Manage Active Directory Accounts Part 2

Introduction

The Manage Active Directory Accounts Part 2 module provides you with the instruction and server hardware to develop your hands on skills in the defined topics. This module includes the following exercises:

• Perform an Offline Domain Join
• Manage Locked, Disabled and Inactive Accounts

Lab Time: It will take approximately 1 hour to complete the exercises in this lab.

Exam Objectives

The following exam objectives are covered in this lab:

• Implement offline domain join
• Manage inactive, disabled accounts
• Automate unlocking of disabled accounts using Windows PowerShell
• Automate password resets using Windows PowerShell

Exercise 1 - Perform an Offline Domain Join

A typical process for joining a computer is when it is online. However, Windows Server 2012 offers a method using which you can join a computer to the domain when it is offline or not connected to the network. You can perform an offline domain join using Djoin.exe, which needs to be run on the following computers:

On a domain controller or a computer with access to the domain controller On the computer that needs to join the domain

First, the command is run on the domain controller and generates a metadata file. Later, the metadata file needs to be copied to the system that needs to join the domain. Then, the command is run again.

Exercise 2 - Manage Locked, Disabled and Inactive Accounts

As an administrator, you would typically add, remove, or delete user account. However, there will be situations when you will disable a user account. In a situation when you have a large number of user accounts, you may have difficulty tracking the disabled accounts. One simple method is to move them to separate OU for the disabled accounts.

Disabling a user account is a simple process. You open Active Directory Users and Computers and then right-click on a user account to select the Disable option. You can also disable multiple user account by selecting these user accounts and then selecting the Disable option from the right-click menu. You can also use Windows PowerShell to enable or disable a user account.