Active Directory Cookbook, 4th Edition

Active Directory Cookbook, 4th Edition

by Brian Svidergol, Robbie Allen
Released May 2013
Publisher(s): O'Reilly Media, Inc.
ISBN: 9781449361372

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

Take the guesswork out of deploying, administering, and automating Active Directory. With hundreds of proven recipes, the updated edition of this popular cookbook provides quick, step-by-step solutions to common (and not so common) problems you might encounter when working with Microsoft’s network directory service.

This fourth edition includes troubleshooting recipes for Windows Server 2012, Windows 8, and Exchange 2013, based on valuable input from Windows administrators. You’ll also find quick solutions for the Lightweight Directory Access Protocol (LDAP), Active Directory Lightweight Directory Services (AD LDS), multi-master replication, DNS, Group Policy, and many other features.

  • Manage new AD features, such as the Recycle Bin, Group Managed Service Accounts, and fine-grained password policies
  • Work with AD from the command line and use Windows PowerShell to automate tasks
  • Remove and create forests, domains, and trusts
  • Create groups, modify group scope and type, and manage membership
  • Delegate control, view and modify permissions, and handle Kerberos tickets
  • Import and export data with LDAP Data Interchange Format (LDIF)
  • Synchronize multiple directories and enforce data integrity within a single or multiple stores
  • Back up AD, and perform authoritative and non-authoritative restores

Publisher resources

View/Submit Errata

Table of contents

  1. Active Directory Cookbook
  2. Preface
    1. Who Should Read This Book?
    2. What’s in This Book?
    3. Conventions Used in This Book
    4. Using Code Examples
    5. Safari® Books Online
    6. How to Contact Us
    7. Acknowledgments
  3. 1. Getting Started
    1. Approach to the Book
      1. At Least Three Ways to Do It!
      2. Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012
    2. Where to Find the Tools
      1. Running Tools with Alternate Credentials
      2. Targeting Specific Domain Controllers
    3. Getting Familiar with LDIF
    4. Replaceable Text
    5. Where to Find More Information
      1. Command-Line Tools
      2. Microsoft Knowledge Base
      3. Microsoft Developer Network
      4. Websites
      5. Mailing List
      6. Additional Resources
  4. 2. Forests, Domains, and Trusts
    1. Introduction
      1. The Anatomy of a Forest
      2. The Anatomy of a Domain
      3. The Anatomy of a Trust
    2. Creating a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    3. Removing a Forest
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    4. Creating a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    5. Removing a Domain
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    6. Removing an Orphaned Domain
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    7. Finding the Domains in a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using PowerShell
      4. See Also
    8. Finding the NetBIOS Name of a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    9. Renaming a Domain
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    10. Raising the Domain Functional Level to Windows Server 2012
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    11. Raising the Functional Level of a Windows Server 2008 or 2008 R2 Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    12. Using AdPrep to Prepare a Domain or Forest for Windows Server 2012
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    13. Determining Whether AdPrep Has Completed
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    14. Checking Whether a Windows Domain Controller Can Be Upgraded to Windows Server 2003 or 2008
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    15. Creating an External Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    16. Creating a Transitive Trust Between Two AD Forests
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    17. Creating a Shortcut Trust Between Two AD Domains
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    18. Creating a Trust to a Kerberos Realm
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    19. Viewing the Trusts for a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    20. Verifying a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    21. Resetting a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    22. Removing a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    23. Enabling SID Filtering for a Trust
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell to view SID filtering settings
      3. Discussion
      4. See Also
    24. Enabling Quarantine for a Trust
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    25. Managing Selective Authentication for a Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    26. Finding Duplicate SIDs in a Domain
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    27. Adding Additional Fields to Active Directory Users and Computers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
  5. 3. Domain Controllers, Global Catalogs, and FSMOs
    1. Introduction
      1. The Anatomy of a Domain Controller
    2. Promoting a Server to a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    3. Promoting a Server to a Read-Only Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    4. Performing a Two-Stage RODC Installation
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    5. Modifying the Password Replication Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    6. Promoting a Server to a Windows Server 2012 Domain Controller from Media
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. Demoting a Domain Controller
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    8. Automating the Promotion or Demotion of a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    9. Troubleshooting Domain Controller Promotion or Demotion Problems
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    10. Verifying the Promotion of a Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    11. Removing an Unsuccessfully Demoted Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. Renaming a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
    13. Finding the Domain Controllers for a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    14. Finding the Closest Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using PowerShell
    15. Finding a Domain Controller’s Site
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    16. Moving a Domain Controller to a Different Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    17. Finding the Services a Domain Controller Is Advertising
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    18. Restoring a Deleted Domain Controller in Windows Server 2012
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    19. Resetting the TCP/IP Stack on a Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    20. Configuring a Domain Controller to Use an External Time Source
      1. Problem
      2. Solution
        1. Using the Registry
        2. Using a command line
      3. Discussion
      4. See Also
    21. Finding the Number of Logon Attempts Made Against a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    22. Enabling the /3GB Switch to Increase the LSASS Cache
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    23. Enabling and Disabling the Global Catalog
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    24. Determining Whether Global Catalog Promotion Is Complete
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    25. Finding the Global Catalog Servers in a Forest
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    26. Finding the Domain Controllers or Global Catalog Servers in a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
    27. Finding Domain Controllers and Global Catalogs via DNS
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    28. Changing the Preference for a Domain Controller
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    29. Disabling the Global Catalog Requirement for User Logon
      1. Problem
      2. Solution
    30. Finding the FSMO Role Holders
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    31. Transferring a FSMO Role
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using PowerShell
      4. See Also
    32. Seizing a FSMO Role
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    33. Finding the PDC Emulator FSMO Role Owner via DNS
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
  6. 4. Searching and Manipulating Objects
    1. Introduction
      1. The Anatomy of an Object
    2. Viewing the RootDSE
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    3. Viewing the Attributes of an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    4. Counting Objects in Active Directory
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
    5. Using LDAP Controls
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Using a Fast or Concurrent Bind
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    7. Connecting to an Object GUID
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    8. Connecting to a Well-Known GUID
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    9. Searching for Objects in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    10. Searching the Global Catalog
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    11. Searching for a Large Number of Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    12. Searching with an Attribute-Scoped Query
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    13. Searching with a Bitwise Filter
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    14. Creating an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    15. Modifying an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    16. Modifying a Bit-Flag Attribute
      1. Problem
      2. Solution
        1. Using VBScript
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    17. Dynamically Linking an Auxiliary Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    18. Creating a Dynamic Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    19. Refreshing a Dynamic Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    20. Modifying the Default TTL Settings for Dynamic Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    21. Moving an Object to a Different OU or Container
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    22. Moving an Object to a Different Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface (ADMT 3.2)
        2. Using PowerShell
      3. Discussion
      4. See Also
    23. Referencing an External Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    24. Renaming an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    25. Deleting an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    26. Deleting a Container That Has Child Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    27. Viewing the Created and Last-Modified Timestamp of an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    28. Modifying the Default LDAP Query Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    29. Exporting Objects to an LDIF File
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    30. Importing Objects Using an LDIF File
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    31. Exporting Objects to a CSV File
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    32. Importing Objects Using PowerShell and a CSV File
      1. Problem
      2. Solution
        1. Using PowerShell
      3. Discussion
      4. See Also
  7. 5. Organizational Units
    1. Introduction
      1. The Anatomy of an Organizational Unit
    2. Creating an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    3. Enumerating the OUs in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
    4. Finding an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    5. Enumerating the Objects in an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      4. See Also
    6. Deleting the Objects in an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Deleting an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. Moving the Objects in an OU to a Different OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    9. Moving an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Renaming an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    11. Modifying an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    12. Determining Approximately How Many Child Objects an OU Has
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    13. Delegating Control of an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    14. Assigning or Removing a Manager for an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    15. Linking a GPO to an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    16. Protecting an OU Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface (all versions)
        3. Using PowerShell
      3. Discussion
  8. 6. Users
    1. Introduction
      1. The Anatomy of a User
    2. Modifying the Default Display Name Used When Creating Users in ADUC or ADAC
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    3. Creating a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      4. See Also
    4. Creating a Large Number of Users
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using PowerShell
      4. See Also
    5. Creating an inetOrgPerson User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Converting a user Object to an inetOrgPerson Object (or Vice Versa)
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Modifying an Attribute for Several Users at Once
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. Deleting a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    9. Setting a User’s Profile Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Moving a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    11. Redirecting Users to an Alternative OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using the command-line interface
      3. Discussion
      4. See Also
    12. Renaming a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    13. Copying a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
      4. See Also
    14. Finding Locked-Out Users
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    15. Unlocking a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    16. Troubleshooting Account Lockout Problems
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    17. Viewing the Domain-Wide Account Lockout and Password Policies
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using PowerShell
      4. See Also
    18. Applying a Fine-Grained Password Policy to a User Object
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows Server 2012)
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    19. Viewing the Fine-Grained Password Policy That Is in Effect for a User Account
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command prompt
        3. Using PowerShell
      3. Discussion
      4. See Also
    20. Enabling and Disabling a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    21. Finding Disabled Users
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    22. Viewing a User’s Group Membership
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    23. Removing All Group Memberships from a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    24. Changing a User’s Primary Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    25. Copying a User’s Group Membership to Another User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    26. Setting a User’s Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    27. Preventing a User from Changing a Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
      4. See Also
    28. Requiring a User to Change a Password at Next Logon
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    29. Preventing a User’s Password from Expiring
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    30. Finding Users Whose Passwords Are About to Expire
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    31. Viewing the RODCs That Have Cached a User’s Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    32. Setting a User’s Account Options (userAccountControl)
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    33. Setting a User’s Account to Expire
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    34. Determining a User’s Last Logon Time
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    35. Finding Users Who Have Not Logged On Recently
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    36. Viewing and Modifying a User’s Permitted Logon Hours
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    37. Viewing a User’s Managed Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    38. Creating a UPN Suffix for a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    39. Restoring a Deleted User
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows Server 2012)
      3. Discussion
      4. See Also
    40. Protecting a User Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface (all versions)
        3. Using PowerShell
      3. Discussion
  9. 7. Groups
    1. Introduction
      1. The Anatomy of a Group
    2. Creating a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
      4. See Also
    3. Viewing the Permissions of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    4. Viewing the Direct Members of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    5. Viewing the Nested Members of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Adding and Removing Members of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Moving a Group Within a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    8. Moving a Group to Another Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    9. Changing the Scope or Type of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Modifying Group Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      4. See Also
    11. Delegating Control for Managing Membership of a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    12. Resolving a Primary Group ID
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    13. Enabling Universal Group Membership Caching
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Restoring a Deleted Group
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows Server 2012)
        2. Using PowerShell
      3. Discussion
      4. See Also
    15. Protecting a Group Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface (all versions)
        3. Using PowerShell (all versions)
      3. Discussion
    16. Applying a Fine-Grained Password Policy to a Group Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  10. 8. Computer Objects
    1. Introduction
      1. The Anatomy of a Computer
    2. Creating a Computer
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    3. Creating a Computer for a Specific User or Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    4. Deleting a Computer
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
    5. Joining a Computer to a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows 7, Windows 8, and Windows Server 2012)
        2. Using a command-line interface
        3. Using a command-line interface with PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    6. Moving a Computer Within the Same Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Moving a Computer to a New Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface (ADMT 3.2)
        2. Using a command-line interface
      3. Discussion
      4. See Also
    8. Renaming a Computer
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows 7, Windows 8, and Windows Server 2012)
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    9. Adding or Removing a Computer Account from a Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Testing the Secure Channel for a Computer
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    11. Resetting a Computer Account
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    12. Finding Inactive or Unused Computers
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    13. Changing the Maximum Number of Computers a User Can Join to the Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Modifying the Attributes of a computer Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    15. Finding Computers with a Particular OS
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    16. Binding to the Default Container for Computers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    17. Changing the Default Container for Computers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    18. Listing All the Computer Accounts in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    19. Identifying a Computer Role
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
    20. Protecting a Computer Against Accidental Deletion
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows Server 2008 and later)
        2. Using a command-line interface (all versions)
        3. Using PowerShell (all versions)
      3. Discussion
    21. Viewing the RODCs That Have Cached a Computer’s Password
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  11. 9. Group Policy Objects
    1. Introduction
      1. Managing GPOs
    2. Finding the GPOs in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    3. Creating a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    4. Copying a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    5. Deleting a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    6. Viewing the Settings of a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    7. Modifying the Settings of a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    8. Importing Settings into a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    9. Creating a Migration Table
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    10. Creating Custom Group Policy Settings
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows Server 2008 and later)
      3. Discussion
    12. Installing Applications with a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    13. Disabling the User or Computer Settings in a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    14. Listing the Links for a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    15. Creating a GPO Link to an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    16. Blocking Inheritance of GPOs on an OU
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    17. Enforcing the Settings of a GPO Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    18. Applying a Security Filter to a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    19. Delegating Administration of GPOs
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    20. Importing a Security Template
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    21. Creating a WMI Filter
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    22. Applying a WMI Filter to a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    23. Configuring Loopback Processing for a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    24. Backing Up a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    25. Restoring a GPO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    26. Simulating the RSoP
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    27. Viewing the RSoP
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    28. Refreshing GPO Settings on a Computer
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    29. Restoring a Default GPO
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    30. Creating a Fine-Grained Password Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows 7, Windows 8, and Windows Server 2012)
        2. Using PowerShell
      3. Discussion
      4. See Also
    31. Editing a Fine-Grained Password Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    32. Viewing the Effective PSO for a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  12. 10. Schema
    1. Introduction
      1. The Anatomy of Schema Objects
    2. Registering the Active Directory Schema MMC Snap-in
      1. Problem
      2. Solution
      3. Discussion
    3. Generating an OID to Use for a New Class or Attribute
      1. Problem
      2. Solution
      3. Discussion
    4. Extending the Schema
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    5. Preparing the Schema for an Active Directory Upgrade
      1. Problem
      2. Solution
        1. From a graphical user interface
      3. Discussion
      4. See Also
    6. Documenting Schema Extensions
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. Adding a New Attribute
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. Viewing an Attribute
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    9. Adding a New Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Viewing a Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    11. Indexing an Attribute
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    12. Modifying the Attributes That Are Copied When Duplicating a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    13. Modifying the Attributes Included with ANR
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Modifying the Set of Attributes Stored on a Global Catalog
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    15. Finding Nonreplicated and Constructed Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    16. Finding the Linked Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    17. Finding the Structural, Auxiliary, Abstract, and 88 Classes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    18. Finding the Mandatory and Optional Attributes of a Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    19. Modifying the Default Security of a Class
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    20. Managing the Confidentiality Bit
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    21. Adding an Attribute to the Read-Only Filtered Attribute Set (RO-FAS)
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    22. Deactivating Classes and Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    23. Redefining Classes and Attributes
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    24. Reloading the Schema Cache
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    25. Managing the Schema Master FSMO
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  13. 11. Site Topology
    1. Introduction
      1. The Anatomy of Site Topology Objects
    2. Creating a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    3. Listing Sites in a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    4. Renaming a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    5. Deleting a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Delegating Control of a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a graphical user interface
    7. Configuring Universal Group Caching for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. Creating a Subnet
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    9. Listing the Subnets
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    10. Finding Missing Subnets
      1. Problem
      2. Solution
        1. Using PowerShell
      3. See Also
    11. Deleting a Subnet
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    12. Changing a Subnet’s Site Assignment
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    13. Creating a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    14. Finding the Site Links for a Site
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
    15. Modifying the Sites That Are Part of a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    16. Modifying the Cost for a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    17. Enabling Change Notification for a Site Link
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    18. Modifying Replication Schedules
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    19. Disabling Site Link Transitivity or Site Link Schedules
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    20. Creating a Site Link Bridge
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    21. Finding the Bridgehead Servers for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    22. Setting a Preferred Bridgehead Server for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    23. Listing the Servers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    24. Moving a Domain Controller to a Different Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    25. Configuring a Domain Controller to Cover Multiple Sites
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    26. Viewing the Site Coverage for a Domain Controller
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    27. Disabling Automatic Site Coverage for a Domain Controller
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    28. Finding the Site for a Client
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    29. Forcing a Host into a Particular Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    30. Creating a connection Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    31. Listing the connection Objects for a Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    32. Finding the ISTG for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    33. Transferring the ISTG to Another Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    34. Triggering the KCC
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    35. Determining Whether the KCC Is Completing Successfully
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    36. Disabling the KCC for a Site
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
        4. Using PowerShell
      3. Discussion
      4. See Also
    37. Changing the Interval at Which the KCC Runs
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  14. 12. Replication
    1. Introduction
    2. Determining Whether Two Domain Controllers Are in Sync
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    3. Viewing the Replication Status of Several Domain Controllers
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    4. Viewing Unreplicated Changes Between Two Domain Controllers
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    5. Forcing Replication from One Domain Controller to Another
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    6. Enabling and Disabling Replication
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    7. Changing the Intra-Site Replication Notification Interval
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. Changing the Inter-Site Replication Interval
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    9. Disabling Inter-Site Compression of Replication Traffic
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Checking for Potential Replication Problems
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    11. Enabling Enhanced Logging of Replication Events
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. Enabling Strict or Loose Replication Consistency
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    13. Finding conflict Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Finding Orphaned Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    15. Listing the Replication Partners for a DC
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    16. Viewing Object Metadata
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  15. 13. DNS and DHCP
    1. Introduction
      1. The Anatomy of a DNS Object
    2. Creating a Forward Lookup Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using PowerShell
      4. See Also
    3. Creating a Reverse Lookup Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    4. Viewing a Server’s Zones
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      4. See Also
    5. Converting a Zone to an AD Integrated Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Moving AD Integrated Zones into an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Configuring Zone Transfers
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    8. Configuring Forwarding
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    9. Configuring Conditional Forwarding
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    10. Delegating Control of an Active Directory Integrated Zone
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    11. Creating and Deleting Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
      4. See Also
    12. Querying Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    13. Modifying the DNS Server Configuration
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Scavenging Old Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    15. Clearing the DNS Cache
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    16. Verifying That a Domain Controller Can Register Its Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    17. Enabling DNS Server Debug Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    18. Registering a Domain Controller’s Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    19. Deregistering a Domain Controller’s Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
    20. Preventing a Domain Controller from Dynamically Registering All Resource Records
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    21. Preventing a Domain Controller from Dynamically Registering Certain Resource Records
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    22. Allowing Computers to Use a Domain Suffix That Is Different from Their AD Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    23. Authorizing a DHCP Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      4. See Also
    24. Restricting DHCP Administrators
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  16. 14. Security and Authentication
    1. Introduction
    2. Enabling SSL/TLS
      1. Problem
      2. Solution
        1. Using a graphical user interface (solution specific to Windows Server 2012)
      3. Discussion
      4. See Also
    3. Securing LDAP Traffic with SSL, TLS, or Signing
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    4. Disabling LDAP Signing
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    5. Enabling Anonymous LDAP Access
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    6. Using the Delegation of Control Wizard
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    7. Customizing the Delegation of Control Wizard
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    8. Revoking Delegated Permissions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    9. Viewing the ACL for an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Customizing the ACL Editor
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. Viewing the Effective Permissions on an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface (solution specific to Windows Server 2012)
        2. Using a command-line interface
      3. Discussion
      4. See Also
    12. Configuring Permission Inheritance
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    13. Changing the ACL of an Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Changing the Default ACL for an Object Class in the Schema
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    15. Comparing the ACL of an Object to the Default Defined in the Schema
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    16. Resetting an Object’s ACL to the Default Defined in the Schema
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
    17. Enabling Strong Domain Authentication
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    18. Enabling List Object Access Mode
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using VBScript
      3. Discussion
        1. Using VBScript
      4. See Also
    19. Modifying the ACL on Administrator Accounts
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    20. Viewing and Purging Your Kerberos Tickets
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    21. Forcing Kerberos to Use TCP
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using VBScript
        4. Using PowerShell
      3. Discussion
      4. See Also
    22. Modifying Kerberos Settings
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    23. Viewing Access Tokens
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    24. Creating a Claim Type
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    25. Creating a Resource Property
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    26. Configuring a Central Access Rule
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    27. Creating a Central Access Policy
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    28. Applying a Central Access Policy
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    29. Enabling Domain Controller Support for Claims and Compound Authentication
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    30. Enabling Claims for Devices in a Domain
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
  17. 15. Logging, Monitoring, and Quotas
    1. Introduction
      1. The Anatomy of a Quota Object Container
      2. The Anatomy of a Quota Object
    2. Enabling Diagnostics Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    3. Enabling NetLogon Logging
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    4. Enabling GPO Client Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    5. Enabling Kerberos Logging
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Viewing DNS Server Performance Statistics
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    7. Monitoring the Windows Time Service
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    8. Enabling Inefficient and Expensive LDAP Query Logging
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    9. Using the STATS Control to View LDAP Query Statistics
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    10. Monitoring the Performance of Active Directory
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
    11. Using Perfmon Trace Logs to Monitor Active Directory
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
    12. Creating an Administrative Alert
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    13. Emailing an Administrator on a Performance Alert
      1. Problem
      2. Solution
        1. Using PowerShell
      3. Discussion
      4. See Also
    14. Enabling Auditing of Directory Access
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    15. Enabling Auditing of Registry Keys
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    16. Creating a Quota
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    17. Finding the Quotas Assigned to a Security Principal
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    18. Changing How Tombstone Objects Count Against Quota Usage
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    19. Setting the Default Quota for All Security Principals in a Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
    20. Finding the Quota Usage for a Security Principal
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
  18. 16. Backup, Recovery, DIT Maintenance, and Deleted Objects
    1. Introduction
      1. The Anatomy of a Deleted Object
    2. Backing Up the Active Directory Database
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    3. Creating an Active Directory Snapshot
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    4. Mounting an Active Directory Snapshot
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    5. Accessing Active Directory Snapshot Data
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    6. Restarting a Domain Controller in Directory Services Repair Mode
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using the command-line interface
      3. Discussion
      4. See Also
    7. Resetting the Directory Services Repair Mode Administrator Password
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    8. Performing a Nonauthoritative Restore
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    9. Performing an Authoritative Restore of an Object or Subtree
      1. Problem
      2. Solution
        1. Using a graphical user interface (steps specific to Windows Server 2012)
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
        2. Using PowerShell
      4. See Also
    10. Performing a Complete Authoritative Restore
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. Checking the DIT File’s Integrity
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    12. Moving the DIT Files
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    13. Repairing or Recovering the DIT
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    14. Performing an Online Defrag Manually
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    15. Performing a Database Recovery
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    16. Creating a Reserve File
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    17. Determining How Much Whitespace Is in the DIT
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using Windows PowerShell
      3. Discussion
      4. See Also
    18. Performing an Offline Defrag to Reclaim Space
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    19. Changing the Garbage Collection Interval
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using Windows PowerShell
      3. Discussion
      4. See Also
    20. Logging the Number of Expired Tombstone Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    21. Determining the Size of the Active Directory Database
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    22. Searching for Deleted Objects
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    23. Undeleting a Single Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    24. Undeleting a Container Object
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using Windows PowerShell
      3. Discussion
      4. See Also
    25. Modifying the Tombstone Lifetime for a Domain
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
  19. 17. Application Partitions
    1. Introduction
      1. The Anatomy of an Application Partition
    2. Creating and Deleting an Application Partition
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    3. Finding the Application Partitions in a Forest
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    4. Adding or Removing a Replica Server for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    5. Finding the Replica Servers for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Finding the Application Partitions Hosted by a Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Verifying Application Partitions Are Instantiated Correctly on a Server
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    8. Setting the Replication Notification Delay for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    9. Setting the Reference Domain for an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Delegating Control of Managing an Application Partition
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
  20. 18. Active Directory Lightweight Directory Service
    1. Introduction
    2. Installing AD LDS
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    3. Creating a New AD LDS Instance
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    4. Creating a New Replica of an AD LDS Configuration Set
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface on all versions
      3. Discussion
      4. See Also
    5. Stopping and Starting an AD LDS Instance
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    6. Changing the Ports Used by an AD LDS Instance
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. Listing the AD LDS Instances Installed on a Computer
      1. Problem
      2. Solution
        1. Using a command-line interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    8. Extending the AD LDS Schema
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    9. Managing AD LDS Application Partitions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    10. Managing AD LDS Organizational Units
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    11. Managing AD LDS Users
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    12. Changing the Password for an AD LDS User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    13. Enabling and Disabling an AD LDS User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    14. Creating AD LDS Groups
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    15. Managing AD LDS Group Memberships
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    16. Viewing and Modifying AD LDS Object Attributes
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    17. Importing Data into an AD LDS Instance
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    18. Configuring Intra-Site Replication
      1. Problem
      2. Solution
        1. Using a graphical user interface
      3. Discussion
      4. See Also
    19. Forcing AD LDS Replication
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    20. Managing AD LDS Replication Authentication
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    21. Managing AD LDS Permissions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
        1. Using a command-line interface
      4. See Also
    22. Enabling Auditing of AD LDS Access
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
  21. 19. Active Directory Federation Services
    1. Introduction
    2. Installing AD FS Prerequisites
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    3. Installing the AD FS Federation Service
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    4. Configuring an LDAP Attribute Store
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    5. Configuring a Microsoft SQL Server Attribute Store
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
    6. Creating Claim Descriptions
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    7. Creating a Relying Party Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    8. Configuring a Claims Provider Trust
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    9. Configuring an Alternate UPN Suffix
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
        1. Using a command-line interface
      4. See Also
    10. Configuring AD FS 2.x and AD FS 1.x Interoperability
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using Windows PowerShell
      3. Discussion
      4. See Also
    11. Configuring Logging for AD FS
      1. Problem
      2. Solution
        1. Using Windows PowerShell
      3. Discussion
      4. See Also
  22. 20. Microsoft Exchange Server 2013
    1. Introduction
    2. Exchange Server and Active Directory
    3. Exchange Server 2013 Architecture
      1. Exchange Server Tools
      2. Exchange Management Shell
      3. Exchange Administration Center
      4. Exchange Scripts Folder
      5. Third-Party Tools
    4. Finding Exchange Server Cmdlets
      1. Problem
      2. Solution
        1. Using PowerShell
      3. Discussion
      4. See Also
    5. Preparing Active Directory for Exchange
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    6. Installing the First Exchange Server 2013 Server in an Organization
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    7. Creating Unattended Installation Files for Exchange Server
      1. Problem
      2. Solution
        1. Using a command-line interface
      3. Discussion
      4. See Also
    8. Installing Exchange Management Tools
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
      3. Discussion
      4. See Also
    9. Stopping and Starting Exchange Server
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using a command-line interface
        3. Using PowerShell
      3. Discussion
      4. See Also
    10. Mail-Enabling a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
    11. Mail-Disabling a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    12. Mailbox-Enabling a User
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    13. Deleting a User’s Mailbox
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    14. Moving a Mailbox
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using PowerShell
      4. See Also
    15. Viewing Mailbox Sizes and Message Counts
      1. Problem
      2. Solution
        1. Using PowerShell
      3. Discussion
        1. Using PowerShell
      4. See Also
    16. Configuring Mailbox Limits
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    17. Creating an Address List
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
        1. Using a graphical user interface
        2. Using PowerShell
      4. See Also
    18. Creating a Database Availability Group
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    19. Creating a Mailbox Database
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
    20. Enabling or Disabling Anti-Malware Scanning
      1. Problem
      2. Solution
        1. Using PowerShell
      3. Discussion
      4. See Also
    21. Enabling Message Tracking
      1. Problem
      2. Solution
        1. Using a graphical user interface
        2. Using PowerShell
      3. Discussion
      4. See Also
  23. 21. Microsoft Forefront Identity Manager
    1. Introduction
      1. Requirements for FIM 2010 R2
        1. SQL and FIM collocation
      2. FIM Primer
        1. Importing data
        2. The connector space
        3. The metaverse
        4. Projection and joins
        5. The many faces of the connector
        6. State-based synchronization
      3. Management Agents
        1. Run profiles
        2. The Metaverse Designer
        3. Attribute flow rules
        4. The scenario
      4. See Also
    2. Creating a SQL Server Management Agent
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    3. Creating an Active Directory Management Agent
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    4. Setting Up a Metaverse Object Deletion Rule
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    5. Setting Up a Simple Import Attribute Flow
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    6. Setting Up a Simple Export Attribute Flow to Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    7. Defining an Advanced Import Attribute Flow
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    8. Implementing an Advanced Attribute Flow Rules Extension
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    9. Setting Up Advanced Export Attribute Flow in Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    10. Configuring a Run Profile to Do an Initial Load of Data from a SQL Server Management Agent
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    11. Loading Initial SQL Server Database Data into FIM 2010 R2 Using a Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    12. Configuring a Run Profile to Load the Container Structure from Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    13. Loading the Initial Active Directory Container Structure into FIM 2010 R2 Using a Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    14. Setting Up a SQL Server Management Agent to Project Objects to the Metaverse
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    15. Writing a Rules Extension to Provision User Objects
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    16. Creating a Run Profile for Provisioning
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    17. Executing the Provisioning Rule
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    18. Creating a Run Profile to Export Objects from the AD MA to Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    19. Exporting Objects to Active Directory Using an Export Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    20. Creating a Run Profile Script
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    21. Creating a Controlling Script
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    22. Enabling Directory Synchronization from Active Directory to the HR Database
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    23. Configuring a Run Profile to Load the telephoneNumber from Active Directory
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    24. Loading telephoneNumber Changes from AD into FIM Using a Delta Import/Delta Sync Run Profile
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    25. Exporting telephoneNumber Data to a SQL Server Database
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    26. Using a SQL Server MA Export Run Profile to Export the telephoneNumber to a SQL Server Database
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    27. Searching Data in the Connector Space
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    28. Searching Data in the Metaverse
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    29. Deleting Data in the Connector Space and Metaverse
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    30. Extending Object Types to Include a New Attribute
      1. Problem
      2. Solution
      3. Discussion
    31. Previewing Changes to the FIM Configuration
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    32. Committing Changes to Individual Identities Using the Commit Preview Feature
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    33. Passing Data Between Rules Extensions Using Transaction Properties
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    34. Using a Single Rules Extension to Affect Multiple Attribute Flows
      1. Problem
      2. Solution
      3. Discussion
    35. Flowing a Null Value to a Data Source
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    36. Importing and Decoding the accountExpires Attribute
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
    37. Exporting and Encoding the accountExpires Attribute
      1. Problem
      2. Solution
      3. Discussion
      4. See Also
  24. Index
  25. About the Authors
  26. Colophon
  27. Copyright

Product information

  • Title: Active Directory Cookbook, 4th Edition
  • Author(s): Brian Svidergol, Robbie Allen
  • Release date: May 2013
  • Publisher(s): O'Reilly Media, Inc.
  • ISBN: 9781449361372