Shulou(Shulou.com)05/31 Report--

What is the function of active Directory in Server 2008 R2? I believe many inexperienced people don't know what to do about it. Therefore, this article summarizes the causes and solutions of the problem. Through this article, I hope you can solve this problem.

Active Directory service is one of the central components of the Windows 2000 operating system platform. Understanding the active Directory is important to understand the overall value of Windows Server. This article introduces the important functions of the new active Directory Management Center in Windows Server 2008 R2. For administrators who are in frequent contact with Windows Server, mastering the active Directory will make your job easier.

Central Administration profile-on the main form, there are some special "windows" that allow you to manage common tasks. These can be controlled by the add content option. Unfortunately, only password changes, global searches, and "getting started" are currently available. Microsoft promises to add more content, and if so, this option will undoubtedly make it quick and easy for us to access common tasks.

Add Navigation Node-this link opens a dialog box (figure A) that allows you to browse all trusted domains, containers, and organizational units. In ADAC, they can be added to the navigation tree independently. In the following example, I have joined organizational units in three different domains in the same forest, but they can also join if other forests are available. This feature allows us to make custom arrangements for containers in all domains.

Figure An adds a navigation node to the AD Management Center

Display user object properties in a "flat" way-these properties are arranged in an easy-to-see format, which reduces clicks and makes them easier to find than AD users and computer snap-ins. In addition, the extension kit includes an attribute editor (shown in figure B), which reduces the number of times you use the ADSI editing tool to view or edit attributes.

Attribute Editor in figure B ADAC

Active Directory query improvement-the Global query (Global Query) option is powerful, especially for people who are good at building LDAP queries. With this option, you can select multiple search ranges from the navigation node (see the circled section in figure C). You can also click the node in the navigation window and then build a query statement to query.

Figure C ADAC's global query options

In figure D, the user interface contains filtering options with check boxes that can be saved and applied to other contexts. For administrators who are not familiar with LDAP filtering, this option is easy to use. Notice that the red circle in the figure is the "save" and "reset" items of the query, and the red box is the filtering option. To remove a filter, click the red "X" next to it. Any changes here will initiate a search immediately, but to perform a global search, you need to click the apply button.

Figure D filter options for ADAC

The active Directory Management Center is very intuitive, and the interface layout is very logical. Moreover, it allows users to customize certain features, support the PowerShell command line, and will be more flexible in the future. However, ADAC still needs to be improved, including:

Increase the number of executable PowerShell commands on the user interface, as in Exchange Server 2007. For example, you can create a new mailbox on the exchange management console, which stores PowerShell commands that can do this. If you are not familiar with PowerShell, this feature is very useful because you only need to click a few buttons in the user interface to get the corresponding PowerShell commands, and then you can use these commands.

I would also like to see Microsoft add more "windows" to the Central Administration profile section. It would be even better if you could customize these "windows".

It would be nice to include AD users and tasks available in the computer snap-in, such as copying, renaming users, and changing FSMO roles (although I prefer to use NTDSUtil).

One thing that annoys me when using ADAC is that I can't modify authentication when managing multiple domains. Maybe it can be modified, but I haven't found a way yet. It would be convenient to add a "RunAs" option to the user interface.

All in all, Microsoft has made a lot of improvements in the active Directory Management Center. However, I don't think large companies will use it because most of them have purchased more mature third-party tools. In spite of this, ADAC will still have the opportunity to use its talents, and I will still recommend this new tool to many administrators who still use the AD user and computer snap-in, because it can be of great help to administrators.

After reading the above, have you mastered what the active Directory function is in Server 2008 R2? If you want to learn more skills or want to know more about it, you are welcome to follow the industry information channel, thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.