Lesson 2 in Visual Studio .NET

Creating QR Code in Visual Studio .NET Lesson 2

5-15

Figure 5-4

The list of results allows you to select an object and, from the File menu or the shortcut menu, perform common tasks on the selected object. Many administrators appreciate learning that you can use the Manage command to open the Computer Management console and connect directly to that computer, allowing you to examine its event logs, device manager, system information, disk and service configuration, or local user or group accounts.

1. Open Active Directory Users And Computers. 2. Select the Security Groups OU and create a global security group called Deployment. 3. Select the Desktops OU. 4. Create a computer account for Desktop04. In the first page of the New Object Computer dialog box, click Change below The Following User Or Group Can Join This Computer To A Domain. Type deployment in the Select User or Group dia log box, and then click OK. 5. Complete the creation of the Desktop04 computer object.

5-16

5

8. (Optional) If you joined a second computer to the domain in Exercise 4 of Lesson 1,

5-17

f. Windows XP g. Windows Server 2003 2. You open a computer object and, on the Operating System tab, discover that no properties are displayed. What causes these properties to be absent

3. An executive has a laptop running Windows XP, with a machine name of TopDog. You want to allow the executive s laptop to join the domain, and you want to be sure that the computer is configured by the group policies linked to the Desktops OU immediately. How can you achieve this goal

4. Why is it a best practice to create a computer account in the domain prior to join ing a machine to the domain

You can allow any user or group to join a computer to a domain account by uti lizing the property, The Following User Or Group Can Join This Computer To A Domain. The Find Objects In Active Directory button on the Active Directory Users And Computers snap-in toolbar allows you to search for, and then manage, computer and other Active Directory objects.

5-18

5

Active Directory domains treat computers as security principals. This means that a com puter, just like a user, has an account or, more specifically, properties within the com puter object such as a name, a password, and a SID. Like user accounts, computer accounts require maintenance and, occasionally, troubleshooting. This lesson focuses on skills and concepts related to troubleshooting computer objects.

Recognize the symptoms of computer account problems Troubleshoot computer accounts by deleting, disabling, resetting, or rejoining, using

Computer accounts, like user accounts, maintain a unique SID, which enables an administrator to grant permissions to computers. Also like user accounts, computers can belong to groups. Therefore, like user accounts, it is important to understand the effect of deleting a computer account. When a computer account is deleted, its group memberships and SID are lost. If the deletion is accidental, and another computer account is created with the same name, it is nonetheless a new account, with a new SID. Group memberships must be reestablished, and any permissions assigned to the deleted computer must be reassigned to the new account. Delete computer objects only when you are certain that you no longer require those security-related attributes of the object. To delete a computer account using Active Directory Users And Computers, locate and select the computer object and, from the Action menu or the shortcut menu, select the Delete command. You will be prompted to confirm the deletion and, because deletion is not reversible, the default response to the prompt is No. Select Yes and the object is deleted. The DSRM command-line tool introduced in 3 allows you to delete a computer object from the command prompt. To delete a computer with DSRM, type: