Active Directory/Documentation

WolfTech Active Directory

• Overview
• Documentation
• Architecture
• Service Groups
• Naming Standards
• Special Groups
• Security Policies
• Software Distribution
• Software Packages
• Scripts & Tools
• References
• Join Us

Active Directory Users and Computers

• SpecOps Addon for ADUC

Automatic Logon

• How to prevent group policy from removing automatic logon?
• How to enable automatic logon for kiosk?

Administrative Users

• ACS Applications

Automatic Updates (WSUS)

Details on the WolfTech WSUS Service Group can be found here.

• Configuring the Windows Update GPO Setting
• Manually Install Updates
• WSUS Management Console
• Manipulate Client Behavior Using Command-line Options
• Windows Update Agent force script
• Personal Computers on WSUS
• Configuring Domain Computers

Disaster Recovery

• Disaster Recovery

DNS

• DNS Notes
• Dynamic DNS

Distributed File System (DFS)

• What is DFS?
• DFS Architecture
• Enable Multiple DFS Roots on Windows 2003 Server Standard

Group Policy

• Using Resultant Set of Policy
• More than you wanted to know about ADM...

Group Policy Preferences

• Overview
• Remote Server Administration Tools
• Configuring Preferences
• Clients & Deploying Preferences
• Item-Level Targeting

• Mapping Printers
• Mapping Drives

Internet Explorer 7

• RSS Feeds
• Phishing Filter

Laptops

• Security Policies When Offsite

Lights Out Management

• HP ILO
• Dell DRAC

Macintosh

• Parallels (BME is currently beta testing)

Options for integrating Mac OS X clients with AD

• Billy's instructions on joining domain... Joining Macs to WolfTech Domain

With the included Active Directory plug-in, OS X can be configured to authenticate to an AD domain, and use network home directories. More comprehensive management (MCX) requires one of the 3 options below:

• Extending the AD schema Adding 38 attributes and 10 classes to the AD schema.
• Dual directory Adding an Open Directory domain running on a Mac OS X Server, also known as a "Magic Triangle" configuration
• Third-party solutions Options include Thursby's ADmitMac or Centrify DirectControl.

Additional resources:

• Best Practices: Integrating Mac OS X with Active Directory
• http://www.macwindows.com/AD.html

Issues to address:

1. Configuring your mac to use your UnityID/paswd (specifically, by authing against the DCs, but alternatively against the campus KDC). Plus how the laptop reacts when not on the network - should be caching.
2. Adding your Mac to the domain.
3. Restricting access to AD defined users.
4. Printing from your domain'd mac to a Windows print server; and to a WolfCopy printer.
   • ksmbprintd v1.0 (http://www.deploystudio.com/News/Entries/2008/4/7_ksmbprintd_v1.0.html / http://www.deploystudio.com/Downloads/ksmbprintd_v1.0.dmg) -- courtesy of Everette, needs to be tested.
5. Accessing Windows file shares from your domain mac
6. Why DFS doesn't work, or if the new OS fixes this. And steps to get around this (3rd party apps - AdmitMac) or things to look out for).
7. Options to apply policies to the mac client via GP? (likely to require 3rd party apps)
8. Scripts to inventory hardware/applications on your mac clients (longterm we'd want a WolfTech Collector Agent for Macs)
9. AFS client for Macs
10. Software distribution to Mac via GP?

Migrating

• College of Textiles Migration
• GUID Collection Tool
• Computer Account Prestaging Tool
• Using the Computer Migrators group

Active Directory Migration Tool (ADMT)

• Enable User/Password Migration
• Enable Computer Migration
• Computer Migration Instructions

MS-SQL

• Documentation
• Moving User Databases
• Moving System Databases
• Set SPN

New OU Admins

• Getting Started
• Join a Computer
• Default OU
• Admin Shortcuts
• ShellRunAs

Printing

• Printing via Print-a-File
• Windows 2003 R2 and Printing
• Printer Management and Vista/RSAT
• WolfPrint Accounted Printing

Public Labs / Kiosks

• Printing via Print-a-File
• Microsoft SteadyState

Remote Assistance

• Configuring AD for Remote Assistance
• Offering Remote Assistance

Remote Installation Services (RIS)

• RIS
• Add Driver To RIS
• nLite
• Duplicate GUID
• Computers folder
• Centralized RIS

Scripting

• phpAD Library
• SysInternals Tools (incls psexec / pstools)
• GUI for psexec
• Using PsExec to delete old local profiles on lab machines

Services for UNIX

• What is SFU?

Software Packaging

• Packaging Notes
• Assigning Software via Group Policy
• Windows Installer
• Manually Uninstall MSI
• Removing Ghost Installs
• Controling Licenses via GPP

• Exclusions List

• MSI Testing
• MSI Loggingg

Symantec Antivirus (SAV)

• Definition Updates
• Group Management Script

Teaching Labs

• Using Common Accounts
• Monitoring Lab Usage
• Generate Remote Desktop Files

User Account Control (UAC)

• User Account Control for Developers

Virtual Servers

• Virtual Servers

Vista

• Vista on MSDN
• Planning

Windows 2003 Server R2

• How to extend the schema?

Windows Server 2008

• Server 2008 Core

Windows Defender

• Disable Windows Defender

Windows Deployment Services (WDS)

• WDS