Book Image

Mastering Active Directory. - Second Edition

By : Dishan Francis
Book Image

Mastering Active Directory. - Second Edition

By: Dishan Francis

Overview of this book

Active Directory (AD) is a centralized and standardized system that automates networked management of user data, security, and distributed resources and enables inter-operation with other directories. This book will first help you brush up on the AD architecture and fundamentals, before guiding you through core components, such as sites, trust relationships, objects, and attributes. You will then explore AD schemas, LDAP, RMS, and security best practices to understand objects and components and how they can be used effectively. Next, the book will provide extensive coverage of AD Domain Services and Federation Services for Windows Server 2016, and help you explore their new features. Furthermore, you will learn to manage your identity infrastructure for a hybrid cloud setup. All this will help you design, plan, deploy, manage operations, and troubleshoot your enterprise identity infrastructure in a secure and effective manner. You’ll later discover Azure AD Module, and learn to automate administrative tasks using PowerShell cmdlets. All along, this updated second edition will cover content based on the latest version of Active Directory, PowerShell 5.1 and LDAP. By the end of this book, you’ll be well versed with best practices and troubleshooting techniques for improving security and performance in identity infrastructures.
Table of Contents (25 chapters)
Free Chapter
1
Section 1: Active Directory Planning, Design, and Installation
8
Section 2: Active Directory Administration
13
Section 3: Active Directory Service Management
18
Section 4: Best Practices and Troubleshooting

Managing the OU structure

Similar to any other Active Directory object, the OU structure can be managed using Active Directory Administrative Center (ADAC), ADUC MMC, and PowerShell. In this section, I am going to demonstrate how to manage the OU structure using PowerShell.

Let's start this with new OU. We can use the New-ADOrganizationalUnit cmdlet to create a new OU. The complete syntax can be reviewed using the following command:

Get-Command New-ADOrganizationalUnit -Syntax

As the first step, I am going to create a new OU called Asia to represent the Asia branch:

New-ADOrganizationalUnit -Name "Asia" -Description "Asia Branch"

In the preceding command, -Description defines the description for the new OU. When there is no path defined, it will create the OU under the root. We can review the details of the new OU using the following command:

Get-ADOrganizationalUnit...