The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the Exam Objectives presented in this chapter, and to assist you with real-life implementation of these concepts. You will also gain access to thousands of other FAQs at ITFAQnet.com.

Q: If I don t have Active Directory Users and Computers (ADUC) on my machine, where can I get it?

A: ADUC is automatically installed on domain controllers. For other machines, you need to install the adminpak.msi from the Windows Server 2003 CD (under the i386 folder). You can install the administrative tools pack on client computers (such as Windows XP Pro) so that you can manage your domain remotely from the client.

Q: I understand that user accounts are needed to log on to a Windows Server 2003 environment. I also understand that computer accounts are used to enable machines to authenticate to and be audited by Active Directory. However, I don t understand what groups are used for?

A: Groups are used for assigning permissions and organizing users for e-mails. Using groups enables you to assign permissions once to a group and have all of the permissions automatically applied to all group members.

Q: Can I use a Windows Server 2003 machine if I do not have a user account?

A: No. You must have a user account to log on to a Windows Server 2003 machine. This can be a unique account for you or it can...