Active Directory Cookbook, 3rd Edition

Book description

When you need practical hands-on support for Active Directory, the updated edition of this extremely popular Cookbook provides quick solutions to more than 300 common (and uncommon) problems you might encounter when deploying, administering, and automating Microsoft's network directory service.

For the third edition, Active Directory expert Laura E. Hunter offers troubleshooting recipes based on valuable input from Windows administrators, in addition to her own experience. You'll find solutions for the Lightweight Directory Access Protocol (LDAP), ADAM (Active Directory Application Mode), multi-master replication, Domain Name System (DNS), Group Policy, the Active Directory Schema, and many other features. The Active Directory Cookbook will help you:

  • Perform Active Directory tasks from the command line
  • Use scripting technologies to automate Active Directory tasks
  • Manage new Active Directory features, such as Read-Only Domain Controllers, fine-grained password policies, and more
  • Create domains and trusts
  • Locate users whose passwords are about to expire
  • Apply a security filter to group policy objects
  • Check for potential replication problems
  • Restrict hosts from performing LDAP queries
  • View DNS server performance statistics

Each recipe includes a discussion explaining how and why the solution works, so you can adapt the problem-solving techniques to similar situations. Active Directory Cookbook is ideal for any IT professional using Windows Server 2008, Exchange 2007, and Identity Lifecycle Manager 2007, including Active Directory administrators looking to automate task-based solutions.

"It is rare for me to visit a customer site and not see a copy of Active Directory Cookbook on a shelf somewhere, which is a testament to its usefulness. The Cookbook takes the pain out of everyday AD tasks by providing concise, clear and relevant recipes. The fact that the recipes are provided using different methods (graphical user interface, command line and scripting) means that the book is suitable for anyone working with AD on a day-to-day basis. The introduction of PowerShell examples in this latest edition will be of particular interest for those looking to transition from VBScript. Laura has also done a great job in extending the Cookbook in this edition to encompass the broad range of changes to AD in Windows Server 2008."

--Tony Murray, Founder of Activedir.org and Directory Services MVP

"If you already understand Active Directory fundamentals and are looking fora quick solution to common Active Directory related tasks, look no further,you have found the book that you need."

--joe Richards, Directory Services MVP

"The Active Directory Cookbook is the real deal... a soup-to-nuts catalog of every administrative task an Active Directory administrator needs to perform. If you administer an Active Directory installation, this is the very first book you have to put on your shelf."

--Gil Kirkpatrick, Chief Architect, Active Directory and Identity Management, Quest Software and Directory Services MVP

Publisher resources

View/Submit Errata

Table of contents

  1. Active Directory Cookbook
  2. A Note Regarding Supplemental Files
  3. Preface
    1. 1. Who Should Read This Book?
    2. 2. What’s in This Book?
    3. 3. Conventions Used in This Book
    4. 4. Using Code Examples
    5. Safari® Books Online
    6. 5. We’d Like Your Feedback!
    7. 6. Acknowledgments
      1. Robbie Allen, from the First Edition
      2. Laura E. Hunter, from the Second Edition
      3. Laura E. Hunter, from the Third Edition
  4. 1. Getting Started
    1. 1.1. Approach to the Book
      1. At Least Three Ways to Do It!
      2. Windows 2000, Windows Server 2003, R2, and Windows Server 2008
    2. 1.2. Where to Find the Tools
      1. Running Tools with Alternate Credentials
      2. Targeting Specific Domain Controllers
    3. 1.3. Getting Familiar with LDIF
    4. 1.4. Programming Notes
      1. Serverless Binds
      2. Running Scripts Using Alternate Credentials
      3. Defining Variables and Error Checking
    5. 1.5. Replaceable Text
    6. 1.6. Where to Find More Information
      1. Command-Line Tools
      2. Microsoft Knowledge Base
      3. Microsoft Developers Network
      4. Websites
      5. Newsgroups
      6. Mailing Lists
      7. Books and Magazines
  5. 2. Forests, Domains, and Trusts
    1. 2.0. Introduction
      1. The Anatomy of a Forest
      2. The Anatomy of a Domain
      3. The Anatomy of a Trust
    2. 2.1. Creating a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    3. 2.2. Removing a Forest
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    4. 2.3. Creating a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    5. 2.4. Removing a Domain
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    6. 2.5. Removing an Orphaned Domain
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    7. 2.6. Finding the Domains in a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    8. 2.7. Finding the NetBIOS Name of a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    9. 2.8. Renaming a Domain
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    10. 2.9. Raising the Domain Mode to Windows 2000 Native Mode
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    11. 2.10. Viewing and Raising the Functional Level of a Windows Server 2003 or 2008 Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    12. 2.11. Raising the Functional Level of a Windows Server 2003 or 2008 Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    13. 2.12. Using AdPrep to Prepare a Domain or Forest for Windows Server 2003 or 2008
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    14. 2.13. Determining Whether AdPrep Has Completed
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    15. 2.14. Checking If a Windows Domain Controller Can Be Upgraded to Windows Server 2003 or 2008
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    16. 2.15. Creating an External Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    17. 2.16. Creating a Transitive Trust Between Two AD Forests
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    18. 2.17. Creating a Shortcut Trust Between Two AD Domains
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    19. 2.18. Creating a Trust to a Kerberos Realm
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    20. 2.19. Viewing the Trusts for a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    21. 2.20. Verifying a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    22. 2.21. Resetting a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using PowerShell
      4. See Also
    23. 2.22. Removing a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    24. 2.23. Enabling SID Filtering for a Trust
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    25. 2.24. Enabling Quarantine for a Trust
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    26. 2.25. Managing Selective Authentication for a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    27. 2.26. Finding Duplicate SIDs in a Domain
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    28. 2.27. Adding Additional Fields to Active Directory Users and Computers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using VBScript
      4. See Also
  6. 3. Domain Controllers, Global Catalogs, and FSMOs
    1. 3.0. Introduction
      1. The Anatomy of a Domain Controller
    2. 3.1. Promoting a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    3. 3.2. Promoting a Read-Only Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    4. 3.3. Performing a Two-Stage RODC Installation
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    5. 3.4. Modifying the Password Replication Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using VBScript
      4. See Also
    6. 3.5. Promoting a Windows Server 2003 Domain Controller from Media
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. 3.6. Promoting a Windows Server 2008 Domain Controller from Media
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    8. 3.7. Demoting a Domain Controller
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    9. 3.8. Automating the Promotion or Demotion of a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    10. 3.9. Troubleshooting Domain Controller Promotion or Demotion Problems
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. 3.10. Verifying the Promotion of a Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    12. 3.11. Removing an Unsuccessfully Demoted Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    13. 3.12. Renaming a Domain Controller
      1. Problem
      2. Solution
        1. Windows 2000 Active Directory
        2. Windows Server 2003 Active Directory
      3. Discussion
      4. See Also
    14. 3.13. Finding the Domain Controllers for a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 3.14. Finding the Closest Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      4. See Also
    16. 3.15. Finding a Domain Controller’s Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    17. 3.16. Moving a Domain Controller to a Different Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    18. 3.17. Finding the Services a Domain Controller Is Advertising
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    19. 3.18. Restoring a Deleted Domain Controller
      1. Problem
        1. Using a graphical user interface
        2. Using a command-line interface
      2. Discussion
      3. See Also
    20. 3.19. Resetting the TCP/IP Stack on a Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    21. 3.20. Configuring a Domain Controller to Use an External Time Source
      1. Problem
      2. Solution
        1. Using the Registry
        2. Using VBScript
      3. Discussion
      4. See Also
    22. 3.21. Finding the Number of Logon Attempts Made Against a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    23. 3.22. Enabling the /3GB Switch to Increase the LSASS Cache
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    24. 3.23. Cleaning Up Distributed Link Tracking Objects
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    25. 3.24. Enabling and Disabling the Global Catalog
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    26. 3.25. Determining Whether Global Catalog Promotion Is Complete
      1. Problem
      2. Solution
        1. Using the Registry
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    27. 3.26. Finding the Global Catalog Servers in a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    28. 3.27. Finding the Domain Controllers or Global Catalog Servers in a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    29. 3.28. Finding Domain Controllers and Global Catalogs via DNS
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    30. 3.29. Changing the Preference for a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    31. 3.30. Disabling the Global Catalog Requirement During a Domain Login
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    32. 3.31. Disabling the Global Catalog Requirement for Windows Server 2003 or Windows Server 2008
      1. Problem
      2. Solution
    33. 3.32. Finding the FSMO Role Holders
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    34. 3.33. Transferring a FSMO Role
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      4. See Also
    35. 3.34. Seizing a FSMO Role
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
      3. Discussion
      4. See Also
    36. 3.35. Finding the PDC Emulator FSMO Role Owner via DNS
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    37. 3.36. Finding the PDC Emulator FSMO Role Owner via WINS
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
  7. 4. Searching and Manipulating Objects
    1. 4.0. Introduction
      1. The Anatomy of an Object
    2. 4.1. Viewing the RootDSE
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    3. 4.2. Viewing the Attributes of an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. Using PowerShell
      5. See Also
    4. 4.3. Counting Objects in Active Directory
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
    5. 4.4. Using LDAP Controls
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    6. 4.5. Using a Fast or Concurrent Bind
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    7. 4.6. Connecting to an Object GUID
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    8. 4.7. Connecting to a Well-Known GUID
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    9. 4.8. Searching for Objects in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    10. 4.9. Searching the Global Catalog
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    11. 4.10. Searching for a Large Number of Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    12. 4.11. Searching with an Attribute-Scoped Query
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    13. 4.12. Searching with a Bitwise Filter
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    14. 4.13. Creating an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    15. 4.14. Modifying an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    16. 4.15. Modifying a Bit Flag Attribute
      1. Problem
      2. Solution
        1. Using VBScript
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    17. 4.16. Dynamically Linking an Auxiliary Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    18. 4.17. Creating a Dynamic Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    19. 4.18. Refreshing a Dynamic Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    20. 4.19. Modifying the Default TTL Settings for Dynamic Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    21. 4.20. Moving an Object to a Different OU or Container
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    22. 4.21. Moving an Object to a Different Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    23. 4.22. Referencing an External Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    24. 4.23. Renaming an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    25. 4.24. Deleting an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    26. 4.25. Deleting a Container That Has Child Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    27. 4.26. Viewing the Created and Last Modified Timestamp of an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    28. 4.27. Modifying the Default LDAP Query Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    29. 4.28. Exporting Objects to an LDIF File
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using a command-line interface
      4. See Also
    30. 4.29. Importing Objects Using an LDIF File
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    31. 4.30. Exporting Objects to a CSV File
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    32. 4.31. Importing Objects Using a CSV File
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
  8. 5. Organizational Units
    1. 5.0. Introduction
      1. The Anatomy of an Organizational Unit
    2. 5.1. Creating an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    3. 5.2. Enumerating the OUs in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
    4. 5.3. Finding an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    5. 5.4. Enumerating the Objects in an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    6. 5.5. Deleting the Objects in an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    7. 5.6. Deleting an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. 5.7. Moving the Objects in an OU to a Different OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    9. 5.8. Moving an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 5.9. Renaming an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    11. 5.10. Modifying an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    12. 5.11. Determining Approximately How Many Child Objects an OU Has
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    13. 5.12. Delegating Control of an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    14. 5.13. Assigning or Removing a Manager for an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 5.14. Linking a GPO to an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    16. 5.15. Protecting an OU Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface (Windows Server 2008 only)
        2. Using a command-line interface (all versions)
        3. Using PowerShell (all versions)
      3. Discussion
  9. 6. Users
    1. 6.0. Introduction
      1. The Anatomy of a User
    2. 6.1. Modifying the Default Display Name Used When Creating Users in ADUC
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    3. 6.2. Creating a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    4. 6.3. Creating a Large Number of Users
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    5. 6.4. Creating an inetOrgPerson User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    6. 6.5. Converting a user Object to an inetOrgPerson Object (or Vice Versa)
      1. Problem
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      2. Discussion
      3. See Also
    7. 6.6. Modifying an Attribute for Several Users at Once
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    8. 6.7. Deleting a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    9. 6.8. Setting a User’s Profile Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 6.9. Moving a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    11. 6.10. Redirecting Users to an Alternative OU
      1. Problem
        1. Using a graphical user interface
        2. Using the command-line interface
      2. Discussion
      3. See Also
    12. 6.11. Renaming a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    13. 6.12. Copying a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
      4. See Also
    14. 6.13. Finding Locked-Out Users
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    15. 6.14. Unlocking a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    16. 6.15. Troubleshooting Account Lockout Problems
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    17. 6.16. Viewing the Domain-Wide Account Lockout and Password Policies
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    18. 6.17. Applying a Fine-Grained Password Policy to a User Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    19. 6.18. Viewing the Fine-Grained Password Policy That Is in Effect for a User Account
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command prompt
        3. Using PowerShell
      3. Discussion
      4. See Also
    20. 6.19. Enabling and Disabling a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    21. 6.20. Finding Disabled Users
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    22. 6.21. Viewing a User’s Group Membership
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    23. 6.22. Removing All Group Memberships from a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    24. 6.23. Changing a User’s Primary Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    25. 6.24. Copying a User’s Group Membership to Another User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    26. 6.25. Setting a User’s Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    27. 6.26. Preventing a User from Changing a Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    28. 6.27. Requiring a User to Change a Password at Next Logon
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    29. 6.28. Preventing a User’s Password from Expiring
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    30. 6.29. Finding Users Whose Passwords Are About to Expire
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    31. 6.30. Viewing the RODCs That Have Cached a User’s Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    32. 6.31. Setting a User’s Account Options (userAccountControl)
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. $objUser.SetInfo()Discussion
      4. See Also
    33. 6.32. Setting a User’s Account to Expire
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    34. 6.33. Determining a User’s Last Logon Time
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    35. 6.34. Finding Users Who Have Not Logged On Recently
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    36. 6.35. Viewing and Modifying a User’s Permitted Logon Hours
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using VBScript and PowerShell
      4. See Also
    37. 6.36. Viewing a User’s Managed Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    38. 6.37. Creating a UPN Suffix for a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    39. 6.38. Restoring a Deleted User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command line interface
      3. Discussion
      4. See Also
    40. 6.39. Protecting a User Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface (Windows Server 2008 only)
        2. Using a command-line interface (all versions)
        3. Using PowerShell (all versions)
      3. Discussion
  10. 7. Groups
    1. 7.0. Introduction
      1. The Anatomy of a Group
    2. 7.1. Creating a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    3. 7.2. Viewing the Permissions of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    4. 7.3. Viewing the Direct Members of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    5. 7.4. Viewing the Nested Members of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    6. 7.5. Adding and Removing Members of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    7. 7.6. Moving a Group Within a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    8. 7.7. Moving a Group to Another Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
    9. 7.8. Changing the Scope or Type of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 7.9. Modifying Group Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    11. 7.10. Creating a Dynamic Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    12. 7.11. Delegating Control for Managing Membership of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    13. 7.12. Resolving a Primary Group ID
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    14. 7.13. Enabling Universal Group Membership Caching
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 7.14. Restoring a Deleted Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command line interface
      3. Discussion
      4. See Also
    16. 7.15. Protecting a Group Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface (Windows Server 2008 only)
        2. Using a command-line interface (all versions)
        3. Using PowerShell (all versions)
      3. Discussion
    17. 7.16. Applying a Fine-Grained Password Policy to a Group Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  11. 8. Computer Objects
    1. 8.0. Introduction
    2. 8.1. The Anatomy of a computer Object
    3. 8.2. Creating a Computer
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    4. 8.3. Creating a Computer for a Specific User or Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    5. 8.4. Deleting a Computer
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
    6. 8.5. Joining a Computer to a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    7. 8.6. Moving a Computer Within the Same Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    8. 8.7. Moving a Computer to a New Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    9. 8.8. Renaming a Computer
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    10. 8.9. Adding or Removing a Computer Account from a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    11. 8.10. Testing the Secure Channel for a Computer
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    12. 8.11. Resetting a Computer Account
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    13. 8.12. Finding Inactive or Unused Computers
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    14. 8.13. Changing the Maximum Number of Computers a User Can Join to the Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 8.14. Modifying the Attributes of a computer Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    16. 8.15. Finding Computers with a Particular OS
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    17. 8.16. Binding to the Default Container for Computers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    18. 8.17. Changing the Default Container for Computers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    19. 8.18. Listing All the Computer Accounts in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript and PowerShell
      4. See Also
    20. 8.19. Identifying a Computer Role
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
    21. 8.20. Protecting a Computer Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface (Windows Server 2008 only)
        2. Using a command-line interface (all versions)
        3. Using PowerShell (all versions)
      3. Discussion
    22. 8.21. Viewing the RODCs That Have Cached a Computer’s Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
  12. 9. Group Policy Objects
    1. 9.0. Introduction
      1. Managing GPOs
    2. 9.1. Finding the GPOs in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    3. 9.2. Creating a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    4. 9.3. Copying a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    5. 9.4. Deleting a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    6. 9.5. Viewing the Settings of a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    7. 9.6. Modifying the Settings of a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
        3. Using a command-line interface, VBScript, or PowerShell
      3. Discussion
      4. See Also
    8. 9.7. Importing Settings into a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    9. 9.8. Creating a Migration Table
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    10. 9.9. Creating Custom Group Policy Settings
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. 9.10. Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    12. 9.11. Installing Applications with a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    13. 9.12. Disabling the User or Computer Settings in a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    14. 9.13. Listing the Links for a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    15. 9.14. Creating a GPO Link to an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    16. 9.15. Blocking Inheritance of GPOs on an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    17. 9.16. Enforcing the Settings of a GPO Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
      3. Discussion
        1. Using VBScript
      4. See Also
    18. 9.17. Applying a Security Filter to a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    19. 9.18. Delegating Administration of GPOs
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    20. 9.19. Importing a Security Template
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    21. 9.20. Creating a WMI Filter
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
      3. Discussion
      4. See Also
    22. 9.21. Applying a WMI Filter to a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    23. 9.22. Configuring Loopback Processing for a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    24. 9.23. Backing Up a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
        2. Using PowerShell
      4. See Also
    25. 9.24. Restoring a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    26. 9.25. Simulating the RSoP
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    27. 9.26. Viewing the RSoP
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    28. 9.27. Refreshing GPO Settings on a Computer
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    29. 9.28. Restoring a Default GPO
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    30. 9.29. Creating a Fine-Grained Password Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    31. 9.30. Editing a Fine-Grained Password Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    32. 9.31. Viewing the Effective PSO for a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  13. 10. Schema
    1. 10.0. Introduction
      1. The Anatomy of Schema Objects
    2. 10.1. Registering the Active Directory Schema MMC Snap-in
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    3. 10.2. Enabling Schema Updates
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    4. 10.3. Generating an OID to Use for a New Class or Attribute
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    5. 10.4. Extending the Schema
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    6. 10.5. Preparing the Schema for an Active Directory Upgrade
      1. Problem
      2. Solution
        1. From a graphical user interface
      3. Discussion
      4. See Also
    7. 10.6. Documenting Schema Extensions
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    8. 10.7. Adding a New Attribute
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    9. 10.8. Viewing an Attribute
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 10.9. Adding a New Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    11. 10.10. Viewing a Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    12. 10.11. Indexing an Attribute
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    13. 10.12. Modifying the Attributes That Are Copied When Duplicating a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    14. 10.13. Adding Custom Information to ADUC
      1. Problem
      2. Solution
        1. Using VBScript
      3. Discussion
      4. See Also
    15. 10.14. Modifying the Attributes Included with ANR
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    16. 10.15. Modifying the Set of Attributes Stored on a Global Catalog
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    17. 10.16. Finding Nonreplicated and Constructed Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    18. 10.17. Finding the Linked Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    19. 10.18. Finding the Structural, Auxiliary, Abstract, and 88 Classes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    20. 10.19. Finding the Mandatory and Optional Attributes of a Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    21. 10.20. Modifying the Default Security of a Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    22. 10.21. Managing the Confidentiality Bit
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    23. 10.22. Adding an Attribute to the Read-Only Filtered Attribute Set (RO-FAS)
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    24. 10.23. Deactivating Classes and Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    25. 10.24. Redefining Classes and Attributes
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    26. 10.25. Reloading the Schema Cache
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    27. 10.26. Managing the Schema Master FSMO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
  14. 11. Site Topology
    1. 11.0. Introduction
      1. The Anatomy of Site Topology Objects
    2. 11.1. Creating a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    3. 11.2. Listing Sites in a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    4. 11.3. Renaming a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    5. 11.4. Deleting a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    6. 11.5. Delegating Control of a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
      4. See Also
    7. 11.6. Configuring Universal Group Caching for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    8. 11.7. Creating a Subnet
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    9. 11.8. Listing the Subnets
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 11.9. Finding Missing Subnets
      1. Problem
      2. Solution
      3. See Also
    11. 11.10. Deleting a Subnet
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    12. 11.11. Changing a Subnet’s Site Assignment
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    13. 11.12. Creating a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    14. 11.13. Finding the Site Links for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    15. 11.14. Modifying the Sites That Are Part of a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    16. 11.15. Modifying the Cost for a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    17. 11.16. Enabling Change Notification for a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    18. 11.17. Modifying Replication Schedules
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
      3. Discussion
        1. Using VBScript
      4. See Also
    19. 11.18. Disabling Site Link Transitivity or Site Link Schedules
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    20. 11.19. Creating a Site Link Bridge
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    21. 11.20. Finding the Bridgehead Servers for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    22. 11.21. Setting a Preferred Bridgehead Server for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    23. 11.22. Listing the Servers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    24. 11.23. Moving a Domain Controller to a Different Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    25. 11.24. Configuring a Domain Controller to Cover Multiple Sites
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    26. 11.25. Viewing the Site Coverage for a Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
      3. Discussion
      4. See Also
    27. 11.26. Disabling Automatic Site Coverage for a Domain Controller
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    28. 11.27. Finding the Site for a Client
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
      3. Discussion
      4. See Also
    29. 11.28. Forcing a Host into a Particular Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    30. 11.29. Creating a Connection Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    31. 11.30. Listing the connection Objects for a Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    32. 11.31. Load-Balancing connection Objects
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    33. 11.32. Finding the ISTG for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    34. 11.33. Transferring the ISTG to Another Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    35. 11.34. Triggering the KCC
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    36. 11.35. Determining Whether the KCC Is Completing Successfully
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    37. 11.36. Disabling the KCC for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    38. 11.37. Changing the Interval at Which the KCC Runs
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
  15. 12. Replication
    1. 12.0. Introduction
    2. 12.1. Determining Whether Two Domain Controllers Are in Sync
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    3. 12.2. Viewing the Replication Status of Several Domain Controllers
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    4. 12.3. Viewing Unreplicated Changes Between Two Domain Controllers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    5. 12.4. Forcing Replication from One Domain Controller to Another
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    6. 12.5. Enabling and Disabling Replication
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    7. 12.6. Changing the Intra-Site Replication Interval
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    8. 12.7. Changing the Intra-Site Notification Delay
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    9. 12.8. Changing the Inter-Site Replication Interval
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 12.9. Disabling Inter-Site Compression of Replication Traffic
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    11. 12.10. Checking for Potential Replication Problems
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. 12.11. Enabling Enhanced Logging of Replication Events
      1. Problem
      2. Solution
      3. See Also
    13. 12.12. Enabling Strict or Loose Replication Consistency
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    14. 12.13. Finding Conflict Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 12.14. Finding Orphaned Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    16. 12.15. Listing the Replication Partners for a DC
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    17. 12.16. Viewing Object Metadata
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
  16. 13. DNS and DHCP
    1. 13.0. Introduction
      1. The Anatomy of a DNS Object
    2. 13.1. Creating a Forward Lookup Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      4. See Also
    3. 13.2. Creating a Reverse Lookup Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    4. 13.3. Viewing a Server’s Zones
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      4. See Also
    5. 13.4. Converting a Zone to an AD-Integrated Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    6. 13.5. Moving AD-Integrated Zones into an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    7. 13.6. Configuring Zone Transfers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    8. 13.7. Configuring Forwarding
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    9. 13.8. Delegating Control of an Active Directory Integrated Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 13.9. Creating and Deleting Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
    11. 13.10. Querying Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    12. 13.11. Modifying the DNS Server Configuration
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    13. 13.12. Scavenging Old Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    14. 13.13. Clearing the DNS Cache
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    15. 13.14. Verifying That a Domain Controller Can Register Its Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    16. 13.15. Enabling DNS Server Debug Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    17. 13.16. Registering a Domain Controller’s Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    18. 13.17. Deregistering a Domain Controller’s Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    19. 13.18. Preventing a Domain Controller from Dynamically Registering All Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    20. 13.19. Preventing a Domain Controller from Dynamically Registering Certain Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    21. 13.20. Allowing Computers to Use a Different Domain Suffix Than Their AD Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    22. 13.21. Authorizing a DHCP Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    23. 13.22. Locating Unauthorized DHCP Servers
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    24. 13.23. Restricting DHCP Administrators
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
  17. 14. Security and Authentication
    1. 14.0. Introduction
    2. 14.1. Enabling SSL/TLS
      1. Problem
      2. Solution
        1. Using a graphical user interface in Windows 2000 Server and Windows Server 2003
        2. Using a graphical user interface in Windows Server 2008
      3. Discussion
      4. See Also
    3. 14.2. Encrypting LDAP Traffic with SSL, TLS, or Signing
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    4. 14.3. Disabling LDAP Signing or Encryption
      1. Problem
      2. Solution
        1. Using the Registry
        2. Using PowerShell
      3. Discussion
      4. See Also
    5. 14.4. Enabling Anonymous LDAP Access
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. 14.5. Restricting Anonymous Access to Active Directory
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    7. 14.6. Using the Delegation of Control Wizard
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. 14.7. Customizing the Delegation of Control Wizard
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    9. 14.8. Revoking Delegated Permissions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. 14.9. Viewing the ACL for an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    11. 14.10. Customizing the ACL Editor
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. 14.11. Viewing the Effective Permissions on an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    13. 14.12. Configuring Permission Inheritance
      1. Problem
      2. Solution
        1. Using a VBScript
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. 14.13. Changing the ACL of an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 14.14. Changing the Default ACL for an Object Class in the Schema
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    16. 14.15. Comparing the ACL of an Object to the Default Defined in the Schema
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    17. 14.16. Resetting an Object’s ACL to the Default Defined in the Schema
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    18. 14.17. Preventing the LM Hash of a Password from Being Stored
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    19. 14.18. Enabling Strong Domain Authentication
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    20. 14.19. Enabling List Object Access Mode
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
      3. Discussion
        1. Using VBScript
      4. See Also
    21. 14.20. Modifying the ACL on Administrator Accounts
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    22. 14.21. Viewing and Purging Your Kerberos Tickets
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    23. 14.22. Forcing Kerberos to Use TCP
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    24. 14.23. Modifying Kerberos Settings
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    25. 14.24. Viewing Access Tokens
      1. Problem
        1. Using a command-line interface
      2. Discussion
      3. See Also
  18. 15. Logging, Monitoring, and Quotas
    1. 15.0. Introduction
      1. The Anatomy of a Quota Object Container
      2. The Anatomy of a Quota Object
    2. 15.1. Enabling Extended dcpromo Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    3. 15.2. Enabling Diagnostics Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    4. 15.3. Enabling NetLogon Logging
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    5. 15.4. Enabling GPO Client Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    6. 15.5. Enabling Kerberos Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    7. 15.6. Viewing DNS Server Performance Statistics
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    8. 15.7. Monitoring the File Replication Service
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    9. 15.8. Monitoring the Windows Time Service
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    10. 15.9. Enabling Inefficient and Expensive LDAP Query Logging
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. 15.10. Using the STATS Control to View LDAP Query Statistics
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    12. 15.11. Monitoring the Performance of AD
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    13. 15.12. Using Perfmon Trace Logs to Monitor AD
      1. Problem
      2. Solution
        1. Using Windows 2000 and Windows Server 2003
        2. Using Windows Server 2008
      3. Discussion
      4. See Also
    14. 15.13. Creating an Administrative Alert
      1. Problem
      2. Solution
        1. Using Windows 2000 or Windows Server 2003
        2. Using Windows Server 2008
      3. Discussion
      4. See Also
    15. 15.14. Emailing an Administrator on a Performance Alert
      1. Problem
      2. Solution
        1. Using VBScript
        2. Using PowerShell
      3. Discussion
        1. Using VBScript
      4. See Also
    16. 15.15. Enabling Auditing of Directory Access
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    17. 15.16. Enabling Auditing of Registry Keys
      1. Problem
        1. Using a graphical user interface
      2. Discussion
      3. See Also
    18. 15.17. Creating a Quota
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    19. 15.18. Finding the Quotas Assigned to a Security Principal
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    20. 15.19. Changing How Tombstone Objects Count Against Quota Usage
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    21. 15.20. Setting the Default Quota for All Security Principals in a Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
    22. 15.21. Finding the Quota Usage for a Security Principal
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
  19. 16. Backup, Recovery, DIT Maintenance, and Deleted Objects
    1. 16.0. Introduction
      1. The Anatomy of a Deleted Object
    2. 16.1. Backing Up Active Directory in Windows 2000 and Windows Server 2003
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    3. 16.2. Backing Up Active Directory in Windows Server 2008
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    4. 16.3. Creating an Active Directory Snapshot
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    5. 16.4. Mounting an Active Directory Snapshot
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    6. 16.5. Accessing Active Directory Snapshot Data
      1. Problem
      2. Solution
        1. Using VBScript
        2. Using PowerShell
      3. Discussion
      4. See Also
    7. 16.6. Restarting a Domain Controller in Directory Services Restore Mode
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    8. 16.7. Resetting the Directory Service Restore Mode Administrator Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    9. 16.8. Performing a Nonauthoritative Restore
      1. Problem
      2. Solution
        1. Using a graphical user interface (for Windows 2000 and Windows Server 2003)
        2. Using a command-line interface (for Windows Server 2008)
      3. Discussion
      4. See Also
    10. 16.9. Performing an Authoritative Restore of an Object or Subtree
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. 16.10. Performing a Complete Authoritative Restore
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. 16.11. Checking the DIT File’s Integrity
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    13. 16.12. Moving the DIT Files
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    14. 16.13. Repairing or Recovering the DIT
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    15. 16.14. Performing an Online Defrag Manually
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    16. 16.15. Performing a Database Recovery
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    17. 16.16. Creating a Reserve File
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    18. 16.17. Determining How Much Whitespace Is in the DIT
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    19. 16.18. Performing an Offline Defrag to Reclaim Space
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    20. 16.19. Changing the Garbage Collection Interval
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    21. 16.20. Logging the Number of Expired Tombstone Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    22. 16.21. Determining the Size of the Active Directory Database
      1. Problem
      2. Solution
        1. Using a command-line interface in Windows Server 2003
        2. Using a command-line interface in Windows Server 2008
      3. Discussion
      4. See Also
    23. 16.22. Searching for Deleted Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    24. 16.23. Undeleting a Single Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    25. 16.24. Undeleting a Container Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    26. 16.25. Modifying the Tombstone Lifetime for a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
  20. 17. Application Partitions
    1. 17.0. Introduction
      1. The Anatomy of an Application Partition
    2. 17.1. Creating and Deleting an Application Partition
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    3. 17.2. Finding the Application Partitions in a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    4. 17.3. Adding or Removing a Replica Server for an Application Partition
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    5. 17.4. Finding the Replica Servers for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    6. 17.5. Finding the Application Partitions Hosted by a Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    7. 17.6. Verifying Application Partitions Are Instantiated on a Server Correctly
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    8. 17.7. Setting the Replication Notification Delay for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    9. 17.8. Setting the Reference Domain for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    10. 17.9. Delegating Control of Managing an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
  21. 18. Active Directory Application Mode and Active Directory Lightweight Directory Service
    1. 18.0. Introduction
    2. 18.1. Installing ADAM/AD LDS
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    3. 18.2. Creating a New ADAM/AD LDS Instance
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface on all versions of ADAM and AD LDS
      3. Discussion
      4. See Also
    4. 18.3. Creating a New Replica of an ADAM/AD LDS Configuration Set
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface on all versions
      3. Discussion
      4. See Also
    5. 18.4. Stopping and Starting an ADAM/AD LDS Instance
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    6. 18.5. Changing the Ports Used by an ADAM/AD LDS Instance
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. 18.6. Listing the ADAM Instances Installed on a Computer
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. 18.7. Extending the ADAM/AD LDS Schema
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    9. 18.8. Managing ADAM/AD LDS Application Partitions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
      4. See Also
    10. 18.9. Managing ADAM/AD LDS Organizational Units
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    11. 18.10. Managing ADAM Users
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    12. 18.11. Changing the Password for an ADAM or AD LDS User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    13. 18.12. Enabling and Disabling an ADAM User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    14. 18.13. Creating ADAM or AD LDS Groups
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    15. 18.14. Managing ADAM or AD LDS Group Memberships
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. NextUsing PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    16. 18.15. Viewing and Modifying ADAM Object Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    17. 18.16. Importing Data into an ADAM or AD LDS Instance
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    18. 18.17. Configuring Intra-site Replication
      1. Problem
        1. Using a graphical user interface
        2. Discussion
      2. See Also
    19. 18.18. Forcing ADAM/AD LDS Replication
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    20. 18.19. Managing AD LDS Replication Authentication
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    21. 18.20. Managing ADAM/AD LDS Permissions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    22. 18.21. Enabling Auditing of AD LDS Access
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
  22. 19. Active Directory Federation Services
    1. 19.0. Introduction
      1. Using a Graphical User Interface
    2. 19.1. Installing AD FS Prerequisites for Windows Server 2003 R2
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    3. 19.2. Installing AD FS Prerequisites for Windows Server 2008
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    4. 19.3. Installing the Federation Service in Windows Server 2003 R2
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    5. 19.4. Installing the Federation Service on Windows Server 2008
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    6. 19.5. Configuring an Active Directory Account Store
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    7. 19.6. Configuring an ADAM or AD LDS Account Store
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    8. 19.7. Creating Organizational Claims
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    9. 19.8. Creating an Account Partner
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    10. 19.9. Configuring a Resource Partner
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    11. 19.10. Configuring an Application
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    12. 19.11. Configuring a Forest Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    13. 19.12. Configuring an Alternate UPN Suffix
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using VBScript
      4. See Also
    14. 19.13. Configuring the AD FS Web Agent
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    15. 19.14. Enabling Logging for the AD FS Web Agent
      1. Problem
      2. Solution
        1. Using the registry
        2. Using VBScript
        3. Using PowerShell
      3. Discussion
      4. See Also
  23. 20. Microsoft Exchange Server 2007 and Exchange Server 2003
    1. 20.0. Introduction
    2. 20.1. Exchange Server and Active Directory
    3. 20.2. Exchange Server 2007 Architecture
    4. 20.3. Exchange Administration Tools
      1. Exchange 2003 Tools
      2. Exchange 2007 Tools
      3. Exchange Management Shell
      4. Exchange Management Console
      5. Exchange 2007 Scripts Folder
      6. Third-Party Tools
      7. Problem
      8. Exchange 2007 Solution
        1. Using PowerShell
      9. Discussion
      10. See Also
    5. 20.4. Preparing Active Directory for Exchange
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      4. Discussion
      5. See Also
    6. 20.5. Installing the First Exchange Server in an Organization
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
      5. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      6. Discussion
      7. See Also
    7. 20.6. Creating Unattended Installation Files for Exchange Server
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
      3. Exchange 2007 Solution
        1. Using a command-line interface
      4. Discussion
      5. See Also
    8. 20.7. Installing Exchange Management Tools
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      5. Discussion
      6. See Also
    9. 20.8. Stopping and Starting Exchange Server
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using PowerShell
      4. Discussion
      5. See Also
    10. 20.9. Mail-Enabling a User
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      4. See Also
      5. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      6. Discussion
    11. 20.10. Mail-Disabling a User
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      5. See Also
    12. 20.11. Mailbox-Enabling a User
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using a command-line interface
        2. Using VBScript
      5. See Also
    13. 20.12. Deleting a User’s Mailbox
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using VBScript
      5. See Also
    14. 20.13. Moving a Mailbox
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      5. See Also
    15. 20.14. Viewing Mailbox Sizes and Message Counts
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using VBScript
      3. Exchange 2007 Solution
        1. Using PowerShell
      4. Discussion
        1. Using a graphical user interface
        2. Using VBScript
        3. Using PowerShell
      5. See Also
    16. 20.15. Configuring Mailbox Limits
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
      5. See Also
    17. 20.16. Creating an Address List
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      5. See Also
    18. 20.17. Creating a Storage Group
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      5. See Also
    19. 20.18. Creating a Mailbox Store
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
        1. Using a command-line interface
        2. Using VBScript
        3. Using PowerShell
      5. See Also
    20. 20.19. Installing Anti-Spam Agents on the Hub Transport Servers
      1. Problem
      2. Exchange 2007 Solution
        1. Using the command-line interface
      3. Discussion
      4. See Also
    21. 20.20. Enabling Message Tracking
      1. Problem
      2. Exchange 2003 Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
      3. Exchange 2007 Solution
        1. Using a graphical user interface
        2. Using PowerShell
      4. Discussion
      5. See Also
    22. 20.21. Summary
  24. 21. Microsoft Identity Lifecycle Manager
    1. 21.0. Introduction
      1. Feature Pack Versus Feature Pack
      2. Requirements for ILM
        1. SQL and ILM collocation
      3. ILM Primer
        1. Importing data
        2. The connector space
        3. The Metaverse
        4. Projection and joins
        5. The many faces of the connector
        6. State-based synchronization
      4. Management Agents
        1. Run profiles
        2. The Metaverse Designer
        3. Attribute flow rules
        4. The scenario
      5. See Also
    2. 21.1. Creating the HR Database MA
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    3. 21.2. Creating an Active Directory MA
      1. Problem
      2. Solution
      3. Discussion
        1. See Also
    4. 21.3. Setting Up a Metaverse Object Deletion Rule
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    5. 21.4. Setting Up Simple Import Attribute Flow—HR Database MA
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    6. 21.5. Setting Up a Simple Export Attribute Flow to AD
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. 21.6. Defining an Advanced Import Attribute Flow—HR Database MA
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    8. 21.7. Implementing an Advanced Attribute Flow Rules Extension—HR Database MA
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    9. 21.8. Setting Up Advanced Export Attribute Flow in Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    10. 21.9. Configuring a Run Profile to Do an Initial Load of Data from the HR Database MA
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. 21.10. Loading Initial HR Database Data into ILM Using a Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. 21.11. Configuring a Run Profile to Load the Container Structure from AD
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    13. 21.12. Loading the Initial AD Container Structure into ILM Using a Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    14. 21.13. Setting Up the HR Database MA to Project Objects to the Metaverse
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    15. 21.14. Writing a Rules Extension to Provision User Objects
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    16. 21.15. Creating a Run Profile for Provisioning
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    17. 21.16. Executing the Provisioning Rule
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    18. 21.17. Creating a Run Profile to Export Objects from the ADMA to Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    19. 21.18. Exporting Objects to AD Using an Export Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    20. 21.19. Testing Provisioning and Deprovisioning of User Accounts in AD
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    21. 21.20. Creating a Run Profile Script
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    22. 21.21. Creating a Controlling Script
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    23. 21.22. Enabling Directory Synchronization from AD to the HR Database
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    24. 21.23. Configuring a Run Profile to Load the telephoneNumber from AD
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    25. 21.24. Loading telephoneNumber Changes from AD into ILM Using a Delta Import and Delta Synchronization Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    26. 21.25. Exporting telephoneNumber Data to the HR Database
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    27. 21.26. Using the HR Database MA Export Run Profile to Export the Telephone Number to the HR Database
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    28. 21.27. Searching Data in the Connector Space
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    29. 21.28. Searching Data in the Metaverse
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    30. 21.29. Deleting Data in the Connector Space and Metaverse
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    31. 21.30. Extending Object Types to Include a New Attribute
      1. Problem
      2. Solution
      3. Discussion
    32. 21.31. Previewing Changes to the ILM Configuration
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    33. 21.32. Committing Changes to Individual Identities Using the Commit Preview Feature
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    34. 21.33. Passing Data Between Rules Extensions Using Transaction Properties
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    35. 21.34. Using a Single Rules Extension to Affect Multiple Attribute Flows
      1. Problem
      2. Solution
      3. Discussion
    36. 21.35. Flowing a Null Value to a Data Source
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    37. 21.36. Contributing a UTCCodedTime Attribute in Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    38. 21.37. Importing and Decoding the accountExpires Attribute
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    39. 21.38. Exporting and Encoding the accountExpires Attribute
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
  25. Index
  26. About the Authors
  27. Colophon
  28. Copyright

Product information

  • Title: Active Directory Cookbook, 3rd Edition
  • Author(s): Laura E. Hunter, Robbie Allen
  • Release date: December 2008
  • Publisher(s): O'Reilly Media, Inc.
  • ISBN: 9780596521103