Đăng nhập vào tài khoản quản trị thứ hai để kiểm tra người dùng mặc định. Lưu ý rằng bây giờ bạn có một bản sao của hồ sơ cá nhân quản trị tùy chỉnh. 15. Quay trở lại hồ sơ cá nhân quản trị viên Để xác định các thiết lập kết quả của các chính sách trên một đối tượng: | Administering Identity Servers 137 Procedure Number Activity Frequency DC-26 Operations Master Role Transfer Ad hoc DC-27 Operations Master Disaster Recovery Ad hoc DC-28 Domain Controller Promotion Ad hoc 1 DC-29 Domain Controller Disaster Ad hoc Recovery DC-30 Trust Management Ad hoc 1 4 DC-31 Forest Domain OU Structure Management Ad hoc DC-32 Active Directory Script Management Ad hoc DC-33 Forest Time Service Management Ad hoc DC-34 Access Control List Management Ad hoc DC-35 Managing Saved Queries Ad hoc DC-36 Managing Space within AD Ad hoc DC-37 Managing the LDAP Query Policy Ad hoc DC-38 Managing the AD Database Ad hoc Namespace Management DNS DN-01 DNS Event Log Verification Daily DN-02 DNS Configuration Management Monthly DN-03 DNS Record Management Ad hoc DN-04 DNS Application Partition Management Ad hoc Table 4-1. Identity Server Administration Task List continued Domain Controller Administration Domain controller administration is really Active Directory administration. Though you will need to manage the operation of the domain controllers themselves you also need to manage the content of the Active Directory. This 138 Windows Server 2003 Pocket Administrator means using a wide variety of tools both in graphical and command-line mode. The tools you use to manage AD include The three AD consoles Users and Computers Sites and Services and Domains and Trusts. The Group Policy Management Console GPMC a single-purpose console that must be downloaded from the Microsoft web site search for GPMC at http download . The csvde command-line tool which is designed to perform massive user and computer account operations. The ds commands for Directory Service a series of commands supporting the administration of directory objects. The Idifde command a powerful tool that even lets you modify AD schemas or database structures. The ntdsutil command which is specifically designed to manage the AD database. A series of commands oriented towards Group .
