Active Directory
Active Directory is the foundation of most corporate networks.
It includes a database of configured network elements, such as users, computers, and printers.
Centralizes authentication by verifying user credentials against stored data.
Simplifies access control by assigning permissions to users or groups.
Commonly used for password resets and account management in IT support roles.
Often used interchangeably with the term 'Windows domain'.
A Windows domain is a named collection of users, computers, and printers with a central database accessed via Active Directory.
This setup provides a central point for network troubleshooting and information.
Organizational Units (OUs) manage large numbers of users/computers by grouping them.
OUs can be structured by department, location, etc., to apply specific policies.
Policies can be applied to OUs to manage settings for users in different buildings or sites.
Group Policy Management tool configures OUs; examples include Milky Way, Pegasus, and Stations OUs.
Demonstrates hierarchical OU structures for policy application.
Active Directory Users and Computers displays users and computers in each OU.
Login scripts automate tasks such as drive mapping or printer sharing upon user login.
Scripts are assigned to OUs in Group Policy Management under User Configuration.
Example shows mapping a drive for users in the Atlantis OU via a login script.
A batch file is created to map a network drive (G:) using the net use command.
The script is added to the group policy, which then maps the drive upon user login.
Group Policy Editor modifies many Windows settings, including login scripts and system appearance.
Group Policy Management provides overall management of devices and users across the domain.
gpupdate utility applies policy changes without requiring a logoff; /force updates all policies.
Centralizing user files on a network drive allows for easier data backup and recovery.
User profile settings can be modified to direct the home location to a network share.
Requires users to save files to the home folder, but Group Policy can enforce this.
Active Directory Users and Computers utility is used to configure profiles.
The Profile tab is used to change the Home Folder location.
A variable (%username%) is used to create individual home folders for each user.
Folder redirection moves local folders (e.g., Documents) to a network server.
Group Policy under User Configuration manages folder redirection.
Offline file access ensures availability of files on laptops when disconnected from the network.
A new GPO is created for Documents Redirection under the Atlantis OU.
Basic redirection sends all users' Documents folders to the same network location.
The root path is set to a shared folder (SGC Home) with a username subdirectory.
gpupdate is used to apply the new policy, though a logoff/logon may be required.
Security groups manage user rights and permissions efficiently.
Instead of configuring individual users, add them to groups with predefined permissions.
Examples include Shipping and Receiving and Shipping and Receiving Managers groups.
Active Directory Users and Computers shows existing groups like Users, Guests, etc.
New groups can be created to customize domain management and permissions.