Active Directory Tip: Best practices for OU design

[SearchWin2000.com]

Title: Active Directory Tip

July 27, 2004 Published by  SearchWin2000.com Active Directory Tip NEWS     TOPICS     ASK THE EXPERTS     TIPS     WEBCASTS     WHITE PAPERS     Issue Sponsored By:   > Quest Software IN THIS ISSUE:   >  Best practices for OU design   >  Ask the Expert: Prevent users from using Active Desktop to access the Internet   >  Improving the default domain controller GPOs   >  Hiding service administrator accounts from users   White Paper: Best Practices for NT to Active Directory Migration With Microsoft to soon cease its support of Windows NT, are you concerned about your migration? Learn how you can reduce the headaches and struggles involved with migrating from NT to Active Directory. This white paper will teach you best practices for a smooth migration process focusing on critical migration processes including: discovery, planning, testing, account migration and resource updating. Download this free white paper and be on your way to successful migration. http://searchwin2000.techtarget.com/whitepaperPage/0,293857,sid1_gci995245,00.html?track=7.27_Win2000AD_Email-NL-23&ad=487745   Best practices for OU design [Omar Droubi, Kenton Gardinier, Rand Morimoto and Michael Noel] There are certain differences between Windows 2003 Server Active Directory (also known as Windows .NET Active Directory) and Windows 2000 AD. However, the same basic practices for organizational unit design still apply. Find out more in this tip. Ask the Expert: Prevent users from using Active Desktop to access the Internet [Paul Hinsberg] Dear Paul, I have tried to lock down Windows 2000 Pro to prevent users from accessing the Internet. I recently discovered that by utilizing active desktop, users can access the Internet. How do I prevent Active Desktop from being used in this manner? Improving the default domain controller GPOs [James Michael Stewart] When Windows Server 2003 is used to establish an Active Directory based network, there are two default GPOs: the default domain GPO and the default domain controller GPO. These GPOs are configured to provide a basic minimal level of security for your domain network and its domain controllers. However, there are several ways to improve upon the default settings in these two GPOs. Hiding service administrator accounts from users [James Michael Stewart] Windows Server 2003 automatically protects the essential security descriptors on the service level administrator accounts in the local domain. However, default settings allow normal users (i.e. members of the Authenticated Users group) to see the names of the user accounts that are members of the service administrator groups. Find out how to hide these user accounts in this tip. FEATURED TOPIC:  Are you up to the challenge? So, you think you're quite the expert on Windows technology, eh? Prove it -- take our challenging Know-IT-All quizzes and see how you measure up! KNOW-IT-ALL CHAPTER QUIZ:  Bulletproof Windows Server 2003 Need to keep your network up and running at all times? Don't suffer another weekend of frantic network troubleshooting -- learn the tricks to bulletproof your network from the start in this chapter. Think you already have it all figured out? Then take our tough Know-IT-All chapter quiz for a chance to win this week's featured book. LEARNING GUIDE:  Group Policy This guide introduces you to Group Policy, explains best practices and pitfalls to avoid and provides troubleshooting help and advice. You'll find Group Policy articles, tutorials, tips, tools, white papers, expert advice and more to pump up your Group Policy know-how quickly. Contact Us Sales For sales inquiries, please contact us at: [EMAIL PROTECTED] Editorial For feedback about any of our articles or to send us your article ideas, please contact us at: [EMAIL PROTECTED] Free E-Newsletters! Select e-newsletters you would like to receive via e-mail! SearchWin2000: Certification Tip Not a Member? We'll activate your membership with your subscription. ABOUT THIS E-NEWSLETTER This e-newsletter is published by SearchWin2000.com, a targeted Web site from TechTarget, the most targeted IT media and events company. Copyright 2004 TechTarget. All rights reserved. To unsubscribe from "Active Directory Tip": Go to unsubscribe: http://searchWin2000.techtarget.com/u?track=NL-23 Please note, unsubscribe requests may take up to 24 hours to process; you may receive additional mailings during that time. A confirmation e-mail will be sent when your request has been successfully processed. Contact Us: SearchWin2000 Member Services 117 Kendrick Street, Suite 800 Needham, MA 02494