Need a crash course in Active Directory...

[Lithium]

Never used AD, it's all a mystery to me.

Anyway so I'm doing a bit of self learning here and I've got myself two Windows 2008 VM's setup.

In my mind this is how i want it to work.

1. Setup domain controller and create domain.
2. Join server to the domain.
3. create user, give administrator rights on domain.
4. user can now logon to any server that is a member of the domain.

I'd also like to be able to have users that aren't administrators login to say specific servers etc..

Essentially I just want to use the basic user management of AD to track, log and control access to servers. Surely it can't be that hard can it?

But for example I can't login to the server remotely using the domain Administrator account and I can't see a check box that will allow it.

 

[Lithium]

Ahh I think I'm getting the idea now....

I kind assumed that if I create a user and add him to the Administrators group within the domain that I would automatically have access to anything within the domain.

Now it's clicked that I first have to add that user, or a group, to the Local Administrators group first (as well as the local remote desktop permissions area)

It's all working as expected. Will do some reading on OU's but so far it looks fairly simple to accomplish what I want... and from there I can look at other functionality.