To launch ADUC, go to Administrative tools or just run dsa.msc.
ADUC provides a frontend for managing uers, groups, and computers. ADUC provides a frontend for searching and browsing the Active Directory and managing the OUs.
By default, ADUC doesn’t show all of the functionality. Check View->Advanced Features to see all of them.
You can create custom views of the directory using Saved Queries. To create a saved query, right-click on the Saved Queries node and click new->Query.
In the New Query window, provide a name, a query root, and the LDAP filter that will find the objects. By default, the query root is the domain. We can also export and import queries to and from an XML file.
ADUC permits drag and drop. We can move objects or an entire OU to a new location just drag and drop. We can disable this option to avoid incidents.
How to disable drag and drop:
- Open ADSI and connect to a domain controller.
- Expand Configuration [domainControllerName.example.com], expand CN=Configuration,DC=example,DC=com, right-click CN=DisplaySpecifiers, and then click Properties.
- In the CN=DisplaySpecifiers Properties dialog box, click the Attribute Editor tab.
- In the Attributes list, click flags, and then click Edit.
- In the Value box, type 1.
- Click OK two times, and then exit the ADSI Edit tool.
Taskpads:
Taskpads let you create custom views of ADUC with custom subsets of tasks. This way, we can create customized console for delegation. To create a Taskpad, start a new MMC console and add the ADUC snap-in. once you have a new MMC setup, right-click where you want to start the Taskpad and click New Taskpad view. Once you’re done customizing with the wizard, save the console clicking File->Save menu.
Be the first to comment on "Active Directory Users and Computers"