ACTIVE DIRECTORY OBJECTS

8. Active Directory objects include user accounts, computer accounts, contacts, groups, and organizational units.

9. A user account has four types of names : the user logon name, the pre “Windows 2000 logon name, the principal logon name, and the LDAP relative distinguished name .

10. Several default accounts are created during installation and do not need to be manually created, including the Administrator, ASPNET, Guest, and Support accounts, as well as the LocalSystem, LocalService, and NetworkService pseudo-accounts.

11. Before creating user accounts, you should decide on a naming scheme and password policy.

12. Organizational units may be used to group objects, including other OUs, for ease of administration. An object can be in only one container location.

13. Groups are used to manage allowed and denied permissions through inheritance by membership (security groups), or for email distribution when Exchange has been installed (distribution groups). Groups can be universal, global, or domain local scope. An object can be a member of multiple groups.

14. Several default groups are created during installation, including Account Operators, Administrators, Backup Operators, Guests, Print Operators, Remote Desktop Users, Server Operators, and Users, along with administrative groups such as DnsAdmins, Domain Admins, Domain Controllers, Domain Users, Schema Admins, and Enterprise Admins. Local groups may also be present on non “domain controller computers.

15. Many special identities are included, such as Authenticated Users, Creator Owner, Everyone, Network, Self, System, and Terminal Server Users. These may also be used for permissions management.