Access AD from workstation

[HKNinja]

Ok, I know this look like a basic thing, but I haven't get it figure out yet. Now, I've a W2k Adv. Server with Active Directory. When I add/remove users/groups, I'm doing it on the server. I remember that I saw someone was able to access AD from their workstations. Can anyone tell me how? I'm sick of walking back and forth between my office and the server room to add/remove a user. Yeah, I'm lazy, too.

- Harry
A+, MCP

 

[BuckWeet]

you could turn on terminal services
or get the mmc template for ad users/computers and put it on the workstation..


buckweet

 

[GeneralNerd]

you could use terminal services to manage your server, or pop in the win2k server cd into your workstation and
open the I386 folder on the appropriate Windows 2000 Server CD-ROM. The latest version of the Windows 2000 Administration Tools is on the latest Windows 2000 service pack CD-ROM.
Double-click the Adminpak.msi file.
Click Next, and then click Finish.

http://support.microsoft.com/default.aspx?scid=kb;en-us;308196&Product=win2000

 

[Eddiefdz]

If you have a Win2k or XP workstation. Just go online and download remote desktop. You can then terminal into you servers. I am super lazy also so i control all 11 of my server right from my desk.

Here is the link to the remote desktop download.

http://www.microsoft.com/windowsxp/pro/downloads/rdclientdl.asp

Hope this helps.

Eddie Fernandez
CCNA, Network+, A+, MCP

 

[HKNinja]

Thanks for the replies, guys. I'm already using VNC..., but I don't like the lag or delay it cause, so I rather control the elements directly instead of controlling the mouse pointer...

 

[NickFerrar]

If your workstation is in the same forest as the server you want to admin then personally I'd always use the AD Users and Computers MMC (installed via the Admin Tools that GeneralNerd refers to).

Due to lag and limited connections allowed in remote admin mode via TS I only use this method when admining non-trusted domains (we provide outsourcing services for clients). It would be nice if MS allowed you to switch domain and user context within an MMC but I haven't found a way to do this...

 

[mlichstein]

adminpak.msi can also be found in the %windir%\system32 directory of any Windows Server machine. You can also find it on the Microsoft website

If you have any 2003 machines, I highly recommend installing the 2003 adminpak on your workstation. You can administrate 2000 or 2003 domains with it, and it has some nice features that the 2000 adminpak doesnt.

One great feature is drag and drop in the ADUC console.

 

[HKNinja]

Adminpak is exactly what I was looking for! Thanks guys!!!

-Harry