| How can I let users
search, but not browse, Active Directory (AD)? |
You can use either a policy setting or the registry
to configure AD for browsing. To use the policy setting
method, perform the following steps:
- Open Group Policy with the Group Policy Editor (GPE).
- Navigate to User Configurations, Administrative
Templates, Desktop, AD.
- Double-click "Hide Active Directory folder."
- Select the Policy tab.
- Click Enabled, and click OK.
- Close the policy.
To use the registry to complete the same task, perform
the following steps:
- Start the registry editor (e.g., regedit.exe).
- Navigate to HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft.
- If the Windows key doesn't exist, click Edit, New,
Key to create the key.
- Look for "Directory UI" under the Windows key, and
if it doesn't exist, click Edit, New, Key to create
the key.
- From the Edit menu, select New-DWORD Value.
- Enter a name of HideDirectoryFolder, and press Enter.
- Double-click the new value, set it to 1, and click
OK.
- Close the registry editor.
| How
can I move multiple users between organizational
units (OUs)? |
You can move individual users between OUs by right-clicking
the user in the Microsoft Management Console (MMC)
Active Directory Users and Computers snap-in and selecting
Move. To move multiple users, perform the following
steps:
- Start the Active Directory Users and Computers
snap-in (go to Start, Programs, Administrative Tools,
and click Active Directory Users and Computers).
- Open the OU that contains the users you want to
move.
- Select multiple users by holding down Ctrl and
selecting each user (if the users are in sequence,
you can select them all by left-clicking the first
name, holding down Shift, then left-clicking the
last name).
- Right-click the last user you selected, and select
Move from the context menu.
- Select the destination OU, and click OK.
| How
can I move the ntds.dit file? |
The ntds.dit file contains the Active Directory (AD)
data for your domain and is stored in the %systemroot%\ntds
folder. This file can become very large. To improve
performance you might want to move this file to a
faster drive. To do so, perform the following steps:
- Restart the domain controller (DC).
- Press F8 at the Startup menu when the system displays
the list of OSs.
- Select Directory Services Restore Mode.
- Select the appropriate installation, if more than
one exists, and then log on as an administrator
at the logon prompt.
- Start a command prompt (Start, Run, cmd.exe).
- Start the NTDS utility, ntdsutil.exe.
- At the ntdsutil prompt, type "files" as shown
below:
ntdsutil: files
- At the file maintenance prompt, type the following:
file maintenance: move DB to
- To view the database, at the file maintenance
prompt, type "info" as shown below:
file maintenance: info
- To verify the integrity of the database at its
new location, at the file maintenance prompt, type
"integrity" as shown below:
file maintenance: integrity
- Type "quit" (without the quotation marks) twice
to return to a C prompt.
- Restart the computer in Normal mode.
Next
>>
|
|
