Windows Server 2008 R2之七使用Ntdsutil删除对象
作者 佚名技术
来源 操作系统
浏览
发布时间 2012-06-26
|
ndows Server 2008 R2之一活动目录服务部署)
以下导出的安装脚本:
; DCPROMO unattend file (automatically generated by dcpromo); Usage:; dcpromo.exe /unattend:C:\unattend.txt;; You may need to fill in password fields prior to using the unattend file.; If you leave the values for "Password" and/or "DNSDelegationPassword"; as "*", then you will be asked for credentials at runtime.;[DCInstall]; Read-Only Replica DC promotionReplicaOrNewDomain=ReadOnlyReplicaReplicaDomainDNSName=HBYCRSJ.COM; RODC Password Replication PolicyPasswordReplicationDenied="BUILTIN\Administrators"PasswordReplicationDenied="BUILTIN\Server Operators"PasswordReplicationDenied="BUILTIN\Backup Operators"PasswordReplicationDenied="BUILTIN\Account Operators"PasswordReplicationDenied="HBYCRSJ\Denied RODC Password Replication Group"PasswordReplicationAllowed="HBYCRSJ\Allowed RODC Password Replication Group"SiteName=Default-First-Site-NameInstallDNS=YesConfirmGc=YesCreateDNSDelegation=NoUserDomain=HBYCRSJ.COMUserName=HBYCRSJ.COM\BILL.XUPassword=*ReplicationSourceDC=R2DC01.HBYCRSJ.COMDatabasePath="C:\Windows\NTDS"LogPath="C:\Windows\NTDS"SYSVOLPath="C:\Windows\SYSVOL"; Set SafeModeAdminPassword to the correct value prior to using the unattend fileSafeModeAdminPassword=; Run-time flags (optional); CriticalReplicationOnly=Yes; RebootOnCompletion=Yes
管理RODC
1、在AD用户和计算机管理控制台中,建立一全局组TESTRODC_G和加入这个组用户RODCUser
2、在AD用户和计算机管理控制台中,选择Domain Controllers,右击RODC,选择属性,进行如下操作
(将TestRODC_G增加到允许缓存组)
下面的操作用来查看用户缓存情况,
预设用户缓存操作
查看用户策略结果:
以下操作在R2RODC上完成
将RODCUSER增加到RODCUSER本地管理员组
关闭r2dc01注销R2RODC,以RODCUSER登录
|
凌众科技专业提供服务器租用、服务器托管、企业邮局、虚拟主机等服务,公司网站:http://www.lingzhong.cn
为了给广大客户了解更多的技术信息,本技术文章收集来源于网络,凌众科技尊重文章作者的版权,如果有涉及你的版权有必要删除你的文章,请和我们联系。以上信息与文章正文是不可分割的一部分,如果您要转载本文章,请保留以上信息,谢谢!
|