DomainTools

DomainTools

---

Administering domains is done using two consoles:

Active Directory Users and Computers

Use this console to create and manage objects within a domain, such as OUs, users, computers, and so on. (This tool was discussed under Active DirectoryTools earlier in this chapter.) Most day-to-day administration of domains involves using this console to create users, reset user passwords, and similar stuff.

Active Directory Domains and Trusts

Use this console to change the domain and forest functional levels, transfer the domain-naming master role, manage external trusts between domains (including trusts with downlevel NT domains), and specify alternative UPN suffixes for domains. These aren't everyday tasks and need to be performed only when requiredfor example, during different stages of migrating your NT network to WS2003.

In addition, the Rendom utility can be used to rename domains and restructure your forest, as described earlier. Rendom can be downloaded from Microsoft's web site at www.microsoft.com/windowsserver2003/downloads/.