Designing an Active Directory Naming Strategy

DNS is required

• srv - service records required
• dynamic update recommended
• ixfr - incremental zone transfers recommended

You can use BIND in Unix for your DNS

• but it must be at least version 4.9.6 - 4.9.7
• 8.2.1+ recommended

Win2k Domains CANNOT be renamed!  Windows Server 2003 names can.

Designing Active Directory to Delegate Administrative Authority

To find out which group you are a member of:

net user
net user [username]

Designing a Schema Policy

You CANNOT delete a schema object in Win2k, only deactivate!

Schema defines object classes and attributes

use oidgen.exe (not included) to generate class and attribute object IDs for the schema