Tải bản đầy đủ - 0 (trang)
Chapter 37. Windows 2000 and Windows Server 2003 User and Computer Management Utilities

Chapter 37. Windows 2000 and Windows Server 2003 User and Computer Management Utilities

Tải bản đầy đủ - 0trang

TheMicrosoftManagementConsole

MMCisintendedtoprovideacommoninterfaceintovarious

administrativetoolsusedwithWindows2000/XP/2003.Utilities

arecreatedassnap-insthatareloadedintotheMMC

applicationandpresentedtotheuser.Eachconsoleconsistsof

aleftpanewithatreeofobjectsyoucanmanageusingthe

particularsnap-in.Thistreecancontainthingssuchasfolders

andothercontainers,oradministrativeobjects.Someobjectsin

thetreecanbeexpandedbyclickingontheplussign(+)next

tothem,torevealafurthernestingofobjects.Hencethe

treelikestructure,whichissimilartoasetofdirectoriesand

subdirectories.



Note

TheMMCinterfaceisnotlimitedtoMicrosoft

managementapplications.Manythird-party

applicationsalsohavedesignedsnap-insthatcanbe

usedwithMMC.Thegoalofthiseffortistoprovidea

consistentinterfacetomanagenotjustthe

operatingsystemandlayeredproducts,butalso

applicationsandutilitiescreatedforWindows

platforms.



Therightpaneisusuallyusedtodisplaydataorother

informationbasedonchoicesmadeintheleftpane.For

example,intheComputerManagementadministrativetool,you

selectDiskDefragmenterfromthetreeofoptionsintheleft

pane,andthediskdefragmenterdisplaysdisksthatyoucan

defragment,aswellastheprogressofthefragmentation

process,inthepaneontheright.



Note

Forthemostcommonsystemmanagementtasks,

youdon'thavetoworryaboutsettingupasnap-in

forMMC.UseStart,Programs,AdministrativeTools

forWindows2000,andyouwillseethatthefamiliar

utilitiesarealreadysetup,alongwithsomeothers

youmightnotrecognize.ForWindowsServer2003,

useStart,AdministrativeTools.







UserManagement

TheActiveDirectoryUsersandComputersMMCsnap-inisused

tomanagebothusersandcomputersinthedomain.Mostof

thefunctionsthatweredoneusingtheUserManagerfor

DomainshavebeenmovedintothisMMCsnap-in.Themain

differenceistheinterfacetheMMCconsoleandtheamountof

informationyoucankeeptrackofusingtheActiveDirectoryas

comparedtothelimitedamountofdatathatcouldbestoredin

theoldsecurityaccountsmanager(SAM)databaseofprevious

versionsofWindowsNT.

Thischapterfirstcoversthebasicfunctionsofthisutility:

addingusersandcomputerstothedomain.Thenyou'lllearn

aboutbuilt-inusergroupsandhowyoucancreateyourown

usergroupstohelpmakeadministrativedutiesforlarge

numbersofusersaneasiertask.



CreatingaNewUserDomainintheActive

Directory

Thiscommontaskissimplifiedbytheuseofafewdialogboxes

tocreatetheaccount.Aftertheuseraccounthasbeencreated,

youcangobackandusethepropertiespagefortheaccountto

addmoreinformation.

ForWindowsdomainsbeginningwithWindows2000domain

controllers,informationfromuseraccountstocomputeraccounts,

resourcerecords,andsoforthisnowstoredintheActiveDirectory.

YoucanlearnmoreabouttheActiveDirectoryandtheobjectsit

storesinChapter30,"UsingtheActiveDirectory."



TocreateanewuseraccountinadomainintheActive

Directory,followthesesteps:

1. ClickStart,AdministrativeTools,ActiveDirectoryUsersand

Computers.ForWindows2000,useServer,Start,

AdministrativeTools,andthenActiveDirectoryUsersand

Computers.

2. TheMMCconsolepopsup.Intheleftpanethereisadomain

withatreeofobjectsunderit.InFigure37.1youcansee

theopeningscreenandthefoldersyoucanusetomanage

usersandcomputers.



Figure37.1.TheActiveDirectoryUsersand

ComputersMMCsnap-inisusedtoadminister

usersinthedomain.

[Viewfullsizeimage]



3. ClicktheUsersfolderintheleftpane,andalistofuser

groupsandindividualusersisdisplayedasshowninFigure

37.2.



Figure37.2.TheUsersfoldercontainsuser

groupsandusers.

[Viewfullsizeimage]



4. Right-clickontheUsersfolderandselectNewandthen

User.TheNewObject-Userdialogboxpopsup.Hereyoucan

fillininformationsuchastheusername;theuser'sfirst,

last,andfullnames;initials;andotherinformation.Figure

37.3showsanexample,addinganewusernamedYoko

Ono.



Figure37.3.TheNewObject-Userdialogbox



enablesyoutoinputbasicinformationaboutthe

newuseraccount.



5. Thenextdialogbox(seeFigure37.4)enablesyoutoentera

passwordfortheuserandtouseoneofseveralpassword

options.Formostnewusers,it'seasiesttousethefirst

checkbox(UserMustChangePasswordatNextLogin)so

thattheusercanenterhisownuniquepassword,unknown

toanyoneelse,eventheadministratorwhocreatedthe

account.Ifyouarecreatinganaccounttouseforrunninga

serviceorsomeothersimilaruse,youmightwanttousethe

PasswordNeverExpiresoptionsothatyoudon'thaveto

changethepasswordperiodically.Finally,youcandisablea

useraccountwiththeAccountIsDisabledcheckbox.Thisis

usefulwhencreatingnewaccountssothattheyareall

initiallydisabled.Whenusersarecontactedaboutanew

account,theadministratorcandeselectthispropertyand

givetheuserthefirstpasswordneededtologintothe

account.



Figure37.4.Youcanmanagepassword

administrationusingthisdialogbox.



6. Finally,asummaryscreenpopsupshowingthedatayou've

enteredforthenewaccount.ClicktheFinishbuttonto

completetheprocessofcreatingthenewaccount.



Aftercreatinganewuseraccount,youmightwanttologin

yourselfbeforeinformingtheuser.Thiswayyoucanavoid

mistakes,suchashavingenteredthewrongpasswordforthe

account.Notethatifyouelectedtheoptionthattheusermust

changethepasswordatthenextlogon,youwillalsobeforced

todothat.Aneasymethodforcreatingalargenumberof

accountsistoenterapasswordyoucanrememberand,when

youlogintochecktheaccount,setthenewpasswordtoone



thatmatchesthepasswordpolicyforyourorganization.



ManagingOtherUserAccountInformation

Whenyouenteranewuseraccount,youarepromptedforonly

theminimalinformationneededtocreatetheaccountinthe

ActiveDirectory.Aftertheaccountiscreated,youcanusethe

propertiespagefortheuseraccounttoaddormodifyother

information.Simplyright-clickontheusernameintheright

paneoftheMMCconsole,andselectPropertiesfromthemenu

thatappears.InFigure37.5youcanseethat,despitethe

minimalinputusedtocreatetheaccount,thereareseveraltabs

thatenableyoutotrackallsortsofusefulinformationaboutthe

user.



Figure37.5.Thepropertiespageforauser

accountenablesyoutoadministeralotmore

informationthanwasinputduringaccount

creation.



Ratherthantrytoshowallthetabsforthispropertiespage

(becausetherearesomany),alltheuserattributesthatare

partofthedefaultuserobjectarelistedforreferenceinTable

37.1.Thissummarylistingshouldmakeiteasytolocatethe

datayouwanttolookatormodify,andgostraighttothat

propertiespagetab.

Table37.1.AttributesoftheUserAccountObject

Attribute



Tabonthe

PropertiesDialog Description

Box



FirstName



General



User'sfirstname.



Initials



General



User'sinitial(s).



LastName



General



User'slastname.



DisplayName



General



Defaultstoshowfirstthree

fields,althoughyoucan

modifyit.



Description



General



Textfield,anythingyou

want.



Office



General



Officelocationforthisuser.



TelephoneNumber



General



User'stelephonenumber.



Email



General



User'semailaddress.



WebPage



General



User'sWebpage.



Street



Address



Multilinestreetaddress

field.



P.O.Box



Address



Postofficebox.



City



Address



City.



State/Province



Address



Stateorprovince.



Zip/PostalCode



Address



ZIPcodeorpostalcode.



Country/Region



Address



Countryorregion.



UserLogonName



Account



Useraccountlogon

username.



(Pre-Windows2000) Account



Logonforpre-Windows

2000users.



LogonHours



Bringsupdialogboxto

entertimerestrictionsfor

theaccount.



Account



LogOnTo



Account



Bringsupdialogboxto

enterwhichcomputersa

usercanlogonto.



AccountOptions



Account



Optionsforlogons,suchas

passwordpolicies.



AccountExpires



Account



EnterNeverorsetaccount

expirationdate.



ProfilePath



Profile



Pathforuserprofile.



LogonScript



Profile



Pathforlogonscript.



HomeFolder



Profile



Localpathorremotefile

share.



Connect



Profile



Usethistospecifyadrive

letterthatcontainsthe

user'shomefolderifitis

notonthelocalcomputer's

harddrive.



Home



Telephones



User'shomenumber.Use

theOtherbuttontoadd

additionalnumbers(this

buttonworksforallthe

phonenumberfields).



Pager



Telephones



User'spagernumber.



Mobile



Telephones



User'smobilephone

number.



Fax



Telephones



User'sfaxnumber.



IPPhone



Telephones



User'sIPtelephone

number.



Notes



Telephones



Addnoteshere,suchasa

PINnumberfortheuser's

pager.



Title



Organization



User'sjobtitle.



Tài liệu bạn tìm kiếm đã sẵn sàng tải về

Chapter 37. Windows 2000 and Windows Server 2003 User and Computer Management Utilities

Tải bản đầy đủ ngay(0 tr)

×