Active Directory question

Re: Active Directory question

  1. Yeah, you have to enter the admin credentials for each machine as you enter it in the domain. I heard there was a utility or 2 available out there, but haven’t used any. You can, technically, enter the PC names on the server itself, I believe, and then when you enter the domain on the PC it won’t ask for user credentials.

  2. You don’t really use port-blocking on a LAN for security, specially not to the DC’s. If you really want security use VLAN’s. But this selective port opening can really be scripted, so you just run it as the initial server deployment.

Another thought, if you are opening all those ports what else is there to protect :hehe:

  1. No, you don’t really need NetBIOS, just DNS should suffice, unless you’re into LAN browsing.