#WindowsServer

Important note: When a new user is created in AD, it's a member of Domain User by default.

Needs...

[[LDAP]] DNS server Kerberos (authentication system) Protocol [[SMB]] Protocol [[NetBios]] (an address system like street addresses)

...to work.

AD DS (Directory services ) We install it on Windows Server Manager

creating users in AD Editing their rights delegating adding their computers to the domain (tssr in our example)

all in PDFs

more settings in the [[Windows Server]] file.

AGDLP

![[Pasted image 20240308134614.png]]

Creating virtual disks with [[RAID]]

hiding folders

![[Pasted image 20240308143702.png]]

Created a new user in the domain

SRV01 > tssr.info > Create new OU > TSSR Create new group > TSSR Create new user > Agah Celen %username% for the username : acelen

user > profil > home folder > connect > \\srv01\user$\%username%

%username% will automatically give the username of the user

![[Pasted image 20240308145434.png]]

Editing multiple user account properties: ALT + Enter to edit multiple users at once : %username%@tssr.info for example in our case

![[Pasted image 20240308160459.png]]

• We use Copying users to multiply user accounts.

• With scripts in the Profile of the user Properties , we can create different ways for users.

1- Create common/shared file in E:
2- Share the "Common" file 3- Attribute rights to the "Domain users" / rwx - affine the rights (like a user can copy it but can't delete it from the shared file/drive) 4- Create a script : common.BAT there will be commands inside with Batch language

we put the scripts in the following folder:

![[Pasted image 20240312100140.png]]

Shared files in the server: When we see NETLOGON and SYSVOL we understand that we are automatically the domain controller. NETLOGON and SYSVOL are the same thing: NETLOGON is just an alias for linux and mac.

![[Pasted image 20240312100423.png]]

net share is the command to see the shared folders.

batch language for scripts REM for a comment @ for hiding the text coming after

creating the script, we write it with the batch language and we put in the following folder

![[Pasted image 20240312101908.png]]

REM we show minimum to the screen
@echo off

REM we clean the screen
cls

REM we delete existing network readers
net use * /delete /yes

REM we create the reader K: for the Commun/Shared folder
REM net use k: \\srv01\commun

we put the [[script]] inside the properties > profil of a user:

![[Pasted image 20240312102104.png]]

[[Group Policy]] Object - Strategie de Group

GPO in short

To attribute roles to the Groups of users/machines/digital IDs.