Managing the AD DS server role

You can manage server roles with Microsoft Management Console (MMC) snap-ins. To manage a domain controller (that is, a server that is running AD DS), click Start, click Control Panel, click Administrative Tools, and then double-click the appropriate snap-in:

• To manage user and computer accounts, click Active Directory Users and Computers.
  


• To manage Active Directory trusts, functional levels, and forest-wide operations master roles, click Active Directory Domains and Trusts.
  


• To manage Active Directory sites and site links, click Active Directory Sites and Services.
  

Experienced programmers and system administrators can manage the Active Directory schema, but the Active Directory Schema snap-in is not installed by default. In addition, the schmmgmt.dll file must be registered before the snap-in can be installed.

To install the Active Directory Schema snap-in

1. Click Start, right-click Command Prompt, and then click Run as administrator.
   
   
   


2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
   
   
   
3. Type the following command, and then press ENTER:
   

   regsvr32 schmmgmt.dll

   
   
4. Click OK to close the dialog box that confirms that the operation succeeded.
   
   
   


5. Click Start, click Run, type mmc, and then click OK.
   
   
   
6. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
   
   
   
   


7. On the File menu, click Add/Remove Snap-in.
   
   
   


8. Under Available snap-ins, click Active Directory Schema, click Add, and then click OK.
   
   
   


9. To save this console, on the File menu, click Save.
   
   
   
10. In the Save As dialog box, do one of the following:
    

    • To place the snap-in on the Administrative Tools menu, in File name, type a name for the snap-in, and then click Save.
      
    
    
    • To save the snap-in to a location other than the Administrative Tools folder, in Save in, navigate to a location for the snap-in. In File name, type a name for the snap-in, and then click Save.
      
    
    

What is the AD DS server role?

What is the AD DS server role?

AD DS provides a distributed database that stores and manages information about network resources and application-specific data from directory-enabled applications. Administrators can use AD DS to organize elements of a network, such as users, computers, and other devices, into a hierarchical containment structure. The hierarchical containment structure includes the Active Directory forest, domains in the forest, and organizational units (OUs) in each domain. A server that is running AD DS is called a domain controller.

Organizing network elements into a hierarchical containment structure provides the following benefits:

• The forest acts as a security boundary for an organization and defines the scope of authority for administrators. By default, a forest contains a single domain, which is known as the forest root domain.
  


• Additional domains can be created in the forest to provide partitioning of AD DS data, which enables organizations to replicate data only where it is needed. This makes it possible for AD DS to scale globally over a network that has limited available bandwidth. An Active Directory domain also supports a number of other core functions that are related to administration, including network-wide user identity, authentication, and trust relationships.
  


• OUs simplify the delegation of authority to facilitate the management of large numbers of objects. Through delegation, owners can transfer full or limited authority over objects to other users or groups. Delegation is important because it helps to distribute the management of large numbers of objects to a number of people who are trusted to perform management tasks.