tailieunhanh - Microsoft Press mcts training kit 70 - 640 configuring windows server 2008 active directory phần 3

1. Đăng nhập vào SERVER01 như là Administrator và mở Active Directory Users và Computers snap-in. 2. Mở các thuộc tính của tài khoản quản trị của bạn trong Lặp lại các bước 3-8 để tạo ra các nhóm an ninh toàn cầu sau đây trong quản trị OU hơn là trong OU Nhóm. | Lesson 2 Automating the Creation and Management of Groups 163 You can use Dsget in combination with Dsmod to copy group membership. In the following example the Dsget command is used to get information about all the members of the Sales group and then by piping that list to Dsmod to add those users to the Marketing group dsget group CN Sales OU Groups DC contoso DC com Đmembers dsmod group CN Marketing OU Groups DC contoso DC com Đaddmbr Moving and Renaming Groups with Dsmove The Dsmove command also discussed in Chapter 3 enables you to move or rename an object within a domain. You cannot use it to move objects between domains. Its basic syntax is dsmove ObjectDN -newname NewName -newparent TargetOUDN The object is specified by using its distinguished name in the ObjectDN parameter. To rename the object specify its new common name as the value of the newname parameter. To move an object to a new location specify the distinguished name of the target container as the value of the newparent parameter. For example to change the name of the Marketing group to Public Relations type dsmove CN Marketing OU Groups DC contoso DC com Dnewname Public Relations To then move that group to the Marketing OU type dsmove CN Public Relations OU Groups DC contoso DC com Dnewparent OU Marketing DC contoso DC com NOTE You re not limited to the command line You can also move or rename a group in the Active Directory Users And Computers snap-in by right-clicking the group and choosing Move or Rename from the context menu. Deleting Groups with Dsrm Dsrm can be used to delete a group or any other Active Directory object. The basic syntax of Dsrm is dsrm ObjectDN . -subtree -exclude -noprompt -c The object is specified by its distinguished name in the ObjectDN parameter. You will be prompted to confirm the deletion of each object unless you specify the noprompt option. The c switch puts Dsrm into continuous operation mode in which errors are reported but the command keeps processing .