Chapter 5

This chapter was devoted to AD administration or more specifically, how to deal with user and group accounts. User accounts are the method users access network resources. These allow users to access the network either on a specific machine (local account) and domain accounts, which are used to access network-associated resources. The second is a group account, where a number of users, usually broken down by function in an organization, are all assigned specific permissions and resources as a block.Group scopes are a part of group accounts, and control what objects it can have in it and controls where in the domain the group can be used.Win server 2008 has several tools available in it used to create AD objects, including batch files, CSVDE, LDIFDE and WSH.