14-Creating And Managing Active Directory Users And Computers

Front 1

Two types of users on 2012

Back 1

Local UsersDomain Users

Front 2

Local Users

Back 2

Can only access resources on a local computer and are stored on the local SAM database on the computer where they reside.

Front 3

SAM

Back 3

Security Account Manager -- database present on servers that stores user accounts and security descriptors for users on the local computer

Front 4

Domain Users

Back 4

Users that can access network resources. Account info is stored in the AD DS database and replicated to all domain controllers.

Front 5

Two built-in user account on computers running Windows Server 2012

Back 5

AdministratorGuest

Front 6

4 security guidelines for the administrator account

Back 6

Rename the accountuse a strong passwordlimit knowledge of who has the passworddo not use the account for non-admin tasks

Front 7

By default the guest account is ____

Back 7

Disabled and has no password

Front 8

What are two restrictions you should consider for the guest account

Back 8

Rename the account.set a strong password

Front 9

You cannot ____ the admin or guest account

Back 9

delete

Front 10

ADAC

Back 10

Active Directory Administrative Cener

Front 11

Two interfaces to create a user

Back 11

ADACActive Director Users and Computers console

Front 12

4 tools used to create multiple users and groups

Back 12

Dsadd.exeWindows PowerShellComma-separated value directory exchange (CSVDE.exe)LDIFDE.exe

Front 13

LDIFDE.exe

Back 13

LDAP Data Interchange Format Directory Exchange

Front 14

User Template

Back 14

A standard user object containing boilerplate attribute settings that you can apply to new users that you create.

Front 15

Which exe file can you use to create objects like users groups and OUs?

Back 15

Dsadd.exeLDIFDE.exe

Front 16

Header Record

Back 16

The first line of the a CSV text file that provides attribute names.

Front 17

Difference between Dsadd.ee and lfifde.exe?

Back 17

LFIFDE.exe allows you to modify objects that are already created.

Front 18

What do computer objects share with user objects?

Back 18

They have properties like name location and who can manage them.They inherit group policy settings from container objects like domains sites and organizational unitsThey can be members of groups and inherit permissions from group objects

Front 19

Before a client PC sends login credentials to the DC what happens?

Back 19

The client PC and the DC each verify that the other is a member of the domain by checking that their computer object is in the DC

Front 20

2 steps to adding a computer to AD DS

Back 20

Create a computer account in Active DirectoryJoin the PC to the domainNote that joining a PC to the domain will allow the computer to create its own object

Front 21

DN

Back 21

Distinguished Name. Unique name for an object

Front 22

What EXE can be used to create computer objects?

Back 22

Dsadd.exe

Front 23

How do you change more than one object at a time?

Back 23

Select multiple objects (shift control) and right-click properties.

Front 24

What EXE can be used to join a computer to a domain?

Back 24

netdom.exe

Front 25

How can you joing a PC to a domain while the PC is offline?

Back 25

djoin.exeRun this once on a PC connected to the domain. Use the outputed text file when running it again on a PC not connected. Once connected the offline PC will use the file to join the domain.