06.Lam Viec Voi Tai Khoan Nguoi Dung - Smith.N eBooks

8/6/2019 06.Lam Viec Voi Tai Khoan Nguoi Dung - Smith.N eBooks

1/50

LM

VICV

IT

I

KHON

NG

I

LM

VICV

IT

I

KHON

NG

I

Chng

6

Chng

6

DNG

DNG


2/50

Hanoi AptechACNA06 Course

Chng 6: LM ViC VI TI KHON NGI DNG

TNG QUANTNG QUAN

Tm hiu s khc nhau gia Ti khon Ngi dng Cc b(Local User Account) v Ti khon Ngi dng Min(Domain User Account).

Lp k hoch, to v qun l Ti khon Ngi dng Cc b v

Tm hiu s khc nhau gia Ti khon Ngi dng Cc b(Local User Account) v Ti khon Ngi dng Min(Domain User Account).

Lp k hoch, to v qun l Ti khon Ngi dng Cc b v

2 / 50

Ti khon Ngi dng Mi n. To v qun l ti khon ngi dng t mu (Template), nhp

vo t ngun c sn v cc cng c dng dng lnh.

Qun l khi lc ngi dng (User Profile). Tm hiu mc ch v chc nng ca khi lc ngi dng.

X l cc tnh hung i vi vic xc thc ngi dng (UserAuthentication) .

Ti khon Ngi dng Mi n. To v qun l ti khon ngi dng t mu (Template), nhp

vo t ngun c sn v cc cng c dng dng lnh.

Qun l khi lc ngi dng (User Profile). Tm hiu mc ch v chc nng ca khi lc ngi dng.

X l cc tnh hung i vi vic xc thc ngi dng (UserAuthentication) .


3/50



TM HIU TI KHON NGI DNGTM HIU TI KHON NGI DNG

Ti khon Ngi dng Cc b Lu tr ti CSDL Security Accounts Manager (SAM)

ca h thng.

Ti khon Ngi dng Cc b Lu tr ti CSDL Security Accounts Manager (SAM)

ca h thng.

3 / 50

Ch c th c s dng trn chnh h th ng to ran.

Ti khon ngi dng min

Lu tr ti Active Directory trn my iu khin min C thc s dng trn bt k h thng no trn

Active Directory

Ch c th c s dng trn chnh h th ng to ran.

Ti khon ngi dng min

Lu tr ti Active Directory trn my iu khin min C thc s dng trn bt k h thng no trn

Active Directory


4/50



NHM LM VIC (WORKGROUP)NHM LM VIC (WORKGROUP)

Khng c CSDL tp trung ca ti khon ngi dng Ti khon ngi dng phi tn ti trn SAM ca mi

h thng m ngi dng truy nhp n

Khng c CSDL tp trung ca ti khon ngi dng Ti khon ngi dng phi tn ti trn SAM ca mi

h thng m ngi dng truy nhp n

4 / 50

Khng kh thi vi mi trng c trn 10 ngi dng Khng kh thi vi mi trng c trn 10 ngi dng


5/50



MIN (DOMAIN)MIN (DOMAIN)

5 / 50


6/50



LP K HOCH TI KHON NGI DNGLP K HOCH TI KHON NGI DNG

t tn cho ti khon La chn mt khu

Thit k kin trc Active Director

t tn cho ti khon La chn mt khu

Thit k kin trc Active Director

6 / 50


7/50



T TN CHO TI KHONT TN CHO TI KHON

Tn ti khon c tht c di t 1 n 20 k t(ch ci v s).

Tn ti khon khng phn bit ch hoa hay ch thng.

Tn ti khon c tht c di t 1 n 20 k t(ch ci v s).

Tn ti khon khng phn bit ch hoa hay ch thng.

7 / 50

Cc k t sau khng c s dng trong tn ti khon: " / \ [ ] : ; | , + = * ? < > @

Cc k t sau khng c s dng trong tn ti khon: " / \ [ ] : ; | , + = * ? < > @


8/50



LA CHN MT KHULA CHN MT KHU

8 / 50


9/50



LA CHN MT KHU (tip)LA CHN MT KHU (tip)

CC CHNH SCH IU KHIN BNG PHN MMEnforce Password HistoryMaximum Password Age

9 / 50

Minimum Password AgeMinimum Password LengthPassword Must Meet Complexity Requirements

Chiu di ti thiu 6 k t. Khng trng bt c phn no ca tn ti khon. C 3 trong 4 iu kin: CHHOA, ch thng, s, K

tc bit.


10/50



LA CHN MT KHU (tip)LA CHN MT KHU (tip)

CC CHNH SCH KHNG IU KHIN CBNG PHN MM

Khn chia s mt khu vi bt c n i no

10 / 50

Khng ghi li v lu mt khu nhng ni d thy Khng to mt khu don (lin quan n Ngy sinh,a ch, tn con).

Khng cung cp mt khu (nu bt buc) qua in thoi,Email


11/50



THIT K KIN TRUC ACTIVE DIRECTORYTHIT K KIN TRUC ACTIVE DIRECTORY

To cu trc organizational unit (OU) t ngi dng vo OU ph hp

To cu trc organizational unit (OU) t ngi dng vo OU ph hp

11 / 50

u g c c c g c s c m

u g c c c g c s c m


12/50



LM VIC VI TI KHON NGI DNGCC BLM VIC VI TI KHON NGI DNGCC B

12 / 50


13/50



TO TI KHON NGI DNG CC BTO TI KHON NGI DNG CC B

13 / 50


14/50



QUN L TI KHON NGI DNG CC BQUN L TI KHON NGI DNG CC B

14 / 50


15/50


16/50



TO TI KHON NGI DNG MINTO TI KHON NGI DNG MIN

16 / 50


17/50



QUN L TI KHON NGI DNG MINQUN L TI KHON NGI DNG MIN

T thc nAction, bn c th thc hin: t li mt khu ca ti khon ngi dng.

T thc nAction, bn c th thc hin: t li mt khu ca ti khon ngi dng.

17 / 50

, , .

Chnh sa thnh vin ca nhm.

Gi thin t v mtrang web ch(homepage)

cho ngi dng.

, , .

Chnh sa thnh vin ca nhm.

Gi thin t v mtrang web ch(homepage)

cho ngi dng.


18/50



Th GENERALTh GENERAL

18 / 50


19/50



Th ADDRESSTh ADDRESS

19 / 50


20/50



Th TELEPHONESTh TELEPHONES

20 / 50


21/50



Th ORGANIZATIONTh ORGANIZATION

21 / 50


22/50



Th ACCOUNTTh ACCOUNT

22 / 50


23/50



Th PROFILETh PROFILE

23 / 50


24/50



Th MEMBER OFTh MEMBER OF

24 / 50


25/50



Th TERMINAL SERVICES PROFILETh TERMINAL SERVICES PROFILE

25 / 50


26/50



Th ENVIRONMENTTh ENVIRONMENT

26 / 50


27/50



Th REMOTE CONTROLTh REMOTE CONTROL

27 / 50


28/50



Th SESSIONSTh SESSIONS

28 / 50


29/50



Th DIAL-INTh DIAL-IN

29 / 50


30/50



Th COM+Th COM+

30 / 50

H i A h


31/50



QUN L NG THI NHIU NGIDNGQUN L NG THI NHIU NGIDNG

31 / 50

Hanoi Aptech


32/50



DI CHUYN I TNG NGI DNGDI CHUYN I TNG NGI DNG

32 / 50

Hanoi Aptech


33/50



TO NG THI NHIU I TNGNGI DNGTO NG THI NHIU I TNGNGI DNG

Sdng i tng mu Sdng Csvde.exe

Sdng i tng mu Sdng Csvde.exe

33 / 50

s .e e s .e e

Hanoi Aptech


34/50



SDNG I TNG MU (OBJECTTEMPLATES)SDNG I TNG MU (OBJECTTEMPLATES)

C th l ti khon ngi dng tn ti hoc mt tikhon c bit to ra dng sao chp.

Khng phi l tt cc cc thuc tnh sc sao chp.

C th l ti khon ngi dng tn ti hoc mt tikhon c bit to ra dng sao chp.

Khng phi l tt cc cc thuc tnh sc sao chp.

34 / 50

i tng dng lm mu nn trng thi v hiu ho trnh vic s dng ti khon ny.

i tng dng lm mu nn trng thi v hiu ho trnh vic s dng ti khon ny.

Hanoi Aptech


35/50



NHP TI KHON NGI SDNG CSVDIRECTORY EXCHANGENHP TI KHON NGI SDNG CSVDIRECTORY EXCHANGE

Tin li khi to mt s lng ln ngi dng cng mtthi im.

Bc 1: To tp Comma-Separated Value (CSV) cha

Tin li khi to mt s lng ln ngi dng cng mtthi im.

Bc 1: To tp Comma-Separated Value (CSV) cha

35 / 50

.

csvde foutputFileName

Bc 2: S dng Csvde.exe nhp thng tin ngidng t tp CSV vo Active Directory.

csvde i fFileName k

.

csvde foutputFileName

Bc 2: S dng Csvde.exe nhp thng tin ngidng t tp CSV vo Active Directory.

csvde i fFileName k

Hanoi Aptech Ch 6 LM ViC VI TI KHON NGI DNG


36/50



TO I TNG NGI DNG BNGDSADD.EXETO I TNG NGI DNG BNGDSADD.EXE

Tin ch dng dng lnh

C thc s dng trong tp BAT hoc script

C th c s d n b sun thm cc i t n khc

Tin ch dng dng lnh

C thc s dng trong tp BAT hoc script

C th c s d n b sun thm cc i t n khc

36 / 50

cng thun tin nh vi ngi dng. dsadd user UserDN[parameters]

dsadd user "CN=Scott

Bishop,OU=Employees,DC=contoso,DC=com"samidsbishop ln Bishop fn Scott [email protected]

cng thun tin nh vi ngi dng. dsadd user UserDN[parameters]

dsadd user "CN=Scott

Bishop,OU=Employees,DC=contoso,DC=com"samidsbishop ln Bishop fn Scott [email protected]

Hanoi Aptech Ch 6 LM ViC VI TI KHON NGI DNG


37/50

pACNA06 Course


CHNH SA DI TNG NGI DNGBNG DSMOD.EXECHNH SA DI TNG NGI DNGBNG DSMOD.EXE

Tin ch dng dng lnh

C thc s dng dng tp BAT hoc script

Ch c thc s dng chnh sa li cc i tng

Tin ch dng dng lnh

C thc s dng dng tp BAT hoc script

Ch c thc s dng chnh sa li cc i tng

37 / 50

c

Dsmod user UserDN[parameters]

Parameters s dng tng t nhi vi Dsadd tr:

samid memberof(c thdngDsmod group GroupDN

memberof GroupDN)

c

Dsmod user UserDN[parameters]

Parameters s dng tng t nhi vi Dsadd tr:

samid memberof(c thdngDsmod group GroupDN

memberof GroupDN)

Hanoi Aptech Chng 6: LM ViC VI TI KHON NGI DNG


38/50

ACNA06 CourseChng 6: LM ViC VI TI KHON NGI DNG

QUN L KHI LC NGI DNG (USERPROFILES)QUN L KHI LC NGI DNG (USERPROFILES)

Cho php mi ngi dng chnh sa mi trnglm vic ca mnh

Cha cc thit l n dn , shortcuts v cc

Cho php mi ngi dng chnh sa mi trnglm vic ca mnh

Cha cc thit l n dn , shortcuts v cc

38 / 50

la chn a thch (preferences) m bo mi trng lm vic ca mi ngi

dng khng nh hng n ngi dng khc

la chn a thch (preferences) m bo mi trng lm vic ca mi ngi

dng khng nh hng n ngi dng khc

Hanoi Aptech Chng 6: LM ViC VI TI KHON NGI DNG


39/50


NI DUNG KHI LC NGI DNGNI DUNG KHI LC NGI DNG

Cha cc ti liu v cc tp ca ring ngidng

Cc thit l v cu hnh ca n dn

Cha cc ti liu v cc tp ca ring ngidng

Cc thit l v cu hnh ca n dn

39 / 50

Thit lp mi trng v nn mn hnh Thit lp v cu hnh Control Panel

Thit lp mi trng v nn mn hnh Thit lp v cu hnh Control Panel

Hanoi AptechACNA06 C



40/50


CU TRC THMC KHI LC NGIDNGCU TRC THMC KHI LC NGIDNG

40 / 50

Hanoi AptechACNA06 C



41/50


SDNG KHI LC NGI DNG CC B(LOCAL PROFILES)SDNG KHI LC NGI DNG CC B(LOCAL PROFILES)

Lu tr trn h thng cc b

Ch c tc dng khi ngi dng ng nhp voh thn c lu Local Profile

Lu tr trn h thng cc b

Ch c tc dng khi ngi dng ng nhp voh thn c lu Local Profile

41 / 50

Khi cn ngi dng c th chnh sa li

Khi cn ngi dng c th chnh sa li


42/50




43/50

ACNA06 Courseg

S DNG KHI LC NGI DNG BT BUC(MANDATORY PROFILES)S DNG KHI LC NGI DNG BT BUC(MANDATORY PROFILES)

C th s dng cc b hoc di tr.

Ngi dng c th thc hin cc thay i,nhn cc tha i n khn c hi li khi

C th s dng cc b hoc di tr.

Ngi dng c th thc hin cc thay i,nhn cc tha i n khn c hi li khi

43 / 50

ngi dng ng xut. i tn Ntuser.dat thnh Ntuser.man > xcnh l khi lc dng bt buc.

ngi dng ng xut. i tn Ntuser.dat thnh Ntuser.man > xcnh l khi lc dng bt buc.




44/50

ACNA06 Course

GIM ST V KHC PHC S C NGI DNGGIM ST V KHC PHC S C NGI DNG

S dng chnh sch mt khu

S dng chnh sch kho ti khon

S dng chnh sch mt khu

S dng chnh sch kho ti khon

44 / 50




45/50

ACNA06 Course

SDNG CHNH SCH MT KHUSDNG CHNH SCH MT KHU

Cung cp cch kim sot mt khu s dng tit chc.

C th h vs cn bn ia tnh tin li v

Cung cp cch kim sot mt khu s dng tit chc.

C th h vs cn bn ia tnh tin li v

45 / 50

bo mt. Vic to mt chnh sch mt khu qu kht khe

s lm tng s cc cuc gi h trlin quan n

mt khu. i khi cn c tc dng ngc li:lm gim tnh bo mt ca h thng.

bo mt. Vic to mt chnh sch mt khu qu kht khe

s lm tng s cc cuc gi h trlin quan n

mt khu. i khi cn c tc dng ngc li:lm gim tnh bo mt ca h thng.




46/50

SDNG CHNH SCH KHO TI KHONSDNG CHNH SCH KHO TI KHON

Account Lockout Threshold: Ngng kho tikhon

Account Lockout Duration: Thi ian kho ti

Account Lockout Threshold: Ngng kho tikhon

Account Lockout Duration: Thi ian kho ti

46 / 50

khon Reset Account Lockout Counter After: t li

bm kho ti khon

khon Reset Account Lockout Counter After: t li

bm kho ti khon




47/50

ACTIVE DIRECTORY MY KHCHACTIVE DIRECTORY MY KHCH

Windows 2000, Windows XP, and Windows Server2003 c y cc kh nng ca Active Directory mykhch.

Windows 2000, Windows XP, and Windows Server2003 c y cc kh nng ca Active Directory mykhch.

47 / 50

, , ,

NT 4 yu cu phn mm ph tr c c y tnhnng ca Active Directory (DsClient.exe).

, , ,

NT 4 yu cu phn mm ph tr c c y tnhnng ca Active Directory (DsClient.exe).




48/50

KIM NH XC THC(Audit Authentication)KIM NH XC THC(Audit Authentication)

Cho php bn ghi vt cc dnh ng nhp liv thnh cng.

C th l mt hn ca chnh sch bo mt.

Cho php bn ghi vt cc dnh ng nhp liv thnh cng.

C th l mt hn ca chnh sch bo mt.

48 / 50

To ra cc ti ph thm cho h thng. c cu hnh trong GPO hay Local Security

Policy: Computer Configuration\Windows Settings\Security

Settings\Local Policies\Audit Policy

To ra cc ti ph thm cho h thng. c cu hnh trong GPO hay Local Security

Policy: Computer Configuration\Windows Settings\Security

Settings\Local Policies\Audit Policy




49/50

TNG KTTNG KT Ti khon ngi dng cc b c lu tr trn h thng cc

b v ngi dng ny ch c th truy nhp vo cc ti nguyncc b. Ti khon ngi dng min c lu tr trn my ch

iu khin min Active Directory v cho php ngi dng nytruy nhp vo cc ti nguyn trn ton mng.

i tng ngi dng bao gm cc thuc tnh ca c nhn

Ti khon ngi dng cc b c lu tr trn h thng ccb v ngi dng ny ch c th truy nhp vo cc ti nguyncc b. Ti khon ngi dng min c lu tr trn my ch

iu khin min Active Directory v cho php ngi dng nytruy nhp vo cc ti nguyn trn ton mng.

i tng ngi dng bao gm cc thuc tnh ca c nhn

49 / 50

.

Mt mu (template) i tng ngi dng l mt i tng mn sc sao chp to ngi dng mi. Nu mu l mtngi dng khng c thc th nn trng thi khng hotng (Disabled). Ch mt tp nh cc thuc tnh ngi dng l

c sao chp t mu. Windows Server 2003 c cc cng c dng dng lnh m bn

c th dng to v qun l cc i tng ca cc i tngActive Directory, bao gm Csvde.exe, Dsadd.exe vDsmod.exe.

.

Mt mu (template) i tng ngi dng l mt i tng mn sc sao chp to ngi dng mi. Nu mu l mtngi dng khng c thc th nn trng thi khng hotng (Disabled). Ch mt tp nh cc thuc tnh ngi dng l

c sao chp t mu. Windows Server 2003 c cc cng c dng dng lnh m bn

c th dng to v qun l cc i tng ca cc i tngActive Directory, bao gm Csvde.exe, Dsadd.exe vDsmod.exe.




50/50

TNG KT (tip theo)TNG KT (tip theo)

Khi lc ngi dng l tp hp cc folder v d liu to nn

mi trng nn cho mt ngi dng xc nh. Windows Server 2003 sinh ra khi lc ngi dng ring r cho

tng ngi ng nhp vo h thng. Khi lc ngi dng cc

Khi lc ngi dng l tp hp cc folder v d liu to nn

mi trng nn cho mt ngi dng xc nh. Windows Server 2003 sinh ra khi lc ngi dng ring r cho

tng ngi ng nhp vo h thng. Khi lc ngi dng cc

50 / 50

tr c lu tr trn my ch trong mng. Khi lc ngi dng bt buc khng bao githay i, cung

cp cng mt cu hnh nn n nh mi khi ngi dng ngnhp.

Kim nh xc thc cho php bn ghi vt cc hot ng ngnhp mng.

tr c lu tr trn my ch trong mng. Khi lc ngi dng bt buc khng bao githay i, cung

cp cng mt cu hnh nn n nh mi khi ngi dng ngnhp.

Kim nh xc thc cho php bn ghi vt cc hot ng ngnhp mng.

Documents

06.Lam Viec Voi Tai Khoan Nguoi Dung - Smith.N eBooks