Scribd
Upload
22 views1 page

Aprende Administracion de Directorio Activo

The document discusses administering user accounts in Active Directory. It covers creating and managing user accounts, which are the most common objects administrators work with. User accounts need to be created for everyone accessing the network and can change frequently. The document also discusses groups, which are useful for applying permissions to multiple users.

Uploaded by

sgallegos.netx
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
22 views1 page

Aprende Administracion de Directorio Activo

The document discusses administering user accounts in Active Directory. It covers creating and managing user accounts, which are the most common objects administrators work with. User accounts need to be created for everyone accessing the network and can change frequently. The document also discusses groups, which are useful for applying permissions to multiple users.

Uploaded by

sgallegos.netx
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 1

Aprende administracion de directorio activo

Users are the main reason for your job, and according to some administrators, the greatest bane of
their existence. You’ll spend a lot of time administering user accounts during your career as an AD
administrator. User and computer accounts Everyone logging on to a network requires a user
account. These are the objects you’ll work with the most because user accounts can be quite volatile
with leavers, joiners, changes, and password resets. The volatility level relative to other AD objects
is illustrated in figure 2.1. NOTE Computer accounts are a specialized form of user account, even
though they’re treated separately in this book. In most organizations they’re put into separate
organizational units (OUs) to make the Group Policy Object (GPO) application simpler. GPO is a
way to centrally configure and manage the settings and security of computers and machine
configuration made available to the user population. You’ll learn about the details of GPOs in
chapters 8 and 9. As well as general user accounts, you may have accounts for ■ Group or other
specialized mailboxes ■ Service accounts Chapter 3 covers the anatomy of user account objects and
the techniques you can use to modify them. 12 CHAPTER 2 Creating user accounts There are some
management tasks involved; for example, setting permissions that are better performed on groups of
users rather than on individual users. Groups are covered in chapters 4 and 5. User accounts are the
most volatile of AD objects, and, with the exception of a few high-profile people in your
organization, have the lowest impact if something goes wrong with them. Figure 2.1 illustrates and
compares the subjective volatility and impact of the most common AD objects. Figure 2.1 shows
that modifications to users and groups occur frequently but have a low impact. Modifications to the
forest or schema are very infrequent but potentially have a huge impact. Don’t worry about this.
Changing things like the forest, schema, or sites and subnets needs special permission—
membership in the Enterprise Admins and Schema Admins groups. Membership in these groups
should be under tight change control to protect the environment and the administrators. Without
those permissions, you can’t do anything to this part of AD—remember, you need to be authorized
before you can do anything. This is where you start to get your hands dirty and work with AD
objects. In this chapter you’ll learn how to create user accounts. You’ll find that this is a common
job in all but the smallest organizations. Active Directory has a few built-in accounts that are
created when you install the first domain controller, but all other accounts have to be created by
you, the administrator. You can’t administer the accounts until you’ve created them, so this is an
essential first step.

You might also like