Preface |
|
xiii | |
I. The Basics |
|
1 | (102) |
|
|
3 | (6) |
|
|
4 | (1) |
|
How Objects Are Stored in Active Directory |
|
|
5 | (1) |
|
Uniquely Identifying Objects |
|
|
5 | (3) |
|
|
8 | (1) |
|
Active Directory Overview |
|
|
9 | (25) |
|
A Simple View of How It All Works |
|
|
9 | (4) |
|
A More Detailed View of How It All Works |
|
|
13 | (16) |
|
Windows NT Versus Windows 2000 |
|
|
29 | (4) |
|
|
33 | (1) |
|
|
34 | (25) |
|
The Structure of the Schema |
|
|
34 | (8) |
|
Attribute Classes (Attribute-Schema Objects) |
|
|
42 | (5) |
|
|
47 | (2) |
|
Object Classes (Class-Schema Objects) |
|
|
49 | (8) |
|
|
57 | (2) |
|
Active Directory Replication |
|
|
59 | (20) |
|
|
59 | (3) |
|
|
62 | (16) |
|
|
78 | (1) |
|
|
79 | (24) |
|
How TCP/IP and DDNS Are Used |
|
|
79 | (10) |
|
How You Already Use TCP/IP and DNS |
|
|
89 | (8) |
|
|
97 | (2) |
|
|
99 | (2) |
|
|
101 | (2) |
II. Designing the Directory Hierarchy |
|
103 | (232) |
|
|
105 | (45) |
|
The Complexities of a Design |
|
|
107 | (1) |
|
|
108 | (1) |
|
Overview of the Design Process |
|
|
109 | (1) |
|
|
109 | (11) |
|
Design of the Internal Domain Structure |
|
|
120 | (13) |
|
Other Design Considerations |
|
|
133 | (1) |
|
|
134 | (9) |
|
Designing for the Real World |
|
|
143 | (5) |
|
|
148 | (2) |
|
Sites and Replication Topologies |
|
|
150 | (26) |
|
Intrasite and Intersite Topologies |
|
|
150 | (13) |
|
Designing Sites and Links for Replication |
|
|
163 | (7) |
|
|
170 | (5) |
|
|
175 | (1) |
|
Profiles and Group Policy Primer |
|
|
176 | (23) |
|
|
178 | (6) |
|
|
184 | (14) |
|
|
198 | (1) |
|
Designing Organization-Wide Policies |
|
|
199 | (47) |
|
How Windows 2000 GPOs Work |
|
|
199 | (25) |
|
Using the Group Policy Editor Tool |
|
|
224 | (3) |
|
Using GPOs to Help Design the Organizational Unit Structure |
|
|
227 | (16) |
|
|
243 | (1) |
|
|
244 | (2) |
|
Active Directory Security: Permissions and Auditing |
|
|
246 | (32) |
|
Using Windows 2000's GUI to Examine Permissions |
|
|
248 | (9) |
|
Using Windows 2000's GUI to Examine Auditing |
|
|
257 | (1) |
|
Designing Permission Schemes |
|
|
258 | (12) |
|
Designing Auditing Schemes |
|
|
270 | (1) |
|
|
271 | (6) |
|
|
277 | (1) |
|
|
278 | (18) |
|
Nominating Responsible People in Your Organization |
|
|
279 | (1) |
|
Thinking of Changing the Schema |
|
|
280 | (5) |
|
Managing and Modifying the Schema |
|
|
285 | (7) |
|
Wreaking Havoc with Your Schema |
|
|
292 | (2) |
|
|
294 | (2) |
|
|
296 | (16) |
|
Consolidating, Migrating, and Upgrading from NT |
|
|
296 | (2) |
|
The Principles of Upgrading Windows NT Domains |
|
|
298 | (13) |
|
|
311 | (1) |
|
Directory Interoperability |
|
|
312 | (23) |
|
Background to Interoperability with Other Directory Services |
|
|
313 | (2) |
|
Solutions for Interoperability with Other Directory Services |
|
|
315 | (4) |
|
Exchange and the Active Directory Connector |
|
|
319 | (14) |
|
A Word About Windows 2000 and Unix |
|
|
333 | (1) |
|
|
334 | (1) |
III. Scripting the Active Directory with ADSI |
|
335 | (252) |
|
|
337 | (34) |
|
What Are All These Buzzwords? |
|
|
337 | (8) |
|
Writing and Running ADSI Scripts Under Windows 2000 |
|
|
345 | (4) |
|
|
349 | (9) |
|
Simple Manipulation of ADSI Objects |
|
|
358 | (12) |
|
|
370 | (1) |
|
IADs and the Property Cache |
|
|
371 | (32) |
|
|
371 | (10) |
|
Manipulating the Property Cache |
|
|
381 | (19) |
|
Checking For Errors in VBScript |
|
|
400 | (2) |
|
|
402 | (1) |
|
|
403 | (23) |
|
Creating a Standard User Account |
|
|
403 | (1) |
|
Creating a Fully Featured User Account |
|
|
404 | (10) |
|
Creating Many User Accounts |
|
|
414 | (3) |
|
Creating an Account Unlocker Utility |
|
|
417 | (5) |
|
Automatically Creating Exchange Mailboxes for Users |
|
|
422 | (3) |
|
|
425 | (1) |
|
Manipulating Persistent and Dynamic Objects |
|
|
426 | (39) |
|
The Interface Methods and Properties |
|
|
427 | (1) |
|
Manipulating Services with ADSI |
|
|
427 | (13) |
|
Creating and Manipulating Shares with ADSI |
|
|
440 | (2) |
|
Enumerating Sessions and Resources |
|
|
442 | (13) |
|
Manipulating Print Queues and Print Jobs |
|
|
455 | (9) |
|
|
464 | (1) |
|
|
465 | (36) |
|
How to Create an ACE Using ADSI |
|
|
466 | (11) |
|
|
477 | (2) |
|
|
479 | (5) |
|
Creating Security Descriptors |
|
|
484 | (5) |
|
Listing ACEs to a File for All Objects in an OU and Below |
|
|
489 | (9) |
|
Adding Many USER Groups to DRUP Groups |
|
|
498 | (2) |
|
|
500 | (1) |
|
Extending the Schema and the GUI |
|
|
501 | (20) |
|
Modifying the Schema with ADSI |
|
|
501 | (11) |
|
Extending Active Directory GUI to Meet Business and Organizational Needs |
|
|
512 | (8) |
|
|
520 | (1) |
|
Enhancing ADSI via an ASP or VB Interface |
|
|
521 | (28) |
|
VBScript Limitations and Solutions |
|
|
522 | (1) |
|
How to Avoid Problems When Using ADSI and ASP |
|
|
523 | (1) |
|
Combining VBScript and HTML |
|
|
524 | (5) |
|
Binding to Objects via Authentication |
|
|
529 | (11) |
|
Migrating Your ADSI Scripts from VBScript to VB |
|
|
540 | (8) |
|
|
548 | (1) |
|
Scripting Fast Searches Using ADO |
|
|
549 | (38) |
|
|
550 | (6) |
|
Other Ways of Connecting and Retrieving Results |
|
|
556 | (3) |
|
Understanding Search Filters |
|
|
559 | (7) |
|
Incorporating Searches into Active Server Pages |
|
|
566 | (14) |
|
|
580 | (2) |
|
A More Advanced Search Function---SearchAD |
|
|
582 | (3) |
|
|
585 | (2) |
Index |
|
587 | |