To improve the installation and management of Active Directory Domain Services (AD DS), Windows Server 2008 includes some changes in the user interface of the “Active Directory Domain Services Installation Wizard” (dcpromo), but also to the Microsoft Management Console (MMC) snap-in functions that manage AD DS.
We already covered the “Active Directory Domain Services Installation Wizard” (dcpromo) in a previous post.
Let’s continue the overview with the administration tools:
- Active Directory Users and Computers (dsa.msc)
- Active Directory Sites & Services (dssite.msc)
- Active Directory Domains & Trusts (domain.msc)
- Active Directory Schema
- AdsiEdit (adsiedit.msc)
1. Active Directory Users & Computers
All objects – Protected objects
Windows Server 2008 ADU&C introduces Active Directory object protection to protect against accidental deletion by placing an extra Deny ACL on the object (see below). The object protection is available on all AD objects and appears afterwards in the Object tab (Advanced Features view).
Notice that only newly created OU objects are protected (with an ACL) by default. Existing objects (such as Domain Controllers OU) are not protected by such an ACL.
The same interface is also available through the ADU&C snapin included in RSAT (Remote Server Administration Tools). This functionality is independent of Windows Server 2008 Active Directory… it’s just a GUI thing!
Microsoft, WS2008, Windows Server 2008, Active Directory, Domain, Services, UI, ADU, ADDS, MMC, Knowledgebase