Windows Server 2003 Security: A Technical Reference

Managing Computers and Users Using Active Directory

Unmanaged users and computers put the organization at risk. Managed users can be provided just the privileges and permissions required to do their jobs and prevented from inadvertently compromising security. Managed computers can be hardened against attack and provide platforms on which the integrity of data can be guaranteed to a reasonable degree. In addition, managed users and computers require less manpower to maintain and secure. Active Directory is designed to provide a sound management base, and tools are available to automate the process.

Users and computer accounts are created and placed within a specific Active Directory container and can be managed via Group Policy, Windows Management ...