tailieunhanh - Windows Admin Scripting Little Black Book- P14

Windows Admin Scripting Little Black Book- P14:This book may not be duplicated in any way without the express written consent of the publisher, except in the form of brief excerpts or quotations for the purposes of review. The information contained herein is for the personal use of the reader and may not be incorporated in any commercial programs, other books, databases, or any kind of software without written consent of the publisher. Making copies of this book or any portion for any purpose other than your own is a violation of United States copyright laws | common schema global catalog and replication information but do not share a common DNS namespace. This allows you to combine the resources of two completely separate Internet domains for example and . Through trees and forests Windows 2000 automatically establishes two-way trusts between all domains. Objects Windows 2000 treats all resources as objects. These objects can consist of any of the various resources on a network such as users computers printers and shares. Each object contains its own set of attributes functions and properties as set by the schema. Whenever you access a resource the schema sets which properties and features are presentable. For example a user account has a lockout property but a share does not as instructed by the schema. Organizational Units Windows 2000 allows you to organize network objects into logical containers called Organizational Units OUs . OUs can contain any network resource such as accounts groups queues shares and even other OUs. Through OUs you can delegate administration and assign permissions to the OU or the individual objects within. The most common use of organizational units is to organize company resources by department. Global Catalog Windows 2000 stores information about the objects in a tree or forest in a common database called a global catalog. Global catalog servers reduce network searches and object query time by processing these requests directly. The first domain controller within a forest stores the global catalog and is called a global catalog server. You can assign additional global catalog servers to help network queries. Warning Global catalog servers synchronize their information through replication. A large quantity of catalog servers can cripple a network with replication traffic. ADSI Active Directory Services Interfaces ADSI previously OLE Directory Services is Microsoft s implementation of a directory service that organizes an enterprise into a tree-like .