Randy Franklin Smith - Articles on Actice Directory
most recent | by year | by subject
Granting Users the Authority to Unlock Other Users' Accounts
Do you want certain users to be able to unlock other users’ accounts without granting them the authority to reset users’ passwords? Find out how to use the Active Directory Users and Computers snap-in to do just that.
<more>
Creating a Domain Global Group Called Member Computer Local Admins. Don't give computers Domain Admins rights to deploy SMS to clients; if you do, both the computer and its administrator have full access to AD. <more>
Using Logon Rights to Secure AD Service Accounts. You can keep AD service accounts from being used to log on to your network by locking down those accounts with logon rights. <more>
Querying DCs for Last Logon Date and Time. Use the free DumpSec tool or the MMC Active Directory Users and Computers snap-in to find when a user last logged on. <more>
Synchronizing Forests Without Using Trusts. The free Microsoft Identity Integration Server Feature Pack for Windows Server Active Directory lets you synchronize AD forests. <more>
Ask the Experts. Learn: how to use Identity Integration Server Feature Pack for Windows Server Active Directory, should you deploy Exchange or Outlook first, when to apply Exchange schema upgrades when migrating your to Exchange 2003, and about the iSCSI protocol. <more>
Changing AD Account Permissions en Masse. In AD, you can change permissions of directory objects, including user accounts, by changing the permissions of parent objects and letting child objects inherit the changes. <more>
Get this valuable commentary each month as soon as Microsoft releases security updates!
Free log parser scripts, a clear explanation of Microsoft's
latest security bulletin, helpful security tips, how-to's and more.
|
