Chapter Summary

This chapter discussed many important skillsskills that you will use every day as a network administrator.

You started with creating and modifying user accounts. You used Active Directory Users and Computers first, learning how to create user accounts in the graphical user interface (GUI). You then progressed to using the command-line tools: dsadd to create a user account, dsget to inquire into an object's properties, dsmod to change properties, dsquery to find objects of any type, and dsrm to remove objects from Active Directory. Then you moved on to using csvde and ldifde to create user accounts automatically, by importing information about the new user accounts from data created from other sources, such as enrollment databases or other directories.

You also covered computer accounts. There is much less that a network administrator needs to do with computer accounts compared to user accounts because computer accounts are typically created automatically when the computer joins the domain and are managed automatically thereafter by the operating system. The network administrator gets involved only if a computer account needs to be reset.

Key Terms

• Active Directory Users and Computers

• Organizational Unit (OU)

• User accountsdomain and local

• Password

• User templates

• Command-line tools for Active Directory tasks

• dsadd

• dsquery

• dsget

• dsmod

• dsmove

• dsrm

• csvde

• CSV (Comma Separated Value)

• ldifde

• LDAP Data Interchange Format

• Account lockout

• Disabled account

• Expired account

• User profileslocal, roaming, and mandatory

• Properties on multiple objects

• Computer accounts

• Local accounts

• Security Identifier (SID)

• Remote installation services (RIS)