StatisticsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also15.11. Monitoring the Performance of ADProblemSolutionUsing a graphical user interfaceDiscussion15.12. Using Perfmon Trace Logs to Monitor ADProblemSolutionUsing Windows 2000 and Windows Server 2003Using Windows Server 2008DiscussionSee Also15.13. Creating an Administrative AlertProblemSolutionUsing Windows 2000 or Windows Server 2003Using Windows Server 2008DiscussionSee Also15.14. Emailing an Administrator on a Performance AlertProblemSolutionUsing VBScriptUsing PowerShellDiscussionUsing VBScriptSee Also15.15. Enabling Auditing of Directory AccessProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also15.16. Enabling Auditing of Registry KeysProblemUsing a graphical user interfaceDiscussionSee Also15.17. Creating a QuotaProblemSolutionUsing a command-line interfaceDiscussionSee Also15.18. Finding the Quotas Assigned to a Security PrincipalProblemSolutionUsing a command-line interfaceDiscussionSee Also15.19. Changing How Tombstone Objects Count Against Quota UsageProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also15.20. Setting the Default Quota for All Security Principals in a PartitionProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussion15.21. Finding the Quota Usage for a Security PrincipalProblemSolutionDiscussionSee Also
16. Backup, Recovery, DIT Maintenance, and Deleted Objects
16.0. IntroductionThe Anatomy of a Deleted Object16.1. Backing Up Active Directory in Windows 2000 and Windows Server 2003ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also16.2. Backing Up Active Directory in Windows Server 2008ProblemSolutionUsing a command-line interfaceDiscussionSee Also16.3. Creating an Active Directory SnapshotProblemSolutionUsing a command-line interfaceDiscussionSee Also16.4. Mounting an Active Directory SnapshotProblemSolutionUsing a command-line interfaceDiscussionSee Also16.5. Accessing Active Directory Snapshot DataProblemSolutionUsing VBScriptUsing PowerShellDiscussionSee Also16.6. Restarting a Domain Controller in Directory Services Restore ModeProblemSolutionDiscussionSee Also16.7. Resetting the Directory Service Restore Mode Administrator PasswordProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also16.8. Performing a Nonauthoritative RestoreProblemSolutionUsing a graphical user interface (for Windows 2000 and Windows Server 2003)Using a command-line interface (for Windows Server 2008)DiscussionSee Also16.9. Performing an Authoritative Restore of an Object or SubtreeProblemSolutionDiscussionSee Also16.10. Performing a Complete Authoritative RestoreProblemSolutionDiscussionSee Also16.11. Checking the DIT File’s IntegrityProblemSolutionUsing a command-line interfaceDiscussionSee Also16.12. Moving the DIT FilesProblemSolutionUsing a command-line interfaceDiscussionSee Also16.13. Repairing or Recovering the DITProblemSolutionUsing a command-line interfaceDiscussionSee Also16.14. Performing an Online Defrag ManuallyProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also16.15. Performing a Database RecoveryProblemSolutionUsing a command-line interfaceDiscussionSee Also16.16. Creating a Reserve FileProblemSolutionUsing a command-line interfaceDiscussionSee Also16.17. Determining How Much Whitespace Is in the DITProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also16.18. Performing an Offline Defrag to Reclaim SpaceProblemSolutionUsing a command-line interfaceDiscussionSee Also16.19. Changing the Garbage Collection IntervalProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also16.20. Logging the Number of Expired Tombstone ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also16.21. Determining the Size of the Active Directory DatabaseProblemSolutionUsing a command-line interface in Windows Server 2003Using a command-line interface in Windows Server 2008DiscussionSee Also16.22. Searching for Deleted ObjectsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also16.23. Undeleting a Single ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also16.24. Undeleting a Container ObjectProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also16.25. Modifying the Tombstone Lifetime for a DomainProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also
17. Application Partitions
17.0. IntroductionThe Anatomy of an Application Partition17.1. Creating and Deleting an Application PartitionProblemSolutionUsing a command-line interfaceDiscussionSee Also17.2. Finding the Application Partitions in a ForestProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also17.3. Adding or Removing a Replica Server for an Application PartitionProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing PowerShellSee Also17.4. Finding the Replica Servers for an Application PartitionProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also17.5. Finding the Application Partitions Hosted by a ServerProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also17.6. Verifying Application Partitions Are Instantiated on a Server CorrectlyProblemSolutionUsing a command-line interfaceDiscussionSee Also17.7. Setting the Replication Notification Delay for an Application PartitionProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also17.8. Setting the Reference Domain for an Application PartitionProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also17.9. Delegating Control of Managing an Application PartitionProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also
18. Active Directory Application Mode and Active Directory Lightweight Directory Service
18.0. Introduction18.1. Installing ADAM/AD LDSProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also18.2. Creating a New ADAM/AD LDS InstanceProblemSolutionUsing a graphical user interfaceUsing a command-line interface on all versions of ADAM and AD LDSDiscussionSee Also18.3. Creating a New Replica of an ADAM/AD LDS Configuration SetProblemSolutionUsing a graphical user interfaceUsing a command-line interface on all versionsDiscussionSee Also18.4. Stopping and Starting an ADAM/AD LDS InstanceProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.5. Changing the Ports Used by an ADAM/AD LDS InstanceProblemSolutionDiscussionSee Also18.6. Listing the ADAM Instances Installed on a ComputerProblemSolutionUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.7. Extending the ADAM/AD LDS SchemaProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also18.8. Managing ADAM/AD LDS Application PartitionsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionSee Also18.9. Managing ADAM/AD LDS Organizational UnitsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceSee Also18.10. Managing ADAM UsersProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.11. Changing the Password for an ADAM or AD LDS UserProblemSolutionUsing a graphical user interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceSee Also18.12. Enabling and Disabling an ADAM UserProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.13. Creating ADAM or AD LDS GroupsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.14. Managing ADAM or AD LDS Group MembershipsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptNextUsing PowerShellDiscussionUsing a command-line interfaceSee Also18.15. Viewing and Modifying ADAM Object AttributesProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.16. Importing Data into an ADAM or AD LDS InstanceProblemSolutionUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also18.17. Configuring Intra-site ReplicationProblemUsing a graphical user interfaceDiscussionSee Also18.18. Forcing ADAM/AD LDS ReplicationProblemSolutionUsing a command-line interfaceDiscussionSee Also18.19. Managing AD LDS Replication AuthenticationProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionSee Also18.20. Managing ADAM/AD LDS PermissionsProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionUsing a command-line interfaceSee Also18.21. Enabling Auditing of AD LDS AccessProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also
19. Active Directory Federation Services
19.0. IntroductionUsing a Graphical User Interface19.1. Installing AD FS Prerequisites for Windows Server 2003 R2ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also19.2. Installing AD FS Prerequisites for Windows Server 2008ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also19.3. Installing the Federation Service in Windows Server 2003 R2ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also19.4. Installing the Federation Service on Windows Server 2008ProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also19.5. Configuring an Active Directory Account StoreProblemSolutionUsing a graphical user interfaceDiscussionSee Also19.6. Configuring an ADAM or AD LDS Account StoreProblemSolutionUsing a graphical user interfaceDiscussionSee Also19.7. Creating Organizational ClaimsProblemSolutionUsing a graphical user interfaceDiscussionSee Also19.8. Creating an Account PartnerProblemSolutionUsing a graphical user interfaceDiscussionSee Also19.9. Configuring a Resource PartnerProblemSolutionUsing a graphical user interfaceDiscussionSee Also19.10. Configuring an ApplicationProblemSolutionUsing a graphical user interfaceDiscussionSee Also19.11. Configuring a Forest TrustProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also19.12. Configuring an Alternate UPN SuffixProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also19.13. Configuring the AD FS Web AgentProblemSolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also19.14. Enabling Logging for the AD FS Web AgentProblemSolutionUsing the registryUsing VBScriptUsing PowerShellDiscussionSee Also
20. Microsoft Exchange Server 2007 and Exchange Server 2003
20.0. Introduction20.1. Exchange Server and Active Directory20.2. Exchange Server 2007 Architecture20.3. Exchange Administration ToolsExchange 2003 ToolsExchange 2007 ToolsExchange Management ShellExchange Management ConsoleExchange 2007 Scripts FolderThird-Party ToolsProblemExchange 2007 SolutionUsing PowerShellDiscussionSee Also20.4. Preparing Active Directory for ExchangeProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceExchange 2007 SolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also20.5. Installing the First Exchange Server in an OrganizationProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee AlsoExchange 2007 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing PowerShellDiscussionSee Also20.6. Creating Unattended Installation Files for Exchange ServerProblemExchange 2003 SolutionUsing a graphical user interfaceExchange 2007 SolutionUsing a command-line interfaceDiscussionSee Also20.7. Installing Exchange Management ToolsProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionUsing a command-line interfaceExchange 2007 SolutionUsing a graphical user interfaceUsing a command-line interfaceDiscussionSee Also20.8. Stopping and Starting Exchange ServerProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing PowerShellDiscussionSee Also20.9. Mail-Enabling a UserProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee AlsoExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussion20.10. Mail-Disabling a UserProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptSee Also20.11. Mailbox-Enabling a UserProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptSee Also20.12. Deleting a User’s MailboxProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing VBScriptSee Also20.13. Moving a MailboxProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also20.14. Viewing Mailbox Sizes and Message CountsProblemExchange 2003 SolutionUsing a graphical user interfaceUsing VBScriptExchange 2007 SolutionUsing PowerShellDiscussionUsing a graphical user interfaceUsing VBScriptUsing PowerShellSee Also20.15. Configuring Mailbox LimitsProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionSee Also20.16. Creating an Address ListProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also20.17. Creating a Storage GroupProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also20.18. Creating a Mailbox StoreProblemExchange 2003 SolutionUsing a graphical user interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionUsing a command-line interfaceUsing VBScriptUsing PowerShellSee Also20.19. Installing Anti-Spam Agents on the Hub Transport ServersProblemExchange 2007 SolutionUsing the command-line interfaceDiscussionSee Also20.20. Enabling Message TrackingProblemExchange 2003 SolutionUsing a graphical user interfaceUsing a command-line interfaceUsing VBScriptExchange 2007 SolutionUsing a graphical user interfaceUsing PowerShellDiscussionSee Also20.21. Summary
21. Microsoft Identity Lifecycle Manager
21.0. IntroductionFeature Pack Versus Feature PackRequirements for ILMSQL and ILM collocationILM PrimerImporting dataThe connector spaceThe MetaverseProjection and joinsThe many faces of the connectorState-based synchronizationManagement AgentsRun profilesThe Metaverse DesignerAttribute flow rulesThe scenarioSee Also21.1. Creating the HR Database MAProblemSolutionDiscussionSee Also21.2. Creating an Active Directory MAProblemSolutionDiscussionSee Also21.3. Setting Up a Metaverse Object Deletion RuleProblemSolutionDiscussionSee Also21.4. Setting Up Simple Import Attribute Flow—HR Database MAProblemSolutionDiscussionSee Also21.5. Setting Up a Simple Export Attribute Flow to ADProblemSolutionDiscussionSee Also21.6. Defining an Advanced Import Attribute Flow—HR Database MAProblemSolutionDiscussionSee Also21.7. Implementing an Advanced Attribute Flow Rules Extension—HR Database MAProblemSolutionDiscussionSee Also21.8. Setting Up Advanced Export Attribute Flow in Active DirectoryProblemSolutionDiscussionSee Also21.9. Configuring a Run Profile to Do an Initial Load of Data from the HR Database MAProblemSolutionDiscussionSee Also21.10. Loading Initial HR Database Data into ILM Using a Run ProfileProblemSolutionDiscussionSee Also21.11. Configuring a Run Profile to Load the Container Structure from ADProblemSolutionDiscussionSee Also21.12. Loading the Initial AD Container Structure into ILM Using a Run ProfileProblemSolutionDiscussionSee Also21.13. Setting Up the HR Database MA to Project Objects to the MetaverseProblemSolutionDiscussionSee Also21.14. Writing a Rules Extension to Provision User ObjectsProblemSolutionDiscussionSee Also21.15. Creating a Run Profile for ProvisioningProblemSolutionDiscussionSee Also21.16. Executing the Provisioning RuleProblemSolutionDiscussionSee Also21.17. Creating a Run Profile to Export Objects from the ADMA to Active DirectoryProblemSolutionDiscussionSee Also21.18. Exporting Objects to AD Using an Export Run ProfileProblemSolutionDiscussionSee Also21.19. Testing Provisioning and Deprovisioning of User Accounts in ADProblemSolutionDiscussionSee Also21.20. Creating a Run Profile ScriptProblemSolutionDiscussionSee Also21.21. Creating a Controlling ScriptProblemSolutionDiscussionSee Also21.22. Enabling Directory Synchronization from AD to the HR DatabaseProblemSolutionDiscussionSee Also21.23. Configuring a Run Profile to Load the telephoneNumber from ADProblemSolutionDiscussionSee Also21.24. Loading telephoneNumber Changes from AD into ILM Using a Delta Import and Delta Synchronization Run ProfileProblemSolutionDiscussionSee Also21.25. Exporting telephoneNumber Data to the HR DatabaseProblemSolutionDiscussionSee Also21.26. Using the HR Database MA Export Run Profile to Export the Telephone Number to the HR DatabaseProblemSolutionDiscussionSee Also21.27. Searching Data in the Connector SpaceProblemSolutionDiscussionSee Also21.28. Searching Data in the MetaverseProblemSolutionDiscussionSee Also21.29. Deleting Data in the Connector Space and MetaverseProblemSolutionDiscussionSee Also21.30. Extending Object Types to Include a New AttributeProblemSolutionDiscussion21.31. Previewing Changes to the ILM ConfigurationProblemSolutionDiscussionSee Also21.32. Committing Changes to Individual Identities Using the Commit Preview FeatureProblemSolutionDiscussionSee Also21.33. Passing Data Between Rules Extensions Using Transaction PropertiesProblemSolutionDiscussionSee Also21.34. Using a Single Rules Extension to Affect Multiple Attribute FlowsProblemSolutionDiscussion21.35. Flowing a Null Value to a Data SourceProblemSolutionDiscussionSee Also21.36. Contributing a UTCCodedTime Attribute in Active DirectoryProblemSolutionDiscussionSee Also21.37. Importing and Decoding the accountExpires AttributeProblemSolutionDiscussionSee Also21.38. Exporting and Encoding the accountExpires AttributeProblemSolutionDiscussionSee Also
Index
About the Authors
Colophon
Copyright

Overview

When you need practical hands-on support for Active Directory, the updated edition of this extremely popular Cookbook provides quick solutions to more than 300 common (and uncommon) problems you might encounter when deploying, administering, and automating Microsoft's network directory service.

For the third edition, Active Directory expert Laura E. Hunter offers troubleshooting recipes based on valuable input from Windows administrators, in addition to her own experience. You'll find solutions for the Lightweight Directory Access Protocol (LDAP), ADAM (Active Directory Application Mode), multi-master replication, Domain Name System (DNS), Group Policy, the Active Directory Schema, and many other features. The Active Directory Cookbook will help you:

Perform Active Directory tasks from the command line
Use scripting technologies to automate Active Directory tasks
Manage new Active Directory features, such as Read-Only Domain Controllers, fine-grained password policies, and more
Create domains and trusts
Locate users whose passwords are about to expire
Apply a security filter to group policy objects
Check for potential replication problems
Restrict hosts from performing LDAP queries
View DNS server performance statistics

Each recipe includes a discussion explaining how and why the solution works, so you can adapt the problem-solving techniques to similar situations. Active Directory Cookbook is ideal for any IT professional using Windows Server 2008, Exchange 2007, and Identity Lifecycle Manager 2007, including Active Directory administrators looking to automate task-based solutions.

"It is rare for me to visit a customer site and not see a copy of Active Directory Cookbook on a shelf somewhere, which is a testament to its usefulness. The Cookbook takes the pain out of everyday AD tasks by providing concise, clear and relevant recipes. The fact that the recipes are provided using different methods (graphical user interface, command line and scripting) means that the book is suitable for anyone working with AD on a day-to-day basis. The introduction of PowerShell examples in this latest edition will be of particular interest for those looking to transition from VBScript. Laura has also done a great job in extending the Cookbook in this edition to encompass the broad range of changes to AD in Windows Server 2008."

--Tony Murray, Founder of Activedir.org and Directory Services MVP

"If you already understand Active Directory fundamentals and are looking fora quick solution to common Active Directory related tasks, look no further,you have found the book that you need."

--joe Richards, Directory Services MVP

"The Active Directory Cookbook is the real deal... a soup-to-nuts catalog of every administrative task an Active Directory administrator needs to perform. If you administer an Active Directory installation, this is the very first book you have to put on your shelf."

--Gil Kirkpatrick, Chief Architect, Active Directory and Identity Management, Quest Software and Directory Services MVP

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780596156305Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills