Active Directory Administration

[ShawnM]

Does anyone know of a MSKB article that shows you how to
manage AD Users and Computers from a desktop rather than
having to TS into the domain controller? Any suggestions
or proven methods that you care to share with me? Thank
you in advance!

Shawn

 

[Scott Harding - MS MVP]

If you look in the Winnt\system32 folder of the server there is a file
called adminpak.msi. If you run this file from your workstation it will
install all the admin tools on your workstation and you can administer just
about everything from that.

 

[Mark Renoden [MSFT]]

Or the download location:

http://www.microsoft.com/downloads/...15-c8f4-47ef-a1e4-a8dcbacff8e3&displaylang=en

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Dave Shaw [MVP]]

As Scott mentioned, all you really have to do is install the Admin tools on
your workstation.

But let me suggest that using a Terminal Server for administration is a much
more secure method of administration than running tools from your
workstation.

1 - Logging on to a workstation with admin rights leaves the admin's profile
behind on the workstation - a relatively simple way to compromise a
directory

2 - Admin tools left in the wrong hands have another name ... "Hacker
tools".

Running admin tools from the same computer that is browsing the Internet and
opening email is simply asking for trouble. Stick to the Terminal Server
method.

-ds