Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

Whether you create one domain or many, the number of objects that
Active Directory can hold is the same10 million or so.

For information on how to delegate authority for a domain, see

Delegation earlier in this chapter.

For information on creating a Group Policy for a domain, see

Group

Policy later in this
chapter.

When specifying the name of the domain you want a computer to join,
you can specify either the DNS name of the domain (for example,

mtit.com ) or the downlevel (pre-W2K) name of the
domain (for example,

MTIT ). To display the DNS
name for a domain, use Control Panel System
Computer Name on a domain controller that belongs to the domain. To
find the downlevel name for a domain, right-click on the domain node
in the console tree of Active Directory Domains and Trusts and select
Properties General Domain name (pre-Windows
2000). Other actions you can perform on computer accounts using
Active Directory Users and Computers include the following:

Right-click on a computer

Disable

This breaks the computer's connection with the
domain and prevents it from authenticating to the domain until you
enable it. Disabling a computer account doesn't
remove it from Active Directory (use Delete to do that).

Right-click on a computer

Manage

This opens up Computer Management and connects to the selected
computer to manage its resources.

Right-click on a computer

Reset Account

If you reset a computer account, you must first remove the computer
from the domain if you want it to rejoin the domain.

See Also

Active Directory , adprep,

Delegation ,

DNS ,

Domain Controller ,

Forest ,

Group Policy , net computer,
net view,

Site ,

Trusts