Active Directory Policies

Windows Group Policy Object Inheritance: Explained

Introduction: In Active Directory (AD), there is a significant feature called Group Policy that allows you to implement specific settings for users and computers. Administrators can apply hundreds of different settings to objects in AD by establishing Group Policy Objects (GPOs) and associating the GPO to domains, sites, and organizational units (OUs). Ironically, the versatility of Group…
Read more
Active Directory Policies

Managing GPOs in Active Directory

What you will learn: Managing an Active Directory (AD) network can become a little cumbersome once the number of resources in the network becomes larger. There is a myriad of things that need to be controlled such as security permissions, software installation, desktop settings for users and computers, administrator privileges, and many more. This is where Group Policies and Group Policy…
Read more
Active Directory Policies

Group Policy Objects

What is a Group policy object? A virtual group of policy settings is called a Group Policy Object (GPO). A GPO has a distinctive name, like a GUID (globally unique identifier). GPOs can be created like any other active directory object and are linked to a Site, domain, or OU in which the policy settings have to be applied. GPO settings are evaluated by clients using the hierarchical nature of…
Read more
Active Directory Objects

Active Directory (AD) Computer Object

SAMAccountName: This is also a naming attribute that is used to uniquely identify a computer object in the network. It is the pre-Windows 2000 logon name of an object. ObjectCategory: It includes the distinguished name of the object class to which the computer object belongs or the name of one of its superclasses. ObjectClass: It contains the distinguished name of the object class to which…
Read more
Active Directory Objects

Active Directory Computer Objects Tabs

The general tab Some properties are assigned to a computer automatically once it’s joined to a domain, such as DNS name, Computer name, and Role etc. Even the administrator himself cannot change these properties. In the description box you can add a brief description of the computer. The location tab You can save the physical location of the computer in this tab. The…
Read more
Active Directory Objects

Active Directory Computer Object Management

What you will learn from this article: Active Directory is a directory service that organizations can use to organize their resources. The Active Directory network is comprised of elements called Active Directory objects. These objects represent resources that are a part of the network. There are several types of objects such as a user, computer, printer, and more. In this…
Read more
Active Directory Fundamentals

Active Directory Nested Groups Explained

What you will learn: Nesting groups in Active Directory (AD) allow for better control in managing access to resources in the AD network. Group nesting also makes it easier to assign permissions across multiple domains and greatly reduces the hassle for IT administrators. However, the process of nesting groups can quickly get confusing owing to the various types of groups in AD and their scope.
Read more
Active Directory Objects

Active Directory Group Objects Management

To add objects to groups in AD Open ADUC and right click on the object you intend to add to the group From the shortcut menu that pops choose the option “add to a group” Type the name of the group in the “select groups” dialogue box that appears Click OK The object will hence be added to the group Managing group objects To manage objects of a group in AD Open ADUC…
Read more
Active Directory Objects

AD Group object properties – Security tab

The security tab of the group properties window is of high importance because it allows you to configure access permissions on the group object. The security tab allows you to grant or deny permissions to other groups and users over the group object. In the “group or user names” section you can choose the group or the user to whom you would like to deny or allow permission. You…
Read more
Active Directory Objects

AD Group object properties

Members tab The Members tab displays the name of all users and groups that are members of the group. The add buttons and remove buttons can be used to add or remove users or groups from this list. MemberOf tab The MemberOf tab displays all the groups in which the group holds membership. ManagedBy tab The Managedby tab displays the contact details of the user who manages…
Read more