book

Windows Server® 2008 Administrator's Pocket Consultant

Name: Windows Server® 2008 Administrator's Pocket Consultant
Author: William Stanek
ISBN: 9780735624375

by William Stanek

December 2007

Intermediate to advanced

672 pages

20h 8m

English

Microsoft Press

Read now

Unlock full access

Windows Server® 2008 Administrator’s Pocket Consultant
Acknowledgments
Introduction
Who Is This Book For?
How This Book Is Organized
Conventions Used in This Book
Other Resources
Support
I. Windows Server 2008 Administration Fundamentals
1. Windows Server 2008 Administration Overview
Windows Server 2008 and Windows Vista
Getting to Know Windows Server 2008

Networking Tools and Protocols
Understanding Networking OptionsWorking with Networking Protocols
Domain Controllers, Member Servers, and Domain Services
Working with Active DirectoryUsing Read-Only Domain ControllersUsing Restartable Active Directory Domain Services
Name-Resolution Services
Using Domain Name System (DNS)Using Windows Internet Name Service (WINS)Using Link-Local Multicast Name Resolution (LLMNR)
Frequently Used Tools
Using Windows PowerShell
2. Deploying Windows Server 2008
Server Roles, Role Services, and Features for Windows Server 2008
Full-Server and Core-Server Installations of Windows Server 2008
Installing Windows Server 2008
Performing a Clean InstallationPerforming an Upgrade InstallationPerforming Additional Administration Tasks During InstallationUsing the Command Line During InstallationForcing Disk Partition Removal During InstallationLoading Disk Device Drivers During InstallationCreating, Formatting, Deleting, and Extending Disk Partitions During InstallationCreating Disk Partitions During InstallationFormatting Disk Partitions During InstallationDeleting Disk Partitions During InstallationExtending Disk Partitions During Installation
Managing Roles, Role Services, and Features
Viewing Configured Roles and Role ServicesAdding or Removing Roles on ServersViewing and Modifying Role Services on ServersAdding or Removing Features in Windows Server 2008
3. Managing Servers Running Windows Server 2008
Performing Initial Configuration Tasks
Managing Your Servers
Managing System Properties
The Computer Name TabThe Hardware TabThe Advanced TabSetting Windows PerformanceSetting Application PerformanceConfiguring Virtual MemoryConfiguring Data Execution PreventionUsing and Configuring DEPUnderstanding DEP CompatibilityConfiguring System and User Environment VariablesCreating an Environment VariableEditing an Environment VariableDeleting an Environment VariableConfiguring System Startup and RecoverySetting Startup OptionsSetting Recovery OptionsThe Remote Tab
Managing Dynamic-Link Libraries
4. Monitoring Processes, Services, and Events
Managing Applications, Processes, and PerformanceTask ManagerManaging ApplicationsRight-Clicking a ListingAdministering ProcessesViewing System ServicesViewing and Managing System PerformanceGraphs on the Performance TabCustomizing and Updating the Graph DisplayViewing and Managing Networking PerformanceViewing and Managing Remote User Sessions
Managing System Services
Starting, Stopping, and Pausing ServicesConfiguring Service StartupConfiguring Service LogonConfiguring Service RecoveryDisabling Unnecessary Services
Event Logging and Viewing
Accessing and Using the Event LogsFiltering Event LogsSetting Event Log OptionsClearing Event LogsArchiving Event LogsArchive Log FormatsCreating Log ArchivesViewing Log Archives
Monitoring Server Performance and Activity
Why Monitor Your Server?Getting Ready to MonitorUsing the Reliability And Performance ConsoleChoosing Counters to MonitorPerformance LoggingCreating and Managing Data Collector SetsCollecting Performance Counter DataCollecting Performance Trace DataCollecting Configuration DataViewing Data Collector ReportsConfiguring Performance Counter Alerts
Tuning System Performance
Monitoring and Tuning Memory UsageMonitoring and Tuning Processor UsageMonitoring and Tuning Disk I/OMonitoring and Tuning Network Bandwidth and Connectivity
5. Automating Administrative Tasks, Policies, and Procedures
Understanding Group PoliciesGroup Policy EssentialsIn What Order Are Multiple Policies Applied?When Are Group Policies Applied?Group Policy Requirements and Version Compatibility
Navigating Group Policy Changes
Managing Local Group Policies
Local Group Policy ObjectsAccessing the Top-Level Local Policy SettingsLGPO SettingsAccessing Administrator, Non-Administrator, and User-Specific Local Group Policy
Managing Site, Domain, and Organizational Unit Policies
Understanding Domain and Default PoliciesUsing the Group Policy Management ConsoleGetting to Know the Policy EditorUsing Administrative Templates to Set PoliciesCreating a Central StoreCreating and Linking GPOsCreating and Using Starter GPOsDelegating Privileges for Group Policy ManagementBlocking, Overriding, and Disabling Policies
Maintaining and Troubleshooting Group Policy
Refreshing Group PolicyConfiguring the Refresh Interval for Domain ControllersModeling Group Policy for Planning PurposesCopying, Pasting, and Importing Policy ObjectsBacking Up and Restoring Policy ObjectsDetermining Current Group Policy Settings and Refresh StatusDisabling an Unused Part of Group PolicyChanging Policy Processing PreferencesConfiguring Slow-Link DetectionRemoving Links and Deleting GPOsTroubleshooting Group PolicyFixing Default Group Policy
Managing Users and Computers with Group Policy
Centrally Managing Special FoldersRedirecting a Special Folder to a Single LocationRedirecting a Special Folder Based on Group MembershipRemoving RedirectionUser and Computer Script ManagementAssigning Computer Startup and Shutdown ScriptsAssigning User Logon and Logoff ScriptsDeploying Software Through Group PolicyGetting to Know Software Installation PolicyDeploying Software Throughout Your OrganizationConfiguring Software Deployment OptionsUpdating Deployed SoftwareUpgrading Deployed SoftwareAutomatically Enrolling Computer and User CertificatesManaging Automatic Updates in Group PolicyConfiguring Automatic UpdatesOptimizing Automatic UpdatesUsing Intranet Update Service Locations
6. Enhancing Computer Security
Using Security TemplatesUsing the Security Templates and Security Configuration And Analysis Snap-insReviewing and Changing Template SettingsChanging Settings for Account, Local, and Event Log PoliciesConfiguring Restricted GroupsEnabling, Disabling, and Configuring System ServicesConfiguring Security Settings for Registry and File System PathsAnalyzing, Reviewing, and Applying Security TemplatesDeploying Security Templates to Multiple Computers
Using the Security Configuration Wizard
Creating Security PoliciesEdit Existing Security PoliciesApply Existing Security PoliciesRoll Back the Last Applied Security PolicyDeploying a Security Policy to Multiple Computers
II. Windows Server 2008 Directory Services Administration
7. Using Active Directory
Introducing Active DirectoryActive Directory and DNSRead-Only Domain Controller DeploymentWindows Server 2008 with Windows NT 4.0
Working with Domain Structures
Understanding DomainsUnderstanding Domain Forests and Domain TreesUnderstanding Organizational UnitsUnderstanding Sites and Subnets
Working with Active Directory Domains
Using Windows 2000 and Later Computers with Active DirectoryWorking with Domain Functional LevelsUsing Windows 2000 Native-Mode OperationsUsing Windows Server 2003 Mode OperationsUsing Windows Server 2008 Mode OperationsRaising Domain and Forest Functionality
Understanding the Directory Structure
Exploring the Data StoreExploring Global CatalogsUniversal Group Membership CachingReplication and Active DirectoryActive Directory and LDAPUnderstanding Operations Master Roles
8. Core Active Directory Administration
Tools for Managing Active DirectoryActive Directory Administration ToolsActive Directory Command-Line ToolsActive Directory Support Tools
Using the Active Directory Users And Computers Tool
Getting Started with Active Directory Users And ComputersConnecting to a Domain ControllerConnecting to a DomainSearching for Accounts and Shared ResourcesManaging Computer AccountsCreating Computer Accounts on a Workstation or ServerCreating Computer Accounts in Active Directory Users And ComputersViewing and Editing Computer Account PropertiesDeleting, Disabling, and Enabling Computer AccountsResetting Locked Computer AccountsMoving Computer AccountsManaging ComputersJoining a Computer to a Domain or Workgroup
Managing Domain Controllers, Roles, and Catalogs
Installing and Demoting Domain ControllersViewing and Transferring Domain-Wide RolesViewing and Transferring the Domain Naming Master RoleViewing and Transferring Schema Master RolesTransferring Roles Using the Command LineSeizing Roles Using the Command LineConfiguring Global CatalogsConfiguring Universal Group Membership Caching
Managing Organizational Units
Creating Organizational UnitsViewing and Editing Organizational Unit PropertiesRenaming and Deleting Organizational UnitsMoving Organizational Units
Managing Sites
Creating SitesCreating SubnetsAssociating Domain Controllers with SitesConfiguring Site LinksConfiguring Site Link Bridges
Maintaining Active Directory
Using ADSI EditExamining Inter-Site Topology
Troubleshooting Active Directory
9. Understanding User and Group Accounts
The Windows Server 2008 Security ModelAuthentication ProtocolsAccess Controls
Differences Between User and Group Accounts
User AccountsLogon Names, Passwords, and Public CertificatesSecurity Identifiers and User AccountsGroup AccountsGroup TypesGroup ScopeSecurity Identifiers and Group AccountsWhen to Use Domain Local, Global, and Universal Groups
Default User Accounts and Groups
Built-in User AccountsPredefined User AccountsThe Administrator AccountThe Guest AccountBuilt-in and Predefined GroupsImplicit Groups and Special Identities
Account Capabilities
PrivilegesLogon RightsBuilt-in Capabilities for Groups in Active Directory
Using Default Group Accounts
Groups Used by AdministratorsImplicit Groups and Identities
10. Creating User and Group Accounts
User Account Setup and OrganizationAccount Naming PoliciesRules for Display NamesRules for Logon NamesNaming SchemesPassword and Account PoliciesUsing Secure PasswordsSetting Account Policies
Configuring Account Policies
Configuring Password PoliciesEnforce Password HistoryMaximum Password AgeMinimum Password AgeMinimum Password LengthPasswords Must Meet Complexity RequirementsStore Password Using Reversible Encryption For All Users In The DomainConfiguring Account Lockout PoliciesAccount Lockout ThresholdAccount Lockout DurationReset Account Lockout Counter AfterConfiguring Kerberos PoliciesEnforce User Logon RestrictionsMaximum LifetimeMaximum Tolerance
Configuring User Rights Policies
Configuring User Rights GloballyConfiguring User Rights Locally
Adding a User Account
Creating Domain User AccountsCreating Local User Accounts
Adding a Group Account
Creating a Global GroupCreating a Local Group and Assigning Members
Handling Global Group Membership
Managing Individual MembershipManaging Multiple Memberships in a GroupSetting the Primary Group for Users and Computers
11. Managing Existing User and Group Accounts
Managing User Contact InformationSetting Contact InformationSearching for Users and Groups In Active Directory
Configuring the User’s Environment Settings
System Environment VariablesLogon ScriptsAssigning Home Directories
Setting Account Options and Restrictions
Managing Logon HoursConfiguring Logon HoursEnforcing Logon HoursSetting Permitted Logon WorkstationsSetting Dial-In and VPN PrivilegesSetting Account Security Options
Managing User Profiles
Local, Roaming, and Mandatory ProfilesCreating Local ProfilesCreating Roaming ProfilesCreating Mandatory ProfilesUsing the System Utility to Manage Local ProfilesCreating a Profile by HandCopying an Existing Profile to a New User AccountCopying or Restoring a ProfileDeleting a Local Profile and Assigning a New OneChanging the Profile Type
Updating User and Group Accounts
Renaming User and Group AccountsCopying Domain User AccountsImporting and Exporting AccountsChanging and Resetting PasswordsEnabling User AccountsAccount DisabledAccount Locked OutAccount Expired
Managing Multiple User Accounts
Setting Profiles for Multiple AccountsSetting Logon Hours for Multiple AccountsSetting Permitted Logon Workstations for Multiple AccountsSetting Logon, Password, and Expiration Properties for Multiple Accounts
Troubleshooting Logon Problems
Viewing and Setting Active Directory Permissions
III. Windows Server 2008 Data Administration
12. Managing File Systems and Drives
Managing the File Services Role
Adding Hard Disk Drives
Physical DrivesPreparing a Physical Drive for UseUsing Disk ManagementRemovable Storage DevicesInstalling and Checking for a New DriveUnderstanding Drive Status
Working with Basic and Dynamic Disks
Using Basic and Dynamic DisksSpecial Considerations for Basic and Dynamic DisksChanging Drive TypesConverting a Basic Disk to a Dynamic DiskChanging a Dynamic Disk Back to a Basic DiskReactivating Dynamic DisksRescanning DisksMoving a Dynamic Disk to a New System
Using Basic Disks and Partitions
Partitioning BasicsCreating Partitions and Simple VolumesFormatting Partitions
Managing Existing Partitions and Drives
Assigning Drive Letters and PathsChanging or Deleting the Volume LabelDeleting Partitions and DrivesConverting a Volume to NTFSThe Convert Utility SyntaxUsing the Convert UtilityResizing Partitions and VolumesRepairing Disk Errors and InconsistenciesRunning Check Disk from the Command LineRunning Check Disk InteractivelyDefragmenting DisksCompressing Drives and DataCompressing DrivesCompressing Directories and FilesExpanding Compressed DrivesExpanding Compressed Directories and FilesEncrypting Drives and DataUnderstanding Encryption and the Encrypting File SystemEncrypting Directories and FilesWorking with Encrypted Files and FoldersConfiguring Recovery PolicyDecrypting Files and Directories
13. Administering Volume Sets and RAID Arrays
Using Volumes and Volume SetsUnderstanding Volume BasicsUnderstanding Volume SetsCreating Volumes and Volume SetsDeleting Volumes and Volume SetsManaging Volumes
Improving Performance and Fault Tolerance with RAIDs
Implementing RAID on Windows Server 2008
Implementing RAID 0: Disk StripingImplementing RAID 1: Disk MirroringCreating a Mirror Set in Disk ManagementMirroring an Existing VolumeImplementing RAID 5: Disk Striping with ParityCreating a Striped Set with Parity in Disk Management
Managing RAIDs and Recovering from Failures
Breaking a Mirrored SetResynchronizing and Repairing a Mirrored SetRepairing a Mirrored System Volume to Enable BootRemoving a Mirrored SetRepairing a Striped Set Without ParityRegenerating a Striped Set with Parity
Managing LUNs on SANs
Configuring Fibre Channel SAN ConnectionsConfiguring iSCSI SAN ConnectionsAdding and Removing TargetsCreating, Extending, Assigning, and Deleting LUNsDefining a Server Cluster in Storage Manager For SANs
14. Managing File Screening and Storage Reporting
Understanding File Screening and Storage Reporting
Managing File Screening and Storage Reporting
Managing Global File Resource SettingsConfiguring E-Mail NotificationsConfiguring Notification LimitsReviewing Reports and Configuring Storage Report ParametersConfiguring Report LocationsConfiguring File Screen AuditingManaging the File Groups to Which Screens Are AppliedManaging File Screen TemplatesCreating File ScreensDefining File Screening ExceptionsScheduling and Generating Storage Reports
15. Data Sharing, Security, and Auditing
Using and Enabling File Sharing
Configuring Standard File Sharing
Viewing Existing SharesCreating Shared FoldersCreating Additional Shares on an Existing Share
Managing Share Permissions
The Different Share PermissionsViewing Share PermissionsConfiguring Share PermissionsModifying Existing Share PermissionsRemoving Share Permissions for Users and Groups
Managing Existing Shares
Understanding Special SharesConnecting to Special SharesViewing User and Computer SessionsManaging Sessions and SharesEnding Individual SessionsEnding All SessionsManaging Open ResourcesClosing an Open FileClosing All Open FilesStopping File and Folder Sharing
Configuring NFS Sharing
Using Shadow Copies
Understanding Shadow CopiesCreating Shadow CopiesRestoring a Shadow CopyReverting an Entire Volume to a Previous Shadow CopyDeleting Shadow CopiesDisabling Shadow Copies
Connecting to Network Drives
Mapping a Network DriveDisconnecting a Network Drive
Object Management, Ownership, and Inheritance
Objects and Object ManagersObject Ownership and TransferObject Inheritance
File and Folder Permissions
Understanding File and Folder PermissionsSetting File and Folder Permissions
Auditing System Resources
Setting Auditing PoliciesAuditing Files and FoldersAuditing the RegistryAuditing Active Directory Objects
Using, Configuring, and Managing NTFS Disk Quotas
Understanding NTFS Disk Quotas and How NTFS Quotas Are UsedSetting NTFS Disk Quota PoliciesEnabling NTFS Disk Quotas on NTFS VolumesViewing Disk Quota EntriesCreating Disk Quota EntriesDeleting Disk Quota EntriesExporting and Importing NTFS Disk Quota SettingsDisabling NTFS Disk Quotas
Using, Configuring, and Managing Resource Manager Disk Quotas
Understanding Resource Manager Disk QuotasManaging Disk Quota TemplatesCreating Resource Manager Disk Quotas
16. Data Backup and Recovery
Creating a Backup and Recovery PlanFiguring Out a Backup PlanThe Basic Types of BackupDifferential and Incremental BackupsSelecting Backup Devices and MediaCommon Backup SolutionsBuying and Using Backup MediaSelecting a Backup Utility
Backing Up Your Data: The Essentials
Installing the Windows Backup and Recovery UtilitiesGetting Started with Windows Server BackupGetting Started with the Backup Command-Line UtilityWorking with Wbadmin CommandsUsing General-Purpose CommandsUsing Backup Management CommandsUsing Recovery Management Commands
Performing Server Backups
Configuring Scheduled BackupsSchedule a backup for C: and D: 9:00 P.M. dailySchedule a backup for all operating system volumes and 6:00 A.M. and 9:00 P.M. dailyModifying or Stopping Scheduled BackupsAdding a new target to scheduled backupsRemoving a target from scheduled backupsModifying the run schedule and included volumesCreating and Scheduling Backups with WbadminPerforming a full backup of the serverBacking up C: and D: to FBacking up all critical volumesBacking up C: and D: to a remote shared folderRunning Manual BackupsRecovering Your Server from Hardware or Startup FailureStarting a Server in Safe ModeResuming After a Failed StartBacking Up and Restoring the System StateRestoring Active DirectoryRestoring the Operating System and the Full SystemRestoring Applications, Non-System Volumes, and Files and Folders
Managing Encryption Recovery Policy
Understanding Encryption Certificates and Recovery PolicyConfiguring the EFS Recovery Policy
Backing Up and Restoring Encrypted Data and Certificates
Backing Up Encryption CertificatesRestoring Encryption Certificates
IV. Windows Server 2008 Network Administration
17. Managing TCP/IP Networking
Navigating Networking in Windows Server 2008
Networking Enhancements in Windows Vista and Windows Server 2008
Installing TCP/IP Networking
Configuring TCP/IP Networking
Configuring Static IP AddressesUsing the PING Command to Check an AddressConfiguring a Static IPv4 or IPv6 AddressConfiguring Dynamic IP Addresses and Alternate IP AddressingConfiguring Multiple Gateways
Managing Network Connections
Checking the Status, Speed, and Activity for Local Area ConnectionsEnabling and Disabling Local Area ConnectionsRenaming Local Area Connections
18. Administering Network Printers and Print Services
Managing the Print Services RoleUsing Print DevicesPrinting EssentialsConfiguring Print ServersEnabling and Disabling Print Sharing
Getting Started with Print Management
Installing Printers
Using the Autoinstall Feature of Print ManagementInstalling and Configuring Physically Attached Print DevicesInstalling Network-Attached Print DevicesConnecting to Printers Created on the NetworkDeploying Printer ConnectionsConfiguring Point and Print RestrictionsMoving Printers to a New Print ServerMonitoring Printers and Printer Queues AutomaticallySolving Spooling Problems
Configuring Printer Properties
Adding Comments and Location InformationListing Printers in Active DirectoryManaging Printer DriversUpdating a Printer DriverConfiguring Drivers for Network ClientsSetting a Separator Page and Changing Print Device ModeChanging the Printer PortScheduling and Prioritizing Print JobsScheduling Printer AvailabilitySetting Printer PriorityConfiguring Print SpoolingStarting and Stopping Printer SharingSetting Printer Access PermissionsAuditing Print JobsSetting Document Defaults
Configuring Print Server Properties
Locating the Spool Folder and Enabling Printing on NTFSManaging High-Volume PrintingLogging Printer EventsEnabling Print Job Error Notification
Managing Print Jobs on Local and Remote Printers
Viewing Printer Queues and Print JobsPausing the Printer and Resuming PrintingEmptying the Print QueuePausing, Resuming, and Restarting Individual Document PrintingRemoving a Document and Canceling a Print JobChecking the Properties of Documents in the PrinterSetting the Priority of Individual DocumentsScheduling the Printing of Individual Documents
19. Running DHCP Clients and Servers
Understanding DHCPUsing Dynamic IPv4 Addressing and ConfigurationUsing Dynamic IPv6 Addressing and ConfigurationChecking IP Address AssignmentUnderstanding Scopes
Installing a DHCP Server
Installing DHCP ComponentsStarting and Using the DHCP ConsoleConnecting to Remote DHCP ServersStarting and Stopping a DHCP ServerAuthorizing a DHCP Server in Active Directory
Configuring DHCP Servers
Binding a DHCP Server with Multiple Network Interface Cards to a Specific IP AddressUpdating DHCP StatisticsDHCP Auditing and TroubleshootingUnderstanding DHCP AuditingEnabling or Disabling DHCP AuditingChanging the Location of DHCP Auditing LogsChanging the Log UsageIntegrating DHCP and DNSIntegrating DHCP and NAPAvoiding IP Address ConflictsSaving and Restoring the DHCP Configuration
Managing DHCP Scopes
Creating and Managing SuperscopesCreating SuperscopesAdding Scopes to a SuperscopeRemoving Scopes from a SuperscopeActivating and Deactivating a SuperscopeDeleting a SuperscopeCreating and Managing ScopesCreating Normal Scopes for IPv4 AddressesCreating Normal Scopes for IPv6 AddressesCreating Multicast ScopesSetting Scope OptionsViewing and Assigning Server OptionsViewing and Assigning Scope OptionsViewing and Assigning Reservation OptionsModifying ScopesActivating and Deactivating ScopesActivating a ScopeDeactivating a ScopeEnabling the Bootstrap ProtocolRemoving a ScopeConfiguring Multiple Scopes on a Network
Managing the Address Pool, Leases, and Reservations
Viewing Scope StatisticsSetting a New Exclusion RangeDeleting an Exclusion RangeReserving DHCP AddressesReleasing Addresses and LeasesModifying Reservation PropertiesDeleting Leases and Reservations
Backing Up and Restoring the DHCP Database
Backing Up the DHCP DatabaseRestoring the DHCP Database from BackupUsing Backup and Restore to Move the DHCP Database to a New ServerForcing the DHCP Server Service to Regenerate the DHCP DatabaseReconciling Leases and Reservations
20. Optimizing DNS
Understanding DNSIntegrating Active Directory and DNSEnabling DNS on the Network
Configuring Name Resolution on DNS Clients
Installing DNS Servers
Installing and Configuring the DNS Server ServiceConfiguring a Primary DNS ServerConfiguring a Secondary DNS ServerConfiguring Reverse LookupsConfiguring Global Names
Managing DNS Servers
Adding Remote Servers to the DNS ConsoleRemoving a Server from the DNS ConsoleStarting and Stopping a DNS ServerCreating Child Domains Within ZonesCreating Child Domains in Separate ZonesDeleting a Domain or Subnet
Managing DNS Records
Adding Address and Pointer RecordsAdding a PTR Record LaterAdding DNS Aliases with CNAMEAdding Mail Exchange ServersAdding Name ServersViewing and Updating DNS Records
Updating Zone Properties and the SOA Record
Modifying the SOA RecordAllowing and Restricting Zone TransfersNotifying Secondaries of ChangesSetting the Zone TypeEnabling and Disabling Dynamic Updates
Managing DNS Server Configuration and Security
Enabling and Disabling IP Addresses for a DNS ServerControlling Access to DNS Servers Outside the OrganizationCreating Nonforwarding and Forwarding-Only ServersCreating Forwarding ServersConfiguring Conditional ForwardingEnabling and Disabling Event LoggingUsing Debug Logging to Track DNS ActivityMonitoring a DNS Server
A. About the Author
Index

Content preview from Windows Server® 2008 Administrator's Pocket Consultant

Managing Organizational Units

As discussed in Chapter 7, organizational units help you organize objects, set Group Policy with a limited scope, and more. In this section you’ll learn how to create and manage organizational units.

Creating Organizational Units

You usually create organizational units to mirror your organization’s business or functional structure. You may also want to create units for administrative reasons, such as if you want to delegate rights to users or administrators. You can create organizational units as subgroups of a domain or as child units within an existing organizational unit.

To create an organizational unit, follow these steps:

In Active Directory Users And Computers, right-click the domain node or existing organizational ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Microsoft® Windows Server™ 2003 Administrator's Pocket Consultant, Second Edition

Publisher Resources

ISBN: 9780735624375Catalog Page Errata

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Windows Server® 2008 Administrator's Pocket Consultant

by William Stanek

Managing Organizational Units

Creating Organizational Units

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.