« 上一篇下一篇 »

5-2 Managing Computer Accounts

Lesson 2 Managing Computer Accounts 5-13 Lesson 2: Managing Computer Accounts
In the previous lesson, you examined the fundamental components of a computer’s relationship with a domain: the computer’s account, and joining the computer to the domain. This lesson looks more closely at the computer object in Active Directory. You will learn about the other properties and permissions that make computer objects “tick,” and how to manage those properties and permissions using GUI and command-line tools. After this lesson, you will be able to ■ Configure the permissions of a new Active Directory computer object ■ Configure the properties of an Active Directory computer object ■ Find and manage computer accounts using Active Directory Users And Computers Estimated lesson time: 10 minutes
Managing Computer Object Permissions
In Lesson 1, you learned that you could join a computer to a domain by providing domain administrator credentials when prompted by the computer during the join process. Security concerns, however, require us to use the minimum necessary credentials to achieve a particular task, and it does seem like overkill to need a Domain Admins’ account to add a desktop to the domain.
Fortunately, Active Directory allows you to control, with great specificity, the groups or users that can join a computer to a domain computer account. Although the default is Domain Admins, you can allow any group (for example, a group called “Installers”) to join a machine to an account. This is most easily achieved while creating the computer object.
When you create a computer object, the first page of the New Object–Computer dialog box (previously shown in Figure 5-1) indicates The Following User Or Group Can Join This Computer To A Domain. Click Change and you can select any user or group. This change modifies a number of permissions on the computer object in Active Directory.
The following page of the New Object–Computer dialog box prompts you for the globally unique identifier (GUID) of the computer, which is necessary if you install a system using Remote Installation Services (RIS). For more information on RIS, see the Microsoft online Knowledge Base, http://support.microsoft.com/.
If the computer that is using the account that you are creating is running a version of Windows earlier than 2000, select the Assign This Computer Account As A Pre–Windows 2000 Computer check box. If the account is for a Windows NT backup domain con-troller, click Assign This Computer Account As A Backup Domain Controller.
5-14 Chapter 5 Computer Accounts Tip Remember, only computers based on Windows NT technologies can belong to a domain, so Windows 95, Windows 98, and Windows Millennium Edition (Windows Me) cannot join or maintain computer accounts. Therefore, this check box really means Windows NT 4.
Configuring Computer Properties
Computer objects have several properties that are not visible when creating a computer account in the user interface. Open a computer object’s Properties dialog box to set its location and description, configure its group memberships and dial-in permissions, and link it to a user object of the computer’s manager. The Operating System properties page is read-only. The information is published automatically to Active Directory, and will be blank until a computer has joined the domain using that account.
Several object classes in Active Directory support the Manager property that is shown on the Managed By property page of a computer. This linked property creates a cross-reference to a user object. All other properties—the addresses and telephone numbers—are displayed directly from the user object. They are not stored as part of the computer object itself.
The DSMOD command, as discussed in Chapter 2, can also modify several of the properties of a computer object. You will see the DSMOD command in action in the following section regarding troubleshooting computer accounts.
Finding and Connecting to Objects in Active Directory
When a user calls you with a particular problem, you might want to know what operating system and service pack is installed on that user’s system. You learned that this information is stored as properties of the computer object. The only challenge, then, is to locate the computer object, which may be more difficult in a complex Active Directory with one or more domains and multiple OUs.
The Active Directory Users and Computers snap-in provides easy access to a powerful, graphical search tool. This tool can be used to find a variety of object types. In this con-text, however, your search entails an object of the type Computer. Click the Find Objects In Active Directory button on the console toolbar. The resulting Find Computers dialog box is illustrated in Figure 5-4. You can select the type of object (Find), the scope of the search (In), and specify search criteria before clicking Find Now.
Lesson 2 Managing Computer Accounts 5-15 Figure 5-4 The Find Computers dialog box, as it appears after a successful search The list of results allows you to select an object and, from the File menu or the shortcut menu, perform common tasks on the selected object. Many administrators appreciate learning that you can use the Manage command to open the Computer Management console and connect directly to that computer, allowing you to examine its event logs, device manager, system information, disk and service configuration, or local user or group accounts.

  还没注册Payoneer的朋友可以免费申请一个,现在申请可获得25美元奖励并免除1%的美元入账费:当你收款达到100美元时,Payoneer会奖励你25美元。需要注意的是,如果你直接打开Payoneer官网进行注册,是没有上述优惠的,请务必打开【野猪尖的推荐链接】进行注册。Payoneer注册咨询QQ:2822129880

Payoneer

野猪尖的推荐链接https://www.payoneer.com/zh/znp (此地址要完整地复制,建议直接点击)

【Payoneer申请教程:个人账户企业账户订购Payoneer实体卡(P卡)

Payoneer注册与使用指南(包括P卡申请、Payoneer官方、手续费、收款、提现和消费):
注册-为何申请Payoneer万事达预付卡+美国/欧洲/英国银行账号? | P卡申请被拒绝的原因
   Payoneer有卡账户和无卡账户的区别Payoneer个人账户注册申请教程 | (公司帐户)
   Payoneer欧洲支付服务(欧元帐户)激活Payoneer欧元虚拟卡Payoneer推出日元收款帐户
   Payoneer英国支付服务(英镑帐户)订购Payoneer实体卡(P卡)Payoneer卡年费啥时候扣
   收到Payoneer万事达预付卡(P卡)Payoneer卡休眠和激活如何注销P卡P卡到期后如何更换

官方-Payoneer秉承公正、公开、透明服务Payoneer官方最新政策汇总官方客服联系方式
   Payoneer欧美收款账户费用表如何减少Payoneer入帐和取款手续费?
   跨境收款服务商拷问篇——PayoneerPayoneer客户答疑手册(FAQ)Payoneer手机App

收款-跨境电商/外贸收款方式对比Payoneer可以错名收款吗? | Payoneer还是蛮人性化的
   Payoneer可接受个人与公司信用卡付款(请求付款)关于Payoneer卡充值
   Amazon亚马逊卖家设置Payoneer卡收款教程Amazon联盟设置Payoneer卡收款
   Amazon亚马逊收款方式对比(Payoneer,World First,PingPong,美国/香港银行卡)
   申请CJ联盟并设置Payoneer卡收款ClickBank联盟设置Payoneer卡收款教程
   Payoneer如何从东南亚电商平台Lazada收款如何在Lazada开店
   Payoneer如何从拉美电商平台Linio收款? | Payoneer绑定非洲电商平台Jumia收款
   Payoneer如何从跨境移动电商Wish收款? | Wish模式正在改变电商格局
   Payoneer支持从美国电商平台Newegg收款
   Payoneer支持从法国乐天Priceminister收款法国电商平台CDiscount对接Payoneer收款
   Airbnb房东如何使用Payoneer收款?Airbnb房东用哪种收款方式最划算
   从PayPal提现到Payoneer卡教程及手续费用PayPal无法绑定并转账到Payoneer卡

提现-从Payoneer卡提现到国内银行账户Payoneer无法从Dating联盟收款并限制提现方式
   用P卡在中国银行ATM机取款4000元用Payoneer卡在中国建设银行ATM机取款500元

消费-用Payoneer卡在GoDaddy买域名主机教程


人在做天在看,转载请以链接的形式注明本文地址
本文地址:http://www.zhaoniupai.com/blog/archives/232.html