c# zxing qr code generator Practice: Planning an Account Strategy in Visual C#.NET

Create QR Code in Visual C#.NET Practice: Planning an Account Strategy

In this practice, you explore the requirements involved in planning an account strat egy. Thinking of the company you work for now (or have worked for in the past), describe the requirements in place for an account strategy. Use the following questions to guide your thoughts; the answers will vary depending on your experience. 1. What are the naming conventions in your organization

4-31

The following questions are intended to reinforce key information presented in this lesson. If you are unable to answer a question, review the lesson materials and try the question again. You can find answers to the questions in the Questions and Answers section at the end of this chapter. 1. What are the five types of accounts you can create in Active Directory for Windows Server 2003

2. You are creating a password policy. What are the recommended requirements you should impose for passwords

Active Directory in Windows Server 2003 provides five types of accounts: user, computer, group, contact, and InetOrgPerson. Computer accounts allow member computers to be authenticated in a manner that is transparent to users. You should create a plan for naming computer accounts and define who has the right to add computer accounts to Active Directory. User accounts identify a user and authenticate users for access to network resources. Your user account strategy should include a solid naming convention, a password policy, and an authentication policy. Groups simplify the assignment of permissions by organizing users. The scope of a group determines where in Active Directory a group is accessible and what objects can become members. Group scopes include global groups, universal groups, and domain local groups. When placing users into groups, remember user accounts go into global groups; global groups go into universal groups; universal groups go into domain local groups; and permissions are assigned to domain local groups.

4-32

4

Group Policy provides a powerful and efficient means to configure settings for many users and computers at once. Group Policy is also used to distribute and update software in an organization. This lesson presents an overview of Group Policy in Windows Server 2003 and examines strategies for building a solid Group Policy structure.

Explain how Group Policy works and what it is used for. Describe how Group Policy Objects are combined. Decide on a strategy for implementing Group Policy in an organization.

A group policy is a collection of user and computer configuration settings that you can link to computers, sites, domains, and OUs in Active Directory. Such a collection of group policy settings is called a Group Policy object (GPO). Any computer running Windows 2000, Windows XP, or Windows Server 2003 (whether it is part of Active Directory or not) contains one local GPO with policies that are applied to that computer. If the computer is a part of Active Directory, then any num ber of additional nonlocal GPOs may also apply to that computer. There are two basic types of Group Policy settings available:

Computer Configuration settings Used to set group policies that apply to specific computers, regardless of who logs on to them User Configuration settings Used to set group policies that apply to specific users, regardless of which computer they log on to

No matter which type of setting you are configuring (computer or user), there are three categories of settings available: Software Settings, Windows Settings, and Administra tive Templates.

The Software Settings node contains settings you can also use to deploy software to cli ent computers using Group Policy. This requires that the client computers be running Windows 2000 Professional, Windows 2000 Server, Windows XP Professional, Windows XP 64-Bit Edition, or Windows Server 2003, and that they are members of the domain. You can specify which users or computers will get the software, you can specify upgrades when necessary, and you can even remove the software.