Copyright: Thursday, October 07, 1999 10:40:27


Click this option to change the type of objects displayed in the current Active Directory console. For example, to create a console that displays only Computer objects, click Computers. You can create different filters to customize consoles for different users and purposes.


Click this to force the user to change the password at the next logon.


A password can be up to 14 characters and is case sensitive. To change a password, you must type exactly the same set of characters in Confirm password as entered in New password.


Type the contact's name as it is to appear in Active Directory.


Clicking the Edit Filter button opens a Find Custom Search dialog box that you use to select objects for creating a custom filter for Active Directory.


Type the user's name as it is to appear in Active Directory.


Type the contact's full name in this space.


Type the group's name in this space.


Type the fully qualified user name in this space.


Type the contact's first name in this space.


Type the user's first name in this space.


Type the contact's last name in this space.


Type the user's last name in this space.


Use this space to control the maximum number of objects that can be displayed for any single folder in the Active Directory console tree. You can enter a number from 0 to 1,000,000,000. The default value of this setting is 2,000.


This is the user account name as defined by the Windows NT 4.0 Security Accounts Manager. This account name is used for logging on to a Windows NT 4.0 network. It is supported by Windows 2000 to provide compatibility.


Type the group's name as it appears to clients that are not running Windows 2000.


Type the user's pre-Windows 2000 logon name here. This user name is used in the pre-Windows 2000 format which is domainname\username.


Click the arrow to select the domain that the user will log on to.


Type the user's name that is used to log on to the domain.


Click this button to search for the domain controller for which you would like to change the name.


Type the name of the Windows 2000 domain controller that you want to connect to.


This is a list of all domain controllers available in this domain. Click the domain controller that you want to use.


Displays the fully qualified domain name of the domain that is the current focus of the Active Directory console. Domain controllers that exist in this domain are listed as available domain controllers. You can change the focus of the console to any one of the available domain controllers in the currently selected domain.


Click Browse to display a list of domains contained in the domain tree or forest. You can then change the focus of the Active Directory console to the selected domain.


Displays the fully qualified domain name of the domain that is the current focus of the Active Directory console. To change the focus of the Active Directory console to another domain within the forest, type the full DNS name of the domain here.


Specifies whether to save the current domain focus for the console. If selected, the next time the console is opened, the console will focus on the domain listed in the Root domain box.


Click this option to display all Active Directory objects in the Active Directory console. Show all types of objects is the default selection.


Click this option to activate the list of objects that you can select as filter objects for the Active Directory console.


Click this option to create a customized Active Directory console. You create a filter by creating a query for directory objects.


Every user account in Active Directory has a name that identifies the user account and that is used to authenticate the user during the network logon process. The user account name is a short common name for the user, and generally corresponds to the leftmost portion of the user's e-mail address. The user account name on a Windows 2000 network may be the same as the security account name used in previous versions of Windows. A user name cannot be identical to any other user or group name existing in the domain or computer being administered. It can contain up to 20 uppercase or lowercase characters except for the following:

"  /  \  [  ]  :  ;  |  =  ,  +  *  ?  <  >

A user name cannot consist solely of periods (.) or spaces.


This is the server currently selected as domain controller, the one from which Active Directory Users and Computers is reading and displaying information.


This is the domain controller that is currently the relative identifier master.


Click this button to transfer the role from the current server to the current focused domain controller. If the current domain controller and the current relative identifier master are the same, a message will appear indicating that you should first change the focus to the domain controller that will become the relative identifier master.


This is the server currently selected as domain controller, the one from which Active Directory Users and Computers is reading and displaying information.


This is the domain controller that is currently the flexible single master.


Click this button to transfer the role from the current server to the current focused domain controller. If the current domain controller and the current flexible single master are the same, a message will appear indicating that you should first change the focus to the domain controller that will become the flexible single master.


This is the server currently selected as domain controller, the one from which Active Directory Users and Computers is reading and displaying information.


This is the domain controller that is currently the primary domain controller master.


Click this button to transfer the role from the current server to the current focused domain controller. If the current domain controller and the current primary domain controller master are the same, a message will appear indicating that you should first change the focus to the domain controller that will become the primary domain controller master.


Type your network password in this field.


This list displays objects within the domain. Highlight an object from this list, and then click OK.


Click this button to add additional objects to the list for the selected account.


Click this button to make changes to the selected object in the list.


Click this button to remove the selected object from this list.


This list displays the distinguished name (DN) for each certificate that is mapped to the selected account.  A server application can then use public key technology to authenticate the user using this certificate.


This list displays the accounts from trusted non-Windows Kerberos realms that are mapped to the selected account.


This is the fully qualified domain name for the selected account.  The selected account is displayed in the following manner: domain name/type of account/user name


Select this option to repair a computer account on the domain controller.


Select this option to repair a computer account's password on the domain controller.


Select this option to repair the account type of the computer.


Select this option to synchronize the time service on the domain controller.


Select this option to reset the Active Directory services on the domain controller.


Select this option to synchronize the Active Directory replication service and all files that require synchronization.