A Records, 244–245, 279 -A Switch in Nbtstat, 190 in Netstat, 186 AAS Deployment Package, 710 .Aas Extension, 712 Abstract
Total Page:16
File Type:pdf, Size:1020Kb
22_InsideWin_Index 13/3/03 9:50 AM Page 1269 Index A A records, 244–245, 279 ACEs (Access Control Entries) -a switch access masks in, 568–570 in Nbtstat, 190 command-line tools for, 572–576 in Netstat, 186 for cumulative permissions, 577 AAS deployment package, 710 for deny permissions, 578 .aas extension, 712 inheritance in, 579–580, 725–728 Abstract classes, 299–300 object ownership in, 572 Accelerated Graphics Port (AGP) adapters, 164 viewing and modifying, 570–571 Access Control Entries. See ACEs (Access ACKs in DHCP, 101–102 Control Entries) ACL Editor, 570, 723 Access control lists (ACLs) Advanced view in Active Directory security, 732–734 for inheritance, 578, 581 objects in, 339 for ownership, 572 in security descriptors, 559 for special permissions, 723–724 Access Control Settings window, 728 Edit view, 725–726 Access masks for permissions inheritance, 578 in ACEs, 568–570 blocking, 579 in DSOs, 733 settings for, 581 Access requests in Kerberos, 621 viewings, 582 Access rights. See also Permissions ACLs (access control lists) in Active Directory security in Active Directory security, 732–734 delegation, 729–732 objects in, 339 types of, 724–725 in security descriptors, 559 for group policies, 682 ACPI (Advanced Configuration and Power Access tokens Interface) contents of, 560–561 compatibility of, 23–28, 148–149 local, 559 kernel version for, 135 SIDs in, 559, 561, 581 for PnP,17, 147–149 ACCM (Asynchronous-Control- ACPIEnable option, 149 Character-Map), 1124 Activation Account domain upgrades, 496–498 in IA64, 130 BDC, 494–496 in installation, 49–50 PDC, 490–493 unattended setup scripts for, 95 Account lockout policies Active Directory, 238 in domain design, 429 bulk imports and exports in, 353–356 in password security, 593–594 DNS deployment in, 242–243 Account logons, auditing, 647 DNS integration in, 238–239 Account management, auditing, 511, 648 dynamic updates, 244–245 Accounts in domain migration. See NT and existing infrastructure in, 242–243 Windows 2000 domain migration forwarders in, 239–241, 243 1269 22_InsideWin_Index 12/3/03 2:18 PM Page 1270 1270 Active Directory Installation Wizard record scavenging, 245–246 for smart cards, 1153 security in, 246–248 support files in, 341–342, 550–551 DNS zones in, 259–261 utilities for domains in. See Domains ADSI Edit, 346–349 failure and recovery, 519 DCDIAG, 352 backups for, 534–538, 1234 DS tools, 352 database compaction for, 547–548 LDAP Browser, 349–352 database repair for, 548–550 management consoles, 342–343 DNS server losses, 520–521 schema console, 343–346 domain controller losses. See Domain controllers in Web Edition, 6 moving support files for, 550–551 WINS forwarding in, 243 new features for, 519–520 Active Directory Installation Wizard, 481, restoring, 538–547 486–487, 492 for IAS, 1218–1219 Active Directory Migration Tool (ADMT), as Kerberos database, 633 323, 505 namespaces in. See Namespaces for computer migration, 508–509 replicating. See Replication improvements in, 460 schema for. See Schema for password migration, 511–512 security in, 246–248, 721 for user and group migration, 513–515 access control inheritance in, 725–728 Active Directory Object Type window, 730 access list management in, 732–734 Active Directory Promotion Wizard, 365 access rights in, 724–725, 729–732 Active Directory Replication Monitor Options anonymous access in, 1151 window, 412–413 delegation in, 729–732 Active Directory Restore mode, 550–551 effective permissions in, 724 Active Directory Services Interface (ADSI) groups for. See Groups for COM objects, 297 inheritance options for, 581 for UPNs, 436 new features for, 722 Active Directory User Object, 1024 passwords in, 591 Active partitions, drive letters for, 25 Secondary Logon Service and RunAs for, Active Registrations node, 204 748–750 Active state in WINS records, 207 security descriptors for, 573, 723–724 ActiveX controls, 131 service accounts for, 747 Activity logs for faxes, 950 WMI for, 750–752 Actual size information in file headers, 828 services, 281 AD Domains and Trusts console client compatibility in, 330–332 for Active Directory, 342 compatibility settings for, 329–330 for forests, 469 components in, 289 for trust relationships, 497–498 domains in, 309 for UPN suffixes, 437 forests in, 317 AD Sites and Services console GC in, 317–319 for Active Directory, 342 history of, 290–292 for bridgehead servers, 397, 532–533 LDAP.See LDAP (Lightweight Directory Access for forcing replication, 402 Protocol) for replication partners, 405 locating, 324–329 for Universal group caches, 522 new features in, 281–284 AD Users and Computers console purpose of, 284–289 for Active Directory, 342 Sysvol in, 323–324 for auditing, 651 trees in, 315–317 for Dfs roots, 919 trust relationships in, 319–323 for dial-in, 1148 X.500, 292–296 for DNS zones, 260–261 22_InsideWin_Index 12/3/03 2:18 PM Page 1271 /adv switch in Dcpromo 1271 for domain functional levels, 488 Addresses for enrollment agent certificates, 1157 IP. See IP and IP addresses for GPCs, 446 MAC for GPOs, 660 components of, 175 for home directories, 1074–1075 for computer names, 116 for Object Move Table, 849 in network bridging, 1209 for permission inheritance, 726–728 in PXE boot disks, 113 for RIS, 115, 117–118 NAT. See NAT (Network Address Translation) AD Users and Groups console, 729–730 for network printing, 932 Adapters, SCSI, 157–158 for NICs, 19 Adaptive Answering, 944 ADM files, 704–705 Add a Boot Option; Delete Boot Option(s) creating, 709 option, 38 entries in, 706–708 Add A Local Fax Printer option, 942 group policies in, 473–474 Add Client window, 1219 overwriting, 709 Add Counters window, 171 preferences in, 704, 708 Add EAP window, 1165 Registry.pol files for, 706 Add Excluded Files window, 1228 ADMIN$ share, 893 Add Exclusions window, 277 Admin shares, recreating, 893–894 Add Hardware Wizard, 1173 Administrative access in DNS security, 246–247 Add Kerberos Principal Name window, 643 Administrative functions in OUs, 439–441 Add Mirror window, 779 Administrative privileges for account Add Monitored Server Wizard, 410 migration, 510 Add New Drive Letter or Path window, 865–866 Administrative shares Add New Hardware Wizard, 1168 for account migration, 511 Add Printer Wizard, 931, 933–934, 938–939, 1095 for CD-ROM drives, 887 Add Printers and Faxes window, 940 list of, 886 Add RADIUS Server window, 1220 Administrative Templates policies, 702–703 Add Recovery Agent Wizard, 1002 ADM, 704–709 Add/Remove Snap-in window Registry keys for, 703 for Certificates, 982 Registry policies and preferences in, 704 for GPE, 687 Administrator logons with Recovery Add/Remove Templates window, 705 Console, 1265 Add Server To Monitor window, 410 Administrator Password option, 91 Add Standalone Snap-in window, 343 Administrator Signing Certificate setting, 1161 for Certificates snap-in, 982 Administrators, passwords for, 33, 91, 539 for Security Configuration and Analysis ADMT (Active Directory Migration Tool), snap-in, 700 323, 505 Add This Target To The Replication Set for computer migration, 508–509 option, 917 improvements in, 460 ADDIAG utility, 713–715 for password migration, 511–512 Additional Drivers option, 954 for user and group migration, 513–515 Address and Control Field Compression ADPREP utility option, 1124 installing, 501 Address Assignment tab, 1206–1207 for upgrades, 502–503 Address book for fax service, 947 ADSI (Active Directory Services Interface) Address Pool tab, 1201 for COM objects, 297 Address Resolution Protocol (ARP) for UPNs, 436 in DNS query handling, 232 ADSI Editor (Adsiedit.msc), 346–349, 487 for MAC addresses, 184 ADSM product, 1239 Address Windowing Extensions (AWE), 134 /adv switch in Dcpromo, 486 22_InsideWin_Index 12/3/03 2:18 PM Page 1272 1272 Advanced Attributes window Advanced Attributes window in ADSI Edit, 347–348 for compression, 863–864 in Ntbackup, 1223 for encryption, 1005 Aero domain, 223 Advanced Backup Options window, 1231, 1241 AES (Advanced Encryption Standard), 974, 1014 Advanced Certificate Request option, 1047, AFS (Andrew File System) provider, 881 1160–1161 After Installation window, 1109 Advanced Configuration and Power Agent-based network backups, 1224 Interface (ACPI) Aggregate class, 311, 337 compatibility of, 23–28, 148–149 AGP (Accelerated Graphics Port) adapters, 164 kernel version for, 135 Agreements, license, 90, 1104 for PnP,17, 147–149 AIA (Authority Information Access), 1023, Advanced Encryption Standard (AES), 974, 1014 1026, 1041–1043 Advanced mode in Ntbackup, 1224 AKIs (Authority Key Identifiers) Advanced option for software deployment, 712 in certificates, 1023 Advanced Power Management (APM) for trust chains, 1041 standard, 23 Alerter service, 1252 Advanced Programmable Interrupt All DNS controllers in the domain option, 312 Controllers (APICs), 141 All DNS controllers specified in the scope of Advanced Properties window, 128 the application directory partition option, 312 Advanced Research Project Administration All DNS servers in the domain option, 312–313 (ARPA), 234 All DNS servers in the forest option, 312–313 Advanced Restore Options window, 1246 All Site Links option, 391 Advanced RISC Computing paths /all switch in IPCONFIG, 185, 1182, 1185 (ARC paths), 59–64 Allocated size in file headers, 828 Advanced Security Settings window, Allocation units. See Clusters 570–571, 728 Allow Access If Dial-In Permission Is Enabled Advanced Settings window option, 1164, 1180 for network providers, 884 Allow Automatic Administrative Logon for printing, 936 option, 1265 for UDMA, 157 Allow Floppy Copy and