Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
Tính năng Cấp miền chức năng danh sách trước đó có chứa chỉ có tính năng Active Directory của các cấp chức năng liên quan đến đối tượng nhóm và hoạt động của mình. Nâng cao mức độ miền chức năng kích hoạt các tính năng khác, chẳng hạn như khả năng đổi tên lĩnh vực. Các đăng nhậpKhông cung cấp tính năng bổ sung. Hỗ trợ bộ điều khiển miền đang chạy Windows | CHAPTER 8 WORKING WITH COMPUTER ACCOUNTS 257 PasswordO UserPassword Specifies the password associated with the local user account indicated by the UserO parameter. OU OUDN Specifies the DN of the OU in which the program should create a computer object. When this is omitted the program creates the object in the Computers container. REBoot seconds Specifies that the computer should automatically shut down and reboot after it is joined to the domain. You can also specify the number of seconds that should elapse before the restart. The default value is 20 seconds. Creating Computer Objects While Joining to a Domain You can join a computer to a domain whether or not you have already created a computer object for it. Once the computer authenticates to the domain controller the domain controller scans the Active Directory database for a computer object with the same name as the computer. If it does not find a matching object the domain controller creates one in the Computers container using the name supplied. For the computer object to be created automatically in this manner one would expect that the user account you specify when connecting to the domain controller must have object creation privileges for the Computers container such as membership in the Administrators group. However this is not always the case. Domain users can also create computer objects themselves through an interesting indirect process. The Default Domain Controllers Policy group policy object GPO grants a user right called Add Workstations To Domain to the Authenticated Users special identity as shown in Figure 8-9. This means that any user who is successfully authenticated to Active Directory is permitted to join up to 10 workstations to the domain and create 10 associated computer objects even if they do not possess explicit object creation permissions. Figure 8-9 The Default Domain Controllers Policy user rights assignments The important thing to remember about the Add Workstations To Domain user
