Module3管理AD域服务对象.pdfVIP

® Microsoft Official Course Module 3 Managing Active Directory Domain Services Objects 刘道军老师主讲 如有疑问请与我联系 Module Overview •Managing User Accounts •Managing Groups •Managing Computer Accounts •Delegating Administration Lesson 1: Managing User Accounts •AD DS Administration Tools •Creating User Accounts •Configuring User Account Attributes •Creating User Profiles •Demonstration: Managing User Accounts •Demonstration: Using Templates to Manage User Accounts AD DS Administration Tools To manage AD DS objects, you can use the following graphical tools: • Active Directory Administration snap-ins • Active Directory Administrative Center You can also use the following command- line tools: • Active Directory module in Windows C:/ PowerShell • Directory Service commands Creating User Accounts •一个用户帐户，您可以： •允许或拒绝用户权限登录到计算机基于它们的用户 帐户的身份。 •授予用户访问流程和服务特定的安全上下文。 •管理用户对资源的访问，如AD DS对象及其属性， 共享的文件夹，文件，目录，和打印队列。 •你可以使用Active Directory用户和计算机管理单元， 活动目录管理中心，Windows PowerShell，或 dsadd.exe命令行工具创建一个用户对象。 介绍用户登录名 • 用户主名 suzanf@contoso.msft 1.用户主名前缀 2.用户主名后缀 Prefix @ Suffix • 用户登录名 1.用户登录时必须 contoso suzanf 选择域 域名 + 用户名 • 用户登录名唯一性原则 1.全名在创建用户帐号的容器内必须唯一 2.用户主名在目录林中必须唯一 3.用户登录名在域中必须唯一 Creating User Accounts The Account section of the Active Directory Administrative Center Create User window Configuring User Account Attributes The Log on hours dialog box Creating User Profiles The Profile section of the User Properties window Demonstration: Managing User Accounts In this demonstrat