How to use the domain in the computer

As companies attach great importance to computer security, more and more companies choose to add company computers to the domain control to control. How to quickly add a computer from the LAN to the company's domain? For details, please see how I introduced below!

First, open the computer you want to join the domain to and right-click on "Computer".

Click to enter the "Attributes" sensitive interface.

Select Computer Name, Domain, and Workgroup Settings, and then click Change Settings.

In the pop-up "System Properties", select "Computer Name" and click the "Change" button.

In the Computer Name Change dialog box that appears, select Affiliation from"groups"Change to "Domain".

Enter "your company's domain name" in the domain and click the "OK" button.

In the Windows Security dialog box that pops up, enter the username for which you have the permissions.

and passwords. Click OK.

Bridge Hand This is the successful addition to the domain.

end

1. Click "Insert" on the menu bar and select "Field" under "Document Parts".

2. In the dialog box of the field, select the corresponding category under "Category", and if you want to insert a date class, select "Date and Time".

3. After selecting the corresponding date format, click "OK" to insert the date into the finger document in the form of a field.

4. If you need to update the domain, right-click on the domain - "Update Domain".

5. Press Ctrl and F11 to lock the domain, and if you need to release it, press "Ctrl, Shift and F11" at the same time.

Pre-Domain Addition:

Set up the IP address and DNS (DNS is the domain-controlled IP);

Turn off the firewall;

Turn off the guest user;

Create a new domain user and set the domain user password on the domain controller;

Know the domain administration password.

Domain-join actions:

Right-click on my computer--- properties --- computer name --- replaced.

There are 5 points to be aware of when joining a client to a domain:

1.You must have the privileges of the client's local administrator;

2.The client and the DC should be able to communicate and ping;

3.The DNS in the client's IP address settings needs to be configured, and the DNS server is our DC in our experiment;

4.Champion all domain-joined domain user accounts;

5.The system time between the client and the DC cannot be 5 minutes apart.

1. Domain is a computer-specific term, which refers to the unit that runs independently in the Windows network.

2. The domain administrator can only manage the internal domain of the domain, unless other domains explicitly give him management permissions, he can access or manage other domains; Each domain has its own security policy, as well as its security trust relationships with other domains.

3. Function: If there are a large number of computers and users in the enterprise network, the Windows domain is needed to achieve efficient management.

1. The specific meaning of the domain:

A domain is a collection of computers with a security boundary, and computers in the same domain have established trust relationships with each other, and other machines can be accessed within the domain, and the permission of the accessed machine is no longer required.

When joining a domain, the administrator creates a computer account for each computer in the domain (which may not be in the same domain as the user). The password for a computer account is called a login ticket in the domain, and it is issued and maintained by the KDC service on the DC (Domain Controller) of Win2000.

2. How to add a computer to a domain:

1. Log in to the computer as an administrator. Right-click on My Computer and select Properties from the shortcut menu that appears. The System Properties dialog box will be displayed on the screen.

2. On the Computer Name tab, click Change. As shown in Figure 1, in the Computer Name Changes dialog box, select Domain and enter the domain name in the appropriate text box. In the example presented in this article, a computer currently named hq-res-wrk-o1 has been joined to a domain named reskit.

3. Enter the username and password used for authentication to prove that you have the right to join the relevant domain.

4. When the welcome to the domain message appears, click OK. In order for the changes to take effect, the computer must be restarted.

3. The role of joining the domain:

The primary task, or main goal, of Active Directory is the security management of the client, and then the standardized management of the client.

1. Safety management:

2. Standardized management

If these two things are done, Active Directory will become the foundation of the enterprise infrastructure, and all advanced services will be consolidated with Active Directory to take advantage of its unified authentication, security management, and resource commoning.

The domain is called domain in English

--A domain is an independent unit in the Windows network, and a trust relationship (i.e., trust relation) is required to access each other. A trust relationship is a bridge between domains. When a domain establishes a trust relationship with other domains, the two domains can not only manage each other as needed, but also allocate device resources such as files and printers across the network, so that network resources can be shared and managed between different domains.

In short, a local area network. Brother and the baby in the dormitory often use this to play games.

The order in which the policies are executed:

1) Local, (2) Site, (3) Domain, (4) OU. Policies that are applied later take precedence over policies that are applied first. If a computer belongs to a domain, the domain policy is valid when there is a conflict between the domain and local computer policies.

If a computer no longer belongs to a domain, local group policy applies. In the management of domains, OUs are used to refine the assignment of policies. An OU is a container that can contain users, computers.

By assigning OUs, you can use them for a variety of purposes.

An instance that assigns "Disable Messenger Service":

1.Start Active Directory users and computers.

2.Right-click the domain to which you want to add an OU, click New, and then click OUs.

3.Set an appropriate name for the OU and click OK.

4.Right-click the ou for the new key, and then click Properties.

5.The ou attribute is displayed. On the Group Policy tab, click New. Give the new Group Policy an appropriate name (e.g., Disable Messenger Service).

6.Once the policy is created, make sure the policy is selected, and then click.

7.Click Computer Configuration, click Windows Settings, click Security Settings, and then click System Services.

8.Double-click on the service to which you want to apply these permissions, in this case the Messenger service.

9.Click to select the Define this policy setting check box. This action will automatically create security permissions for everyone to have Full Control permissions.

10.Click Delete to delete the Everyone group.

11.Click Add to add the system account and the other user accounts to which you want to grant access.

12.Set the permissions for the system account to Full Control and set the appropriate permissions for the user account or group. By default, all new users are only granted start, stop, and pause permissions.

13.After you have added the appropriate permissions for the service to the appropriate users and groups, click OK.

14.The startup mode of the service is set to Disabled by default.

15.Click OK to close the policy, and then click OK again.

16.Move the computer account or user to which you want to apply the policy to the OU and you can apply the policy to the specified user or computer.

2003server run dcpromo and follow the prompts to do it.