Windows Server 2003 in a Nutshell

Whether you create one domain or many, the number of objects that Active Directory can hold is the same10 million or so.

For information on how to delegate authority for a domain, see Delegation earlier in this chapter.

For information on creating a Group Policy for a domain, see Group Policy later in this chapter.

When specifying the name of the domain you want a computer to join, you can specify either the DNS name of the domain (for example, mtit.com ) or the downlevel (pre-W2K) name of the domain (for example, MTIT ). To display the DNS name for a domain, use Control Panel System Computer Name on a domain controller that belongs to the domain. To find the downlevel name for a domain, right-click on the domain node in the console tree of Active Directory Domains and Trusts and select Properties General Domain name (pre-Windows 2000). Other actions you can perform on computer accounts using Active Directory Users and Computers include the following:

Right-click on a computer Disable

This breaks the computer's connection with the domain and prevents it from authenticating to the domain until you enable it. Disabling a computer account doesn't remove it from Active Directory (use Delete to do that).

Right-click on a computer Manage

This opens up Computer Management and connects to the selected computer to manage its resources.

Right-click on a computer Reset Account

If you reset a computer account, you must first remove the computer from the domain if you want it to rejoin the domain.

See Also

Active Directory , adprep , Delegation , DNS , Domain Controller , Forest , Group Policy , net computer , net view , Site , Trusts