TABLE OF CONTENTS It seems natural to start a book for network administrators with the nuts and bolts of administration groups and accounts. Windows Server 2003 follows in the footsteps of Windows 2000 Server by providing network administrators with intuitive and easy-to-use tools that can be used to accomplish these tasks within a graphical user interface (GUI). Windows Server 2003 also has the ability to perform these tasks from the command line using interactive commands, or pre-written scripts and batch files.
This chapter works extensively with users and groups, and presents the information required for the Managing Users, Computers, and Groups objective of the 70-292 exam. Additionally, this chapter examines some common user authentication issues.
Some of the biggest improvements in Windows Server 2003 are the significant enhancements made to the command line utilities. The following new command line tools have been added to make the administrator s job easier:
dsadd Can be used to add new objects into Active Directory such as contacts, computers, groups, organizational units, and users.
dsmod Can be used to modify an existing object in Active Directory.
dsrm Can be used to remove an existing object from Active Directory.
dsmove Can be used to move a single object in Active Directory within the same domain from one location to another. Can also be used to rename an object without moving it.
dsquery Can be used to query Active Directory per the specified criteria to locate a specific object...
