Viewing Samba Active Directory Content
Note: You can also manage users using the normal Windows AD user management tools.
Most of the RSAT tools hide content and menu options in their default setting. To enable all features and display the whole content in each program, go to the “View” menu and activate “Advanced Features”. Typically this option is only visible, when you've marked the root of the tree view. E. g. in ADUC, you see the option in the “View” menu only when you have clicked to the “Active Directory Users and Computers” node.
See Implementing Windows Roaming Profiles wiki web page.
The Organizational Unit (OU) is a powerful feature in Active Directory. This is a type of container which allows you to drag & drop users and/or computers into it.
We can link several types of group policies to an OU, and the settings will push out to all users/computers that sit under the OU. Within a single domain, you can have as many OUs and sub-OUs as you'd like. The result is that it can greatly reduce administrative overhead since you are able to manage everything via an OU. The implementation of Group Policy will be discussed in the next chapter.
Before we create an OU, we must know what one looks like. By default we can see a sample OU called 'Domain Controllers', which uses a different icon in the Windows management tools than the 'users' and 'computers' containers. We can deploy Group Policy to the users or the computers container.
Normally OUs are created according to the department setup of your organization. Be careful not to confuse Groups and OUs. Groups are used to control permissions, OUs are used for deploying settings to all users/computers within the OU.
Samba Active Directory has support for Group Policies, and can create the Group Policy on the fly. The basic idea of Group Policies is:
To learn more about managing and implementing organizational units, group policies, and Active Directory, try a web search for Google in Windows 2003 Active Directory implementation.