The use of AD allows a person to go anywhere in a organization and log on with the username and password.They can then have access to their documents folder and start menu.
One can also create a common drive that all teachers can share files on. This common file can also be accessed from home. These are just a few of the possibilities with active directory.
This is advantageous over roaming profiles because roaming profiles require the copying of the data from the remote server to the local server.
Activities:
Mini exercise: specopsgpupdate and shutdown
This piece of software was downloaded from the following website:
http://prrd.ab.ca/~leroberts/ED5769/specopsgpupdatesetup.exe
It was downloaded and installed on the Windows Server 2008 machine. This third-party application can be used to remotely manage window clients. Once installed, go in to Administrative Tools – Users And Computers. Right- Click on the computer that you wish to shut down and choose the "Specops gpupdate" option. Once the selection is confirmed, the computer will shutdown.
Mini exercise: login scripts using group policy
Documentation was located on the Internet for creating a login script that will map the “share” folder. Before beginning,the security settings for the folder was to allow full access.
This was then stored in the scripts folder in the SYSVOL folder under the network name.
A new groupPolicy was created in the Group Policy Management window.
Select our folder (Ken Shelley) > right-click > 'Create a new GPO'.
right click on the new GPO and select ' edit'.
in the group Policy Management editor > user configuration > policies > Windows settings > Scripts Logon/Logoff - select the logon option.
The network path to the login script was identified and entered.
Redirection
I knew folder called Redirection was created on the C drive. The permissions for this folder were changed so that everyone would have “Read and Execute”, “List Folders Contents" and "Read" permissions.
A new groupPolicy was created in the Group Policy Management window.
Select our folder ( ie. Ken Shelley) > right-click > 'Create a new GPO'. It was named User My Documents Policy.
right click on the new GPO and select ' edit'.
We next went into the Group Policy Management Editor.
User Configuration > Policies > Windows Settings > Folder Redirection > Documents
right-click> document properties
in the Document Properties window, the setting that was selected was
Basic–Redirect everyone's folder to the same location
the target folder location option was Create a folder for each user under the root path
The Root Path was found by browsing.
Lyle created folders in his SYSVOL folder and they appear in ours. We moved the bat file script into th folder Lyle created.
Other Tips from the Day
- to find the shares on a server type the name of the server and it will give you all the shares.
This is a hackers dream if you have full access.
No comments:
Post a Comment