Active Directory/Documentation

WolfTech Active Directory

• Overview
• Documentation
• Architecture
• Service Groups
• Naming Standards
• Special Groups
• Security Policies
• Software Distribution
• Software Packages
• Scripts & Tools
• References
• Join Us

Active Directory Users and Computers

• SpecOps Addon for ADUC

Automatic Logon

• How to prevent group policy from removing automatic logon?
• How to enable automatic logon for kiosk?

Administrative Users

• ACS Applications

Automatic Updates (WSUS)

• WolfTech WSUS
• WSUS Update Policy
• Manually Install Updates
• WSUS Notification Email Template
• WSUS Management Console
• Manipulate Client Behavior Using Command-line Options

• Windows Update Agent force script

Disaster Recovery

• Disaster Recovery

DNS

• DNS Notes
• Dynamic DNS

Distributed File System (DFS)

• What is DFS?
• DFS Architecture
• Enable Multiple DFS Roots on Windows 2003 Server Standard

Group Policy

• Using Resultant Set of Policy
• More than you wanted to know about ADM...

Group Policy Preferences

• Overview
• Remote Server Administration Tools
• Configuring Preferences
• Clients & Deploying Preferences
• Item-Level Targeting

• Mapping Printers
• Mapping Drives

Internet Explorer 7

• RSS Feeds
• Phishing Filter

Laptops

• Security Policies When Offsite

Macintosh

• Parallels (BME is currently beta testing)

Options for integrating Mac OS X clients with AD

With the included Active Directory plug-in, OS X can be configured to authenticate to an AD domain, and use network home directories. More comprehensive management (MCX) requires one of the 3 options below:

• Extending the AD schema Adding 38 attributes and 10 classes to the AD schema.
• Dual directory Adding an Open Directory domain running on a Mac OS X Server, also known as a "Magic Triangle" configuration
• Third-party solutions Options include Thursby's ADmitMac or Centrify DirectControl.

Additional resources:

• Best Practices: Integrating Mac OS X with Active Directory
• http://www.macwindows.com/AD.html

Issues to address:

1. Configuring your mac to use your UnityID/paswd (specifically, by authing against the DCs, but alternatively against the campus KDC). Plus how the laptop reacts when not on the network - should be caching.
2. Adding your Mac to the domain.
3. Restricting access to AD defined users.
4. Printing from your domain'd mac to a Windows print server; and to a WolfCopy printer.
   • ksmbprintd v1.0 (http://www.deploystudio.com/News/Entries/2008/4/7_ksmbprintd_v1.0.html / http://www.deploystudio.com/Downloads/ksmbprintd_v1.0.dmg) -- courtesy of Everette, needs to be tested.
5. Accessing Windows file shares from your domain mac
6. Why DFS doesn't work, or if the new OS fixes this. And steps to get around this (3rd party apps - AdmitMac) or things to look out for).
7. Options to apply policies to the mac client via GP? (likely to require 3rd party apps)
8. Scripts to inventory hardware/applications on your mac clients (longterm we'd want a WolfTech Collector Agent for Macs)
9. AFS client for Macs
10. Software distribution to Mac via GP?

Migrating

• College of Textiles Migration

Active Directory Migration Tool (ADMT)

• Enable User/Password Migration
• Enable Computer Migration
• Computer Migration Instructions

MS-SQL

• Documentation
• Moving User Databases
• Moving System Databases
• Set SPN

New OU Admins

• Getting Started
• Join a Computer
• Default OU
• Admin Shortcuts
• ShellRunAs

Printing

• Printing via Print-a-File
• Windows 2003 R2 and Printing

Public Labs / Kiosks

• Printing via Print-a-File
• Microsoft SteadyState

Remote Assistance

• Configuring AD for Remote Assistance
• Offering Remote Assistance

Remote Installation Services (RIS)

• RIS
• Add Driver To RIS
• nLite
• Duplicate GUID
• Computers folder
• Centralized RIS

Scripting

• phpAD Library
• SysInternals Tools (incls psexec / pstools)
• GUI for psexec

Services for UNIX

• What is SFU?

Software Packaging

• Packaging Notes
• Assigning Software via Group Policy
• Windows Installer
• Manually Uninstall MSI
• Removing Ghost Installs
• Controling Licenses via GPP

• Exclusions List

• MSI Testing

Symantec Antivirus (SAV)

• Definition Updates
• Group Management Script

Teaching Labs

• Using Common Accounts

User Account Control (UAC)

• User Account Control for Developers

Virtual Servers

• Virtual Servers

Vista

• Vista on MSDN
• Planning

Windows 2003 Server R2

• How to extend the schema?

Windows Defender

• Disable Windows Defender

Windows Deployment Services (WDS)

• WDS