Copyright: Thursday, October 07, 1999 10:32:05


Click this button to add a workstation to the list.


Click to configure the user's access to NetWare-compatible workstations.


Select this option to allow the person to log on to all workstations in the domain or forest.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This value is set when the printer is installed. This printer information is published in Active directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


Type the name of the company for the person here.


Select this option if your domain has servers that use pre-Windows 2000 operating systems.


Provides a space for you to type the number of concurrent connections that the user is allowed.


Highlight a name in the list and click this button to remove it.


Type the department for the person here.


Type all comments concerning this printer here.


Type a brief description for the selected container here.


Type a brief description for the selected object here.


Type a brief description for the selected object within the trusted domain here.


No help information is currently available.


No help information is currently available.


Highlight the name in the list and click the Edit to modify.


Type the computer's NetBIOS name here. For The most common types of NetBIOS names that can be used in the WINS database are Unique, Group, Domain Name, Internet Group, and Multihomed. For more information please see the Windows 2000 Help, available on the Start menu.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This value is set when the printer is installed. This printer information is published in Active directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This is the person's e-mail address.


Lists the login script for the user. A user with a NetWare-enabled account may have a system and a personal login script. The system login script is in the SYSVOL\PUBLIC directory. Personal logins scripts for NetWare clients are in the SYSVOL\MAIL directory.


Click to add a NetWare-compatible workstation to the list of workstations available to the user.


Lists the NetWare-compatible workstations that the user can access when User May Log On To These NetWare Compatible Workstations is selected.


Specifies that the user is allowed access to all NetWare-compatible workstations.


Removes the selected NetWare-compatible workstation from the list of workstations available to the user.


Specifies that the user is allowed access only to certain NetWare-compatible workstations.


Provides a space for you to type the network address of the NetWare-compatible workstation.


Provides a space for you to type the node address of the NetWare-compatible workstation.


Provides a space for you to type the password for the displayed user account. The password you assign becomes the user's new password and is used when logging in from a computer running either NetWare or Microsoft client software.


Provides a space for you to retype the password that you typed in Password.


Provides a space for you to type the number of grace login attempts that the user is allowed.

Grace logins are the additional number of tries that a user has to log in after the user's password expires. The user can use a grace login to change the account password.


Specifies and provides a space for you to type the number of remaining grace login attempts. The user must have at least one grace login to log in and change the password.


This list displays various keywords you can use to search for the selected object.


Specifies that the user is allowed a limited number of connections.


Specifies that the user is allowed a limited number of grace login attempts.


This list displays the NetBIOS names of all workstations that are members of the domain or forest.


This list displays the groups for which the selected object is a member.


Indicates the location that this subnet or site refers to in your organization. If you have enabled Pre-populate printer search location text (the printer location tracking feature) in Group Policy, the subnet location string text is shown automatically to users on that subnet, whenever they start a search for printers.


This is the name of the manager for this person.


All current members of the group appear in this list. Add or remove members from this list with the corresponding buttons.


Specifies the model of this printer.


Specifies whether File and Print Services for NetWare is enabled for the user.


Provides a space for you to type the path to assign as the home directory path for the server. This path is relative to the NetWare SYS volume. The path is the root location for the user's individual home directory.

If you specify a directory that does not already exist, you must create that directory manually. When you create a user's home directory, confirm that it is in the home directory root path.


Specifies whether the user is forced to change the password the next time the user logs in from a NetWare client computer. If you select this option, confirm that the user has at least one grace login.


Type the office number for the person here.


This is the person's telephone number.


This shows the objects which this person is responsible for.


No help information is currently available.


Click to modify a login script for the user.


No help information is currently available.


No help information is currently available.


This is the person's full name as it is displayed in the domain.


This is the person's first name.


This is the person's last name.


Select this option to give the selected account permission to log on to any selected workstations in the list.


Type the job title for the person here.


Specifies that the user is allowed unlimited connections to the server.


Specifies that the user is allowed unlimited grace login attempts after the user's password expires.


This is the URL for the person's home page.


You must have full administrative privileges on the other domain to modify trust.


Type the DNS name you want to add in the Trusted service name suffixes space. The Add button becomes available. When you finish typing the name, click the Add button to place the name suffix in the list.


Click this button to show the Add Trusted Domain window. In this window you can add any trusted domain to the list.


Click this button to show the Add Trusting Domain window. In this window you can add any trusting domain to the list.


Highlight the name suffix in the list and click the Remove button.


Use this space to add comments or descriptions for the pre-Windows 2000 name.


Windows 2000 can run in two operation modes: mixed and native. Mixed mode is the default domain mode setting on Windows 2000 domain controllers. Mixed mode allows Windows NT backup domain controllers and Windows 2000 domain controllers to co-exist in a domain. Mixed mode does not support the universal or nested group enhancements of Windows 2000. Native mode is the condition in which all domain controllers in the domain have been upgraded to Windows 2000 and an administrator has enabled native mode operation. If all domain controllers in the domain are running Windows 2000, you should use native mode.


Use this button to change the domain mode of the currently selected domain to native mode. This change cannot be reversed.


Add a domain that is trusted by the domain specified in the first line. You can type the domain name or copy and paste it into this space.


Add the name of a domain that has a trusted relationship with this domain.


This is the primary or root domain of the directory.


This is the name recognized by all clients running pre-Windows 2000 operating systems.


This option allows clients from trusted domains running a version of Windows NT the rights to access domains trusted by this domain.


Highlight the name suffix in the list and click Edit to modify the suffix.


The name typed here must be the DNS name used for the trusted domain.


This list shows the DNS names of all trusted domains.


This domain is trusted by the root domain and is also shown in the list Domains trusted by this domain.


Use the password for the administrative account that is used to log on to the other domain.


Type the administrative password used for accessing this domain. This password must match the one entered for the trusted relationship.


Type the administrative password used on the trusted side of the relationship.


For verification, re-type the password for the trusted domain.


For verification, re-type the password for the trusting domain.


Highlight the domain you want to remove from the list and click Remove. You are prompted to confirm your action and warned if there are other actions required to remove this trusted domain.


Highlight the domain you want to remove from the list and click Remove. You are prompted to confirm your action and warned if there are other actions required to remove this trusted domain.


Clicking this option will show the route of any indirect trust relationships for the domains in the list. An indirect trust relationship is established when two domains have established a trust relationship and a member of one domain is indirectly trusted by a member of the other domain.


Transitive trust is two-way, in that users from either domain can be authenticated in both domains of the relationship. If the trust is nontransitive, only users from the trusted domain can be authenticated.


All user authentication is determined by the direction (trusted or trusting) of a trust relationship. If the trust relationship is transitive (the default), the relationship is bi-directional or two-way: each domain in the relationship is both trusted and trusting.


A transitive trust cannot be changed. Use this button to reestablish the trust relationship if the trust is not available.


The type of trust is established when the trust relationship is created in Active Directory. The trust type controls both the direction and the transitivity (transitive or not) of the trust relationship.


This list shows all previously added domains that are trusted by this domain. The information displayed in this list can be sorted by clicking the text above the column by which you want to sort.


This list shows all previously added domains that trust this domain. The information displayed in this list can be sorted by clicking the text above the column by which you want to sort.


Highlight a domain in the Domains trusted by this domain list, then click this button to display the Domain Properties dialog box.


Highlight a domain in the Domains that trust this domain list, then click this button to show the Domain Properties dialog box.


Transitive trusts can only exist between Windows 2000 domains within the same domain tree or forest. Any time a new domain controller is installed and a new child domain is created, a transitive trust relationship is automatically created between the parent and new child domain. Transitive trust relationships flow upward through the domain tree as it is formed, subsequently creating transitive trust between all domains in the domain tree.


This is the selected account's expiration date. Click the arrow to see the calendar and select another date. The account will expire in 30 days by default.


Select this option to allow the account to expire on a specified date.


If the account is currently locked out, this check box is selected. Otherwise it is cleared and unavailable. You cannot lock an account using this check box, you can only unlock accounts that become locked because of too many failed logon attempts. If you want to prevent use of an account, disable the account.


Select this option and the selected account will never expire. This option is selected by default.


Click this button to add new members to the list. Add members from any domain in the forest that conform to the group type and scope.


Click this button to add new groups to the list. Add groups from the local domain or from universal groups in other domains within the forest.


Click this button to Add the new information to the list of other items for this person.


Click this button to add any certificate that is saved in a certificate file either locally or in the directory.


Click this button to add any certificate from the local certificate store.


Type the person's street address in this space.


Type a street address for this organizational unit here.


Click this button to Browse the network.


Click this button to view the selected certificate. The certificate dialog box has three tabs: General, Details, and Certification Path. The General tab shows the certificate information and provides a button to view the issuer statement on the Internet or intranet. The Details tab shows various fields and values for the certificate and allows you to copy any of the fields to a file. The Certification Path tab shows the hierarchy of certification authorities for this certificate.


Click this button to change the manager for this object.


This list provides various options for the selected account. Click the down arrow or scrollbar to see all available options. For more information concerning any of these options please see the Windows 2000 help available from your start menu.


This is the city where this person is located.


Type the city for this selected object.


Type the city where this person is located here.


Click this button to clear the user or contact responsible for the management of the currently selected object.


Type descriptive information here to add any comments for this person.


Type this person's company name here.


Opens the Select Computer dialog box in which you can change the server that is currently linked for the replication service.


Type the name of the computer that you want to be included in the replication service.


Type the network path in this space. To specify a network path for the home directory, you must first create the network share and set permissions that allow the user access. You can do this using shared folders on the other computer.


Select this option to choose a network path to connect to a home directory on the computer running Windows 2000 Server.


Click this button to copy a selected certificate in this list to a local certificate file or to another domain controller in the forest.


Click the arrow to select this person's country or region from the provided list.


This is the country or region where the user or contact responsible for the management of the currently selected object is located.


Caution. This setting is security sensitive and should be enabled only after careful consideration. Check this to enable services running as localsystem on this computer to request additional services from other servers on behalf of a remote client by authenticating as the client to the other servers.


Click this button to remove a selected item from the list.


Type the department for the selected object here.


Type a brief description here.


Type a brief description of the group in this space.


Type the description of the computer or group that is being added to the replication service.


Type a brief description of the replica set for the share that is currently being used.


Type a description of the share assigned to the domain system volume (SYSVOL).


Type a brief description for the selected object here.


Type a brief description of the user here.


Type a brief description of the object here.


The "friendly" or localized name used by other applications such as Microsoft Exchange.


Type the domain of the selected computer.


This is the computer's name as seen on all computers using a pre-Windows 2000 operating system.


Click the arrow and select a drive letter for the existing network share.


Click this button to edit a selected item in the list.


Type any comments in this list. To type on subsequent lines in this list, press Ctrl+Enter.


Type additional telephone numbers for this person here.


Type the name of a current directory filter to be used within the replica set.


Type the name of a current file filter to be used within the replica set.


Type the person's e-mail address here. The e-mail address appears with the universal principal name suffix (for example, someone@microsoft.com).


Type the person's e-mail address here.


This is the fax number of the user or contact responsible for the selected account.


Type the person's fax machine number here.


Type the person's first name here.


Type the local path on the Dfs root for the domain system volume (SYSVOL).


Type the local path on the DFS root for the staging directory.


This is the person's home page URL, either on the Internet or in the local intranet site.


Type the home telephone number for this person here.


Type this person's IP telephony number here.


Click this button to open the Keywords dialog box for this object. This dialog box allows you to list words or terms used as attribute values of this object that can be used to search for the object.


Type the person's last name here.


This list displays any additional items for this person.


The home folder is a folder that is accessible to the user and can contain files and programs for that user. A network home folder can be assigned to an individual user or can be shared by many users. If no local or network home folder is assigned here, the default local home folder is located on the drive on the user's computer on which Windows 2000 is installed.


Click this option to specify a folder on the person's computer for their home directory, such as c:\users\%username%. Note: You must create the path and give the user permission to it for the home directory to be used. You can do this from Active Directory Users and Computers by right-clicking the person's computer and clicking Manage.


Click this button to set the hours that this account can log on to the domain. By default, domain logon is allowed 24 hours a day, 7 days a week. Note that this control does not affect the user's ability to log on locally to a computer.


Type the name of the logon script to be used by this user account. Logon scripts are placed in the NETLOGON share located at %SYSTEMROOT%\SYSVOL\<DNS domain name>\scripts.


Click this button to specify from which computers this person may log on to the network. The NetBIOS protocol is required for this feature.


This is the user or contact responsible for the management of the currently selected object.


View or select the account with management responsibility for the currently selected object.


All current members of the group appear in this list. Add or remove members from this list with the corresponding buttons.


This list displays the groups within the local domain and any universal groups to which the currently selected object belongs.


Click this button to select or change the manager for this object from any domain in the forest.


Click this button to remove the selected manager from this field.


Type the mobile or cellular phone number for this user.


This is the DNS name of the computer that is automatically entered during the logon process. Only members of the Domain Admins group are allowed to set or change this value.


This domain name is used by computers running pre-Windows 2000 operating systems. It is also used in the pre-Windows 2000 domain_name\user_name user logon.


This is the pre-Windows 2000 logon name for this user. The pre-Windows 2000 logon name automatically appears when the user logon name is entered.


Type the account name for this person here. This is the name the person will use to log on to the Windows 2000 domain.


This is the office location of the manager for this object.


This is the person's office location, including the building and office address or number.


This is the name of the current operating system installed on the computer.


This is the version of the current operating system installed on the computer.


Click this button to view other fax machine numbers for this person.


Click this button to access other telephone numbers for the user.


Click this button to view other IP telephony or Voice Over Internet Protocol (VOIP) numbers for this person.


Click this button to view other mobile or cellular phone numbers for this person.


Click this button to view other pager numbers for this person.


Click this button to see a list of other telephone numbers for this person. Click Add, Remove, or Edit to modify this list.


Click this button to see a list of other URLs for this person. Click Add, Remove, or Edit to modify this list.


Type the user's pager number here.


This is the path within the domain for the selected object. The object class, the date the object was created or modified, and the update sequence number assigned to the object are shown.


This is the telephone number of the user or contact responsible for the selected object.


Type the person's phone number here.


Type the person's Post Office box number in this space.


Primary groups are used exclusively by Macintosh clients and POSIX-compliant applications. Unless you are using these services there is no need to change the primary group. A user's primary group must be in the same domain as the user's account and the primary group must be either a global or universal security group.


Type the full path for to the user's profile. For example, \\server\share\username.


Click this button to view the properties dialog box for the manager.


Select this option to designate the group as global. Global groups appear in the global catalog, but not their members. Membership changes in global groups are not replicated outside of the domain where they are defined.


Select this option to designate the group as domain local. Domain local groups are valid only in the domain where they are defined. Domain local group membership does not appear in the global catalog.


Select this option to allow the group members to create new user or group accounts within the assigned scope.


Select this option to allow the group members to make new or additional security settings within the assigned scope.


Select this option to designate the group as universal. A universal group appears in the global catalog, but will primarily contain global groups from domains in the forest.


Highlight any user in the list, and then click Remove.


Click this button to remove any selected certificate from this list. When removed, a certificate will no longer be usable by the computer to which it was assigned, but will still be available in the certificate store.


This lists all of users and contacts who report directly to the currently selected account.


Highlight any group in the list, and then click Remove. This group will no longer be available for membership.


The system automatically enters the role for this computer in this field. The computer's role is a workstation, server, or domain controller.


Type the name of the group as it will appear in a pre-Windows 2000 operating system.


Change the replication times for the domain system volume on the DFS root. The default time is set as Sunday through Saturday from 12 AM to 12 AM.


Change the replication times for the domain system volume on the DFS root. The default times are set for 4 times per hour, Sunday through Saturday from 12 AM to 12 AM.


Click this button to select another computer within the file replication service to link to.


Type the name of the computer to be linked using the file replication service.


This network path shows the location of the shared folder assigned to this user.


This is the replica set used by the replication service for this domain.


This is the state or province where the account responsible for the management of the currently selected object is located.


Type the state or province where the selected object is located.


Type the state or province where this person is located here.


This is the street address of the account responsible for the management of the currently selected object.


This is the latest operating system Service Pack that is installed on the computer.


Type the title for the selected object here.


This is the full Windows 2000 name of a resource on a network. The UNC (universal naming convention) name for this folder should conform to the \\servername\sharename syntax, where servername is the server's name and sharename is the name of the shared resource. UNC names of directories or files can also include the directory path under the share name, with the following syntax: \\servername\sharename\directory\filename.


The user principal name suffix assigned to this account. The default user principal name suffix is the full DNS name of the domain containing the account you are administering. All available user principal name suffixes will appear in this list box. Alternate user principal name suffixes can be created with Active Directory Domains and Trusts.


Click this button to see the properties of the user or contact responsible for the currently selected object.


Click this button to view any selected certificate in the list.


Type the zip or postal code applicable for the person in this space.


Type the zip or postal code for the mailing address of the selected object.


Type the person's initials here.


Type the country or region for this selected object.


Ignores all replication schedules for this intersite transport. When schedules are ignored, replication is always available over all links for this intersite transport.


This option creates a transitive trust between all site links. This allows information to traverse all links rather than requiring the user to specify which links can be traversed. When all site links are bridged, all site links in this intersite transport that are connected to a shared site are considered part of a single site link, maximizing available replication links. By default, all site links are bridged.


Opens the Select Computer dialog box, in which you can select a server for which to specify bridgehead status. A preferred bridgehead server is the preferred contact point for exchange of directory information between sites. The more information in the exchange, the more bandwidth the bridgehead server needs. You must establish a bridgehead server if you are using a proxy, such as is required when exchanging information through a firewall.


Opens the Select Computer dialog box, in which you can select a licensing computer. For best performance, you should establish a licensing computer within each site.


Specifies the computer account referenced by the server object.


Specifies the computer you have designated as the licensing computer for this site. For best performance, you should establish a licensing computer within each site.


Type a description for this connection in this space.


Type a description for this intersite transport in this field.


Type a description for the NTDS settings in this field. NTDS settings contain the NTDS Connection objects. Connection objects are used in replicating directory information between this domain controller and other domain controllers.


Type a description for this server in this field.


Type a description for this site licensing computer in this field.


The description for the default site link is entered in this space.


Type a description for this site link bridge in this field.


Type a description for this subnet in this space.


Specifies the domain that contains the computer account to which this server refers.


Specifies the domain of the computer you have designated as the licensing computer for this site.


Provides a list of available network protocols for this connection to use.


Click the arrow and select the site to which this subnet corresponds.


Lists network protocols for which this server is a preferred bridgehead server.


This list shows the sites that are included in this site link.


This list shows the sites that are included in the site link bridge.


Lists network protocols available for use by this server for intersite replication, but for which this server is not a bridgehead.


This list shows sites that are not included in this site link.


This list shows the sites that are not included in this site link bridge.


Establishes the selected protocol as the protocol for which this server is a bridgehead server.


Click this button to add the selected site to this site link.


Click this button to add a selected site link to the list of site links in this bridge.


Establishes the selected protocol as unsupported by this bridgehead server. This bridgehead server will support this protocol for normal operations, but will not function as a bridgehead server for this protocol.


Click this button to remove the selected site from this site link.


Click this button to remove a selected site link from the site link bridge.


Names all domain controllers included in full replication over this site link. Full replication includes all property values for every object in the domain.


Type a cost value to indicate the preferential use of this link for replicating directory information between sites.


Names all domains included in partial replication over this site link. Partial replication is used between global catalogs to replicate a subset of property values for each object in the forest.


Type the duration in minutes between replications over this site link. Replication will occur only when this link is scheduled to be available. To check this link's scheduled availability, click Change Schedule.


Create a global catalog on this domain controller. A global catalog stores a full replica of the directory data for its own domain and a partial replica of the directory data for every other domain in the forest. Because global catalogs are used to check group membership during the logon process, each site should have at least one global catalog.


Selects which query policy will be used when searching the directory. Query policies are established using the Active Directory Service Interfaces (ADSI). ADSI provides the means for client applications of directory services to use one set of interfaces to communicate with any namespace that provides an ADSI implementation.


Opens the schedule for this connection. In the schedule dialog box you can specify when this connection is available to replicate directory information.


Opens the schedule for this connection. In the schedule dialog box you can specify when this connection is available to replicate directory information.


Opens the Find Domain Controllers dialog box, in which you can select an alternative domain controller from which directory information is replicated on this site link.


Displays the name of the domain controller from which directory information is replicated on this site link.


Displays the name of the site that contains the domain controller from which directory information is replicated on this site link.