Đang chuẩn bị liên kết để tải về tài liệu:
Active Directory Cookbook for windows server 2003- P20

Không đóng trình duyệt đến khi xuất hiện nút TẢI XUỐNG Tải xuống

Active Directory Cookbook for windows server 2003- P20:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | The value for the unicodePwd attribute must be a Unicode string that is surrounded by quotes and Base64 encoded. See Recipe 10.4 for more on encoding text with Base64. 6.18.3 Discussion The unicodePwd attribute can be directly modified over a SSL or TLS connection but it can never be read. 6.18.4 See Also Recipe 10.4 for more on Base64 encoding Recipe 14.1 for enabling SSL TLS MS KB 263991 How to Set a User s Password with Ldifde MS KB 264480 Description of Password-Change Protocols in Windows 2000 and MS KB 269190 HOWTO Change a Windows 2000 User s Password Through LDAP Recipe 6.19 Setting a User s Password via Kerberos 6.19.1 Problem You want to change a password using Kerberos from a Unix machine. 6.19.2 Solution If you have MIT Kerberos 5 client installed and configured properly you can run the following commands which will change your password in Active Directory kinit Password for jsmith@RALLENCORP.COM kpasswd Password for jsmith@RALLENCORP.COM Enter new password Enter it again Password changed. 6.19.3 Discussion See Recipe 18.7 for more information on Kerberos. 6.19.4 See Also MS KB 264480 Description of Password-Change Protocols in Windows 2000 RFC 3244 Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols and IETF draft-ietf-cat-kerb-chg-password-02.txt 201 Recipe 6.20 Preventing a User from Changing His Password 6.20.1 Problem You want to disable a user s ability to change his password. 6.20.2 Solution 6.20.2.1 Using a graphical user interface 1. Open the Active Directory Users and Computers snap-in. 2. In the left pane right-click on the domain and select Find. 3. Select the appropriate domain beside In. 4. Beside Name type the name of the user you want to modify and click Find Now. 5. In the Search Results double-click on the user. 6. Click the Account tab. 7. Under Account options check the box beside User cannot change password. 8. Click OK. 6.20.2.2 Using a command-line interface dsmod user UserDN -canchpwd no 6.20.2.3 Using .