Secure Active Directory Defaults

Tags:: Active Directory Users And Computers Microsoft Windows Server 2008 2003 Domain Controller Redircmp Redirusr Dsadd

Edit Video Details

Affiliate Submitter:
technoblogical

International
Comments: 0
Views: 5
Added: 18-Aug-09

Modify some of the defaults on Active Directory for security's sake. AD will automatically store users and computers in containers and not in Org Units. That means no GPO. I show you how to redirect the default values for for accounts that are not pre-staged. Also there is an option (ms-ds-machineaccountquota) that lets anyone join 10 computers to the domain. I show how to change that to 0.

commands used...
dsadd ou "ou=lockdown,dc=my,dc=domain"

redircmp.exe "ou=lockdown,dc=my,dc=domain"

redirusr.exe "ou=lockdown,dc=my,dc=domain"

http://technoblogical.com/