Users in SBS Console differ from what is in AD Users and Computers

userswindows-sbs

We are under SBS 08 and I just saw something weird :

I opened SBS Console => Users and Groups. I refreshed the list of Users and I saw that I wasn't in it !

The list of users shown by SBS Console is different than the one in AD Users and Computers.

I also don't really understand the difference between SBS Role Group and AD role (like Domain Admins, etc).

Thanks for your help !

Best Answer

It seems that it perfectly normal -> click here

"If you have users that do not show in the SBS Console, you can get them to show by using the Change user role for user accounts wizard. It is important to notice that this wizard does much more than correctly “stamping” the user’s msSBSCreationState attribute. Using this wizard is only a work around to get the users to show in the SBS Console that were not created using the SBS provided tools. As shown above, the only recommended way adding new users are using the Add a new user account or Add multiple user accounts wizard."

I still have a question, what's the difference between User Role in SBS, and AD group like Domain Admin ?

Related Solutions

Puppet – How to Create and Manage Unix Users and Groups

Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast.

First: Relax. I've learned that, when you're new to something with a learning curve such as Puppet, it is pretty easy to become overwhelmed and not be able to get much done.

is his login thebob then defined two times, in lanusers.pp with groups => ["lan"] and in shellusers.pp with groups => ["shell"]?

Nope. Virtually define it in one place (maybe users.pp) with groups => ['shell', 'lan',].

On the nodes, realize the users you need. For example, if for node beamin we want all shell users:

node beamin {
    Account <| groups == 'shell' |>
}

What if Bob wants his lan password to be separate from his shell password?

Then Bob should probably get 2 different accounts with different login names.

Windows – Active Directory Administrative Center over Active Directory Users and Computers

Is there any difference using Active Directory Administrative Center over Active Directory Users and Computers?

Yes, ADUC is a subset of ADAC. ADAC is newer and allows for more complete administration. For example, you can enable the AD Recycle Bin, recover deleted objects with the Recycle Bin, and create a Fine Grained Password Policy from ADAC, but you can't do any of this from ADUC.

In training videos I've seen people mostly use the older look Active Directory Users and Computers and was wondering if it really matters?

For day-to-day administration (resetting passwords, managing group membership) probably not. You can do that from both.

Also, I've seen people add Users with Active Directory Users and Computers and they show in same window with the Groups. However, if you use Active Directory Administrative Center to add a user, you won't find the users in Active Directory Users and Computers unless you open up the group that you added the user(s) too.

I have no idea what you're trying to say here.

Is there a correct approach to working with users, groups and computers in active directory as far as which style is used?

ADUC is still very widely used. It's a familiar interface that's been around for 15 years now. ADAC hasn't been widely adopted (yet), but contains more features. If you want to be ahead of the curve and you're just learning now, I'd use ADAC first.

Best Answer

Related Solutions

Puppet – How to Create and Manage Unix Users and Groups

Windows – Active Directory Administrative Center over Active Directory Users and Computers

Related Topic