Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
The Best Damn Windows Server 2003 Book Period- P41:The latest incarnation of Microsoft’s server product,Windows Server 2003, brings many new features and improvements that make the network administrator’s job easier.This chapter will briefly summarize what’s new in 2003 and introduce you to the four members of the Windows Server 2003 family: the Web Edition, the Standard Edition, the Enterprise Edition, and the Datacenter Edition. | 366 Chapter 9 Active Directory Infrastructure Overview Set Permissions on AD Objects 1. Open Active Directory Users and Computers by clicking selecting Administrative Tools in the Windows Start menu and then clicking on the Active Directory Users and Computers menu item. 2. When the MMC opens with this snap-in installed expand the console tree so that your domain and the containers within it are visible. 3. Select your domain from the console tree. From the Action menu select New and then click the Organizational Unit menu item. As shown in Figure 9.26 when the dialog box appears name the new OU TestOU and then click OK. A new OU with this name should now appear in the console tree beneath your domain. Figure 9.26 New Object Dialog Box 4. In the View menu click Advanced Features. 5. Select the TestOU OU. From the Action menu click Properties. 6. When the Properties dialog box appears click the Security tab. In the list of usernames select the name of the account you re currently logged on with. 7. In the pane below the list of usernames and groups click the Full Control check box under Allow so that a check mark appears in it.You now have full control of the OU. 8. Click the Advanced button to display the Advanced Security Settings dialog box. When the dialog box appears click the Permissions tab. As shown in the Figure 9.27. Ensure that the Allow inheritable permissions from the parent to propagate to this object and all child objects check box is checked. This will allow inheritable permissions to be applied to this OU and any within the container. Click OK to return to the previous screen. Active Directory Infrastructure Overview Chapter 9 367 Figure 9.27 Advanced Settings Dialog Box 9. Click OK to exit the Properties dialog box. Role-Based Access Control Access control can be managed based on the role an Active Directory object plays in an organization. Since objects represent users computers and other tangible elements of an organization and these people and .
