Chapter 11 -- Installing and Configuring Active Directory

[Previous] [Next]

Chapter 11

Managing Microsoft Active Directory is an important part of the Microsoft Windows 2000 administration process, and familiarity with the various tools provided for this purpose is essential. Nearly all the tools use Microsoft Management Console (MMC) snap-ins to provide the user interface. The Administrative Tools program group on the Start menu includes some snap-ins, but you must add others manually by using the MMC's Add Snap-in function.

You'll find that some of the Active Directory management tools are programs that you run every day, while others are needed only during Active Directory installation or occasionally thereafter. The MMC snap-ins that provide Active Directory management functions are as follows:

• Active Directory Installation Wizard Creates domain controllers, new domains, trees, and forests
• Active Directory Domains and Trusts Changes the domain mode, manages domain trust relationships, and configures user principle name (UPN) suffixes
• Active Directory Users and Computers Creates, manages, and configures Active Directory objects
• Active Directory Sites and Services Creates and configures domain sites and manages the domain controller replication process
• Active Directory Schema Modifies the schema that defines Active Directory objects and properties

In addition to the MMC snap-ins, Microsoft Windows 2000 Server includes separate utilities for importing data to and exporting it from Active Directory.

This chapter examines the tasks that Active Directory administrators typically perform by using the Active Directory Installation Wizard, the Active Directory Domains and Trusts snap-in, and the Active Directory Users and Computers snap-in. The next chapter examines the Active Directory Sites and Services snap-in and the Active Directory Schema Administrator snap-in.