Davonte Brown

Unit 7
ITT Technical Institute
3825 West Cheyenne Avenue, Suite 600
North Las Veas, Neva!a 8"032
NT#330 Client$Server Net%or&in II
Wee& ', (nit ' ) Security *lannin an! A!+inistrative ,eleation
Exercise
-or this ./ercise
Please evaluate the information provided and after reading in the lessons for this week, answer the scenario deliverables.
This exercise is due at the beginning of the next class meeting.
Unit 7. Exercise 1. AD OU Planning Scenario
Course 012ectives an! Learnin 0utco+es
n this !xercise, "ou will determine the necessar" information for recommending an #U $tructure.
Assin+ent 3e4uire+ents
%eview the following scenario5
&s an T &dministrator, "ou have been tasked with designing an &ctive Director" Domain #rgani'ational Unit $tructure for
a new &D implementation at an existing organi'ation. (ou are scheduled to meet with the management team and need to
formulate a list of )uestions "ou will need answered in order to recommend an #U $tructure appropriate to the
organi'ation.
Develop a list of *+,- )uestions to guide "our design plan.
Su1+ission 3e4uire+ents
,+. pages, /icrosoft 0ord
Double+spaced
Times 1ew %oman, ,. pt. font
Utili'e &P& 2 formatting
!nsure that "ou include a cover page and reference page.
Did you know that Every IT Administrator faces a number of Active Directory Management challenges
which includes managing user accounts in Active Directory almost every day? Configuring user
properties manually is etremely time consuming! tiresome! and error"prone! especially in a large!
comple #indows network$ Active Directory administrators and IT managers mostly have to perform
repetitive and mundane tasks which often end up eroding into their productive or free times$ Moreover!
accomplishing these tasks using the native tools or %ower&hell also demands a deeper knowledge in
Active Directory Management and related technologies is not trouble or compleity free by any means$
Software that can automate these cumbersome tasks, simplify AD management and provide exhaustive
reports on tasks done and their status is the need of the hour.
1T,33- 4lient+$erver 1etworking Page , of 3 0eek 2, 7-+25- 6esson 2
$teve Todd
Davonte Brown
Unit 7
AD Manager Plus is one simple, hasslefree webbased solution for all Active Directory
Management challenges, safe with secure authentication and performs all actions with !ust mouse clicks.
"his Active Directory management tool allows administrators to design templates to manage all Active
Directory account creation and modification processes. Moreover, through its webinterface, this AD
management software offers administrators an absolute control over their Active Directory environment.
AD Manager Plus is comprehensive webbased Microsoft #indows Active Directory Management software
that simplifies $ser provisioning and Active Directory administration with complete security and
authentication to allow only authori%ed users to perform management actions. &t provides a complete set
of Active Directory management tools to administrators and AD managers for efficient management of
their Active Directory.
"his solution features a single console from which &" management can view and manage Active
Directory users, computers, contacts, groups and generate reports for all the domains, servers or any
specific domain in Active Directory environment from a central location. AD Manager Plus also enables the
administrator to delegate repetitive, simple, time consuming tasks to nonadministrative users ' helpdesk
in a completely secure manner and also allows for controlled automation of Active Directory. AD Manager
Plus avoids manual, error prone administrative activities on Active Directory and saves time and cost. And
you can do all these right from this software(s web interface. &" administrators can now perform the
following list of activities on their Active Directory using AD Manager Plus. Put too much emphasis on the
)$ structure or they don(t put enough thought into it. *ither way, this can lead to problems with your
Active Directory model. One of the excuses I've heard on occasion is that the OU structure is
fexible and can be changed at a later date if it doesn't ft.
It's true that the OU structure is fexible; however, administrators often discover that
changing the OU structure down the road is harder than they had originally anticiated.
!ure, new OUs can be added, but the old ones are not easy to clean u. " oorly lanned
OU structure tends to ta#e on a life of its own. If a new ob$ect is created in the directory
and the administrator doesn't #now where in the OU structure to lace the ob$ect, he will
either create a new OU or ut the ob$ect somewhere that it doesn't belong. %here are
dangers to both of these scenarios. &reating a new OU is easy to do, but hard to trac#
over the long run. 'amant OU creation contributes to a chaotic OU structure, and it's
easy to let things cree into the directory undocumented. On the other hand, if you add
an ob$ect to an existing OU in which it doesn't really belong, the new ob$ect might receive
olicies that it shouldn't get or ermissions to the ob$ect might be delegated to
unintended users. (hen designing OU structures, you should #ee a basic e)uation in
mind* simlicity + adatability , sustainability. If your design is too simle, it may not be
adatable and therefore will have to be changed too often.
If your design is too adatable, then everything will be comartmentali-ed, and that
brings about too much comlexity.
%here are three #ey rinciles regarding .rou /olicy, delegation, and ob$ect
administration that can hel guide your design decision. %hese rinciles can be summed
u with three )uestions you should as# yourself that will hel to ensure the OU structure
you are creating will stand the tests of time and organi-ational change*
0oes this OU need to be created so a uni)ue .rou /olicy Ob$ect 1./O2 can be alied to
it3 0oes a articular grou of administrators need to have ermissions to the ob$ects in
this OU3 (ill this new OU ma#e it easier to administer the ob$ects within it3 If the answer
to any of these )uestions is 4yes,4 then you should robably create the OU. If the answer
to all three )uestions is 4no,4 then you should rethin# the layout and determine whether a
di5erent design might create a better ft. 6ut before I dive into this any deeer and show
you how to aly these rinciles, I should frst exlain why these rinciles are
imortant. %hat was my essay hoe you learned a lot.
http://technet.microsoft.com/en-us/magazine/2008.05.oudesign.aspx
1T,33- 4lient+$erver 1etworking Page . of 3 0eek 2, 7-+25- 6esson 2
$teve Todd
Davonte Brown
Unit 7
1T,33- 4lient+$erver 1etworking Page 3 of 3 0eek 2, 7-+25- 6esson 2
$teve Todd