Copyright: Monday, July 09, 2001 08:13:15


Click to add a workstation to the list.


Click to configure the user’s access to NetWare-compatible workstations.


Select this option to allow users to log on to all workstations in the domain or forest.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


Provides a space for you to type the name of the company for the person.


Select this option if your domain has servers that use pre-Windows 2000 operating systems.


Provides a space for you to type the number of concurrent connections that the user is allowed.


Removes the selected name.


Provides a space for you to type the department for the person.


Provides a space for you to type all comments concerning this printer.


Provides a space for you to type a brief description for the selected container.


Provides a space for you to type a brief description for the selected object.


Provides a space for you to type a brief description for the selected object within the trusted domain.


No help information is currently available.


No help information is currently available.


Click to modify the selected name.


Provides a space for you to type the computer’s NetBIOS name. The most common types of NetBIOS names that can be used in the WINS database are Unique, Group, Domain Name, Internet Group, and Multihomed. For more information, see online Help available from the Start button.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


This value is set when the printer is installed. This printer information is published in Active Directory and can be searched by network users to locate printers with particular features. You can change this information, however, any changes will not change printer function.


Displays the person’s e-mail address.


Lists the logon script for the user. A user with a NetWare-enabled account could have both a system and a personal logon script. The system logon script is in the Sysvol\Public directory. Personal logon scripts for NetWare clients are in the Sysvol\Mail directory.


Click to add a NetWare-compatible workstation to the list of workstations available to the user.


Lists the NetWare-compatible workstations that the user can access when User May Log On To These NetWare Compatible Workstations is selected.


Specifies that the user is allowed access to all NetWare-compatible workstations.


Removes the selected NetWare-compatible workstation from the list of workstations available to the user.


Specifies that the user is allowed access only to certain NetWare-compatible workstations.


Provides a space for you to type the network address of the NetWare-compatible workstation.


Provides a space for you to type the node address of the NetWare-compatible workstation.


Provides a space for you to type the password for the displayed user account. The password you assign becomes the user’s new password and is used when logging on from a computer running either NetWare or Microsoft client software.


Provides a space for you to retype the password that you typed in Password.


Provides a space for you to type the number of grace logon attempts that the user is allowed.

Grace logons are the additional number of tries that a user has to log on after the user’s password expires. The user can use a grace logon to change the account password.


Specifies and provides a space for you to type the number of remaining grace logon attempts. The user must have at least one grace logon to log on and change the password.


Lists various keywords you can use to search for the selected object.


Specifies that the user is allowed a limited number of connections.


Specifies that the user is allowed a limited number of grace logon attempts.


Lists the NetBIOS names of all workstations that are members of the domain or forest.


Lists the groups for which the selected object is a member.


Indicates the location that this subnet or site refers to in your organization. If you have enabled Pre-populate printer search location text (the printer location tracking feature) in Group Policy, the subnet location string text is shown automatically to users on that subnet, whenever they start a search for printers.


Displays the name of the manager for this person.


Lists current members of the group. Add or remove members from this list with the corresponding buttons.


Specifies the model of this printer.


Specifies whether File and Print Services for NetWare is enabled for the user.


Provides a space for you to type the path to assign as the home directory path for the server. This path is relative to the NetWare SYS volume. The path is the root location for the user’s individual home directory.

If you specify a directory that does not already exist, you must create that directory manually. When you create a user’s home directory, confirm that it is in the home directory root path.


Specifies whether the user is forced to change the password the next time the user logs in from a NetWare client computer. If you select this option, confirm that the user has at least one grace logon.


Provides a space for you to type the office number for the person.


Displays the person’s telephone number.


Displays the objects for which this person is responsible.


No help information is currently available.


Click to modify a logon script for the user.


No help information is currently available.


No help information is currently available.


Displays the person’s full name as it is displayed in the domain.


Displays the person’s first name.


Displays the person’s last name.


Select this option to give the selected account permission to log on to any selected workstations in the list.


Provides a space for you to type the job title for the person.


Specifies that the user is allowed unlimited connections to the server.


Specifies that the user is allowed unlimited grace logon attempts after the user’s password expires.


Displays the URL for the person’s home page.


Specifies whether to use a custom schedule that will apply to all the connections between members of this replica set. This custom schedule will not override replication schedules defined explicitly for Connection objects.


You must have full administrative privileges on the other domain to modify trust.


Provides a space for you to type the DNS name you want to add, and then click Add.


Removes the selected name suffix from the list.


Provides a space for you to type comments or descriptions about the pre-Windows 2000 name.


Displays the domain operation mode. For more information, see Levels of Active Directory functionality.


Changes the domain mode of the currently selected domain to native mode. This change cannot be reversed.


Add a domain that is trusted by the domain specified in the first line. You can type the domain name or copy and paste it into this space.


Add the name of a domain that has a trusted relationship with this domain.


Specifies that the trust object for this side is stored in this domain.


Displays the name recognized by all clients running pre-Windows 2000 operating systems.


This option allows clients from trusted domains running a version of Windows NT the rights to access domains trusted by this domain.


Highlight the name suffix in the list, and then click Edit to modify the suffix.


The name typed here must be the DNS name used for the trusted domain.


Lists the DNS names of all trusted domains.


Displays the name of the domain that is in a trust relationship with the local domain.


Use the password for the administrative account that is used to log on to the other domain.


Type the administrative password used for accessing this domain. This password must match the one entered for the trusted relationship.


Type the administrative password used on the trusted side of the relationship.


For verification, re-type the password for the trusted domain.


For verification, re-type the password for the trusting domain.


Removes the selected domain from the list.


Removes the selected domain from the list.


Clicking this option will show the route of any indirect trust relationships for the domains in the list. An indirect trust relationship is established when two domains have established a trust relationship and a member of one domain is indirectly trusted by a member of the other domain.


Transitive trust is two-way, in that users from either domain can be authenticated in both domains of the relationship. If the trust is nontransitive, only users from the trusted domain can be authenticated.


Displays the direction of the trust. For more information, see Trust direction.


Validates the trust relationship. For information about troubleshooting trusts, see Troubleshooting.


Displays the type of trust that was established when the trust relationship was created. For more information, see Trust types.


Lists all previously added domains that are trusted by this domain.


Lists all previously added domains that trust this domain.


Click to view the properties of the selected domain.


Click to view the properties of the selected domain.


Displays the transitivity of the trust. For more information, see Trust direction.


Click to open the New Trust Wizard. The New Trust Wizard will help you create a Windows, external, forest, or realm trust.


Lists all DNS name suffixes that reside in the trusted partner’s forest. This list also displays routing and status information.


Click to save a log of name suffixes, DNS names, NetBIOS names and their status associated with this trust. This button is only available if the trust type is forest. You can also use this button to troubleshoot authentication problems.


Enables the selected DNS name suffix to be used for routing user authentication requests when users that reside in the partner forest log on from computers in this forest.


Disables the selected DNS name suffix from routing user authentication requests for users that reside in the partner forest but log on from computers in this forest.


Click to edit the selected DNS name suffix for more granular routing control.


Lists all DNS name suffixes that reside in the trusted partner’s forest. This list also displays routing and status information.


Click to add a DNS name suffix for exclusion. If you add a DNS name suffix, logon requests made to that name suffix will not be routed.


Remove the selected DNS name suffix from the exclusion list. If you remove a DNS name suffix, logon requests made to that name suffix will be routed.


Lists all child DNS name suffixes of the parent DNS name suffix.


Enables the selected child DNS name suffixes to be used for routing user authentication requests when users that reside in the partner forest log on from computers in this forest.


Disables the selected DNS name suffix from routing user authentication requests for users that reside in the partner forest, but log on from computers in this forest.


Provides a space for you to type a DNS name suffix to exclude from routing.


Displays the selected account's expiration date. Click the arrow to see the calendar and select another date. The account will expire in 30 days by default.


Select this option to allow the account to expire on a specified date.


Specifies whether the account is currently locked out. You cannot lock an account using this check box; you can only unlock accounts that become locked because of too many failed logon attempts. If you want to prevent use of an account, disable the account.


Specifies that the selected account will never expire. This option is selected by default.


Click to add new members to the list. Add members from any domain in the forest that conform to the group type and scope.


Click to add new groups to the list. Add groups from the local domain or from universal groups in other domains within the forest.


Click to add the new information to the list of other items.


Click to add any certificate that is saved in a certificate file either locally or in the directory.


Click to add any certificate from the local certificate store.


Provides a space for you to type the street address.


Provides a space for you to type a street address for this organizational unit.


Click to Browse the network.


Click to view the selected certificate. The certificate dialog box has three tabs: General, Details, and Certification Path. The General tab shows the certificate information and provides a button to view the issuer statement on the Internet or intranet. The Details tab shows various fields and values for the certificate and allows you to copy any of the fields to a file. The Certification Path tab shows the hierarchy of certification authorities for this certificate.


Click to change the manager for this object.


Lists various options for the selected account. For more information, see the online Help available from the Start button.


Provides a space for you to type the city name.


Provides a space for you to type the city for this selected object.


Provides a space for you to type the city where this person is located.


Click to clear the user or contact responsible for the management of the currently selected object.


Provides a space for you to type comments for this person.


Provides a space for you to type a company name.


Click to change the server that is currently linked for the replication service.


Provides a space for you to type the name of the computer that you want to be included in the replication service.


Specifies that the home folder is located on a network. To specify a network path for the home folder, you must first create the network share and set permissions that allow the user access. You can do this using shared folders on the other computer.


Select this option to choose a network path to connect to a home folder.


Click to copy a selected certificate in this list to a local certificate file or to another domain controller in the forest.


Lists the available countries or regions.


Displays the country or region where the user or contact responsible for the management of the selected object is located.


Caution. This setting is security sensitive and should be enabled only after careful consideration. To request additional services from other servers on behalf of a remote client, check the Trust computer for delegation check box to enable services running as local system on this computer.


Removes a selected item from the list.


Provides a space for you to type a department name.


Provides a space for you to type a description.


Provides a space for you to type a brief description of the group in this space.


Provides a space for you to type the description of the computer or group that is being added to the replication service.


Provides a space for you to type a brief description of the replica set for the share that is currently being used.


Provides a space for you to type a description of the share assigned to the domain system volume (SYSVOL).


Provides a space for you to type a brief description for the selected object.


Provides a space for you to type a brief description of the user.


Provides a space for you to type a brief description of the object.


The "friendly" or localized name used by other programs, such as Microsoft Exchange.


Provides a space for you to type the domain of the selected computer.


This is the computer's name as seen on all computers using a pre-Windows 2000 operating system.


Click the arrow and select a drive letter for the existing network share.


Click to edit a selected item in the list.


Provides a space for you to type a group description.


Provides a space for you to type additional telephone numbers.


Provides a space for you to type the name of a current directory filter to be used within the replica set.


Provides a space for you to type the name of a current file filter to be used within the replica set.


Provides a space for you to type an e-mail address.


Displays the e-mail address for this object.


Displays the fax number of the user or contact responsible for the selected account.


Provides a space for you to type a fax number.


Provides a space for you to type the person's first name.


Provides a space for you to type the local path on the DFS root for the domain system volume (SYSVOL).


Provides a space for you to type the local path on the DFS root for the staging directory.


Provides a space for you to type an intranet or Internet address.


Provides a space for you to type the home telephone number for this person.


Provides a space for you to type this person's IP telephony number.


Click to define words or terms used as attribute values for this object, which can then be used to search for the object.


Provides a space for you to type the person's last name.


Displays any additional items for this object.


Specifies that the home folder is located on a local path. In the space provided, type the path location.


Click this option to specify a folder on the person’s computer for their home folder, such as c:\users\%username%. Note: You must create the path and give the user permission to it for the home folder to be used. You can do this from Active Directory Users and Computers by right-clicking the person’s computer, and then clicking Manage.


Click to change the hours that this selected object can log on to the domain. By default, domain logon is allowed 24 hours a day, 7 days a week. Note that this control does not affect the user's ability to log on locally to a computer using a local computer account instead of a domain account.


Provides a space for you to type the location of the logon script. Logon scripts are located in the NETLOGON share located at %Systemroot%\Sysvol\DNSDomainName\Scripts.


Click to change computer access. The NetBIOS protocol is required for this feature.


Displays the user or contact responsible for the management of the currently selected object.


Displays the manager name.


Lists current members of the group. Add or remove members from this list with the corresponding buttons.


Lists the groups within the local domain and any universal groups to which the currently selected object belongs.


Click to select or change the manager name.


Clears the selected manager name.


Provides a space for you to type the mobile or cellular phone number for this user.


Displays the DNS name of the computer that is automatically entered during the logon process. Only members of the Domain Admins group are allowed to set or change this value.


Displays the domain name used by computers running pre-Windows 2000. It is also used in the pre-Windows 2000 syntax of domain_name\user_name user logon.


Displays the pre-Windows 2000 logon name for this user. This logon name automatically appears when the user logon name is entered.


Provides a space for you to type the account name for this person. This is the name the person will use to log on to a domain running Windows 2000 or later.


Displays the office location of the manager for this object.


Provides a space for you to type an office location.


Displays the name of the current operating system installed on the computer.


Displays the version of the current operating system installed on the computer.


Click to add additional fax numbers.


Click to access other telephone numbers for the user.


Click to view other IP telephony or Voice Over Internet Protocol (VOIP) numbers for this person.


Click to view other mobile or cellular phone numbers for this person.


Click to view other pager numbers for this person.


Click to add additional phone numbers.


Provides a space for you to type the user's pager number.


Displays the path within the domain for the selected object. The object class, the date the object was created or modified, and the update sequence number assigned to the object are shown.


Displays the telephone number of the user or contact responsible for the selected object.


Provides a space for you to type a telephone number.


Provides a space for you to type a post office box number.


Primary groups are used exclusively by Macintosh clients and POSIX-compliant applications. Unless you are using these services, there is no need to change the primary group. A user's primary group must be in the same domain as the user's account and the primary group must be either a global or universal security group.


Provides a space for you to type the profile path. For example, \\server\share\username.


Displays the Properties dialog box for the manager.


Select this option to designate the group as global. Global groups appear in the global catalog, but not their members. Membership changes in global groups are not replicated outside of the domain where they are defined.


Select this option to designate the group as domain local. Domain local groups are valid only in the domain where they are defined. Domain local group membership does not appear in the global catalog.


Select this option to allow the group members to create new user or group accounts within the assigned scope.


Select this option to allow the group members to make new or additional security settings within the assigned scope.


Select this option to designate the group as universal. A universal group appears in the global catalog, but it will primarily contain global groups from domains in the forest.


Highlight any user in the list, and then click Remove.


Click to remove any selected certificate from this list. When removed, a certificate will no longer be usable by the computer to which it was assigned, but will still be available in the certificate store.


Lists users and contacts who report directly to the currently selected account.


Removes the selected group. This group will no longer be available for membership.


The system automatically enters the role for this computer in this field. The computer’s role is a workstation, server, or domain controller.


Provides a space for you to type the name of the group as it will appear in a pre-Windows 2000 operating system.


Change the replication times for the domain system volume on the DFS root. The default time is set as Sunday through Saturday from 12 AM to 12 AM.


Change the replication times for the domain system volume on the DFS root. The default times are set for 4 times per hour, Sunday through Saturday from 12 AM to 12 AM.


Click to select another computer within the file replication service in which to link.


Provides a space for you to type the name of the computer to be linked using the file replication service.


This network path shows the location of the shared folder assigned to this user.


Displays the replica set used by the replication service for this domain.


Displays the state or province where the account responsible for the management of the selected object is located.


Provides a space for you to type the state or province where the selected object is located.


Provides a space for you to type the state or province name.


Provides a space for you to type a street address.


Displays the latest operating system Service Pack that is installed on the computer.


Provides a space for you to type a title.


Displays the fully qualified name of a resource on a network. The UNC (universal naming convention) name for this folder should conform to the \\servername\sharename syntax, where servername is the server’s name and sharename is the name of the shared resource. UNC names of directories or files can also include the directory path under the share name, with the following syntax: \\servername\sharename\directory\filename.


Lists the available user principal name (UPN) suffixes that may be used to create the user logon name. The list contains alternative universal principal name suffixes, which are created in Active Directory Domains and Trusts; the full DNS name of the forest; and the full DNS name of the domains in the forest.


Click to view the properties of the user or contact responsible for the currently selected object.


Click to view any selected certificate in the list.


Provides a space for you to type the zip or postal code.


Provides a space for you to type the zip or postal code for the mailing address of the selected object.


Provides a space for you to type the person’s initials.


Lists the available country or region names.


Specifies whether to change the account expiration for the selected users.


Specifies that you want to type a common description for the selected objects.


Specifies that you want to type a common office location for the selected users.


Specifies that you want to type a common telephone number for the selected users.


Specifies that you want to type a common fax number for the selected users.


Specifies that you want to type a common intranet or Internet address for the selected users.


Specifies that you want to type a common e-mail address for the selected users.


Specifies that you want to type a common title for the selected users.


Specifies that you want to type a common department for the selected users.


Specifies that you want to type a common company name for the selected users.


Specifies that you want to select a common manager name for the selected users.


Specifies that you want to type a common street address for the selected users.


Specifies that you want to type a common post office box for the selected users.


Specifies that you want to type a common city name for the selected users.


Specifies that you want to type a common state or province for the selected users.


Specifies that you want to type a common zip or postal code for the selected users.


Specifies that you want to type a common country or region name for the selected users.


Specifies that you want to type a common profile path for the selected users.


Specifies that you want to type a common path to the logon script for the selected users.


Specifies that you want to type a common home folder for the selected users.


Specifies that you want to change the description text for all selected objects.


Specifies that you want to change the user principal name (UPN) suffix for the selected users.


Specifies that you want to change the logon hours for the selected users.


Specifies that you want to change computer access for the selected users.


Click to add additional intranet or Internet addresses.


Ignores all replication schedules for this intersite transport. When schedules are ignored, replication is always available over all links for this intersite transport.


This option creates a transitive trust between all site links. This allows information to traverse all links rather than requiring the user to specify which links can be traversed. When all site links are bridged, all site links in this intersite transport that are connected to a shared site are considered part of a single site link, maximizing available replication links. By default, all site links are bridged.


Click to select a server for which to specify bridgehead status. A preferred bridgehead server is the preferred contact point for exchange of directory information between sites. The more information in the exchange, the more bandwidth the bridgehead server needs. You must establish a bridgehead server if you are using a proxy, such as is required when exchanging information through a firewall.


Click to select a licensing computer. For best performance, establish a licensing computer within each site.


Specifies the computer account referenced by the server object.


Specifies the computer you have designated as the licensing computer for this site. For best performance, establish a licensing computer within each site.


Provides a space for you to type a description for this connection.


Provides a space for you to type a description for this intersite transport.


Provides a space for you to type a description for the NTDS settings. NTDS settings contain the NTDS Connection objects. Connection objects are used for replicating directory information between this domain controller and other domain controllers.


Provides a space for you to type a description for this server.


Provides a space for you to type a description for this site licensing computer.


Provides a space for you to type the description for the default site link.


Provides a space for you to type a description for this site link bridge.


Provides a space for you to type a description for this subnet.


Specifies the domain that contains the computer account to which this server refers.


Specifies the domain of the computer you have designated as the licensing computer for this site.


Provides a list of available network protocols for this connection to use.


Lists the site with which this subnet corresponds.


Lists network protocols for which this server is a preferred bridgehead server.


Lists the sites that are included in this site link.


Lists the sites that are included in the site link bridge.


Lists network protocols available for use by this server for intersite replication, but for which this server is not a bridgehead.


Lists sites that are not included in this site link.


Lists the sites that are not included in this site link bridge.


Establishes the selected protocol as the protocol for which this server is a bridgehead server.


Click to add the selected site to this site link.


Click to add a selected site link to the list of site links in this bridge.


Establishes the selected protocol as unsupported by this bridgehead server. This bridgehead server will support this protocol for normal operations, but will not function as a bridgehead server for this protocol.


Click to remove the selected site from this site link.


Click to remove a selected site link from the site link bridge.


Names all domain controllers included in full replication over this site link. Full replication includes all property values for every object in the domain.


Type a cost value to indicate the preferential use of this link for replicating directory information between sites.


Names all domains included in partial replication over this site link. Partial replication is used between global catalogs to replicate a subset of property values for each object in the forest.


Type the duration in minutes between replications over this site link. Replication will occur only when this link is scheduled to be available. To check this link's scheduled availability, click Change Schedule.


Create a global catalog on this domain controller. A global catalog stores a full replica of the directory data for its own domain and a partial replica of the directory data for every other domain in the forest. Because global catalogs are used to check group membership during the logon process, each site should have at least one global catalog.


Selects which query policy will be used when searching the directory. Query policies are established using the Active Directory Service Interfaces (ADSI). ADSI provides the means for client applications of directory services to use one set of interfaces to communicate with any namespace that provides an ADSI implementation.


Click to specify when this connection is available to replicate directory information.


Click to specify when this connection is available to replicate directory information.


Click to select an alternative domain controller from which directory information is replicated on this site link.


Displays the name of the domain controller from which directory information is replicated on this site link.


Displays the name of the site that contains the domain controller from which directory information is replicated on this site link.


Displays the domain controllers and corresponding sites that replicate from this domain controller.


Displays the domain controllers and corresponding sites that replicate to this domain controller.


The CSH for the “DNS Alias” box


The CHS for the "Override Inherited Schedules" button?


Displays the subnets for the Default-First-Site-Name site settings object.


Displays the network IP address of the selected subnet. The IP address range of the subnet can be determined in combination with the subnet mask.


Displays the subnet mask for the IP address of the selected subnet.


No help associated with this control.


Displays the object class.


Displays the date and time the site object was created.


Displays the date and time the site object was last modified.


Displays the original update sequence number (USN).


Displays the current update sequence number (USN).