Active Directory Help needed

[Ulfwald]

Ok, I have my W2K Server up and running, and it is a domain controller. Now the question is, How do I get the shares to show up in active directory.

 

[flawedecision]

what do you mean show up in AD?

AD is a directory service which is going to make everything in your system an object including shares, printers, user accounts, etc.

If the share is shared, and you've set the share and security permissions on it then you should be able to access it, no?

edit: to modify the share and security permissions right click on the folder and go to properties.

 

[Ulfwald]

Ok, when I access the network through MY NETWORK PLACES, and select entire network, in the Directory It only lists Builtin, Computers, DOMAIN CONTROLERS, Foreign Security Principals, and Users. I was wondering where are my shares on the server? Yes I have shared out the folders, but they do not show up in the directory.

 

[flawedecision]

this is difficult for me to help with when i'm not in front of a server console..

under network neighborhood -- entire network -- are you seeing 'microsoft windows network'?

When you hit that you should perhaps see your domain name? Or your server name may be listed there? Try hitting that?

Pardon my inability to be coherent, its late and i'm trying to picture this in my head.


Anyway, if your share permissions and security permissions on the shared folder are set... you will be able to see those shares in the NN -- MS windows network area...

And you most definitely will see the shares in this area when on a workstation.

 

[Psychoholic]

Shares don't automatically show up in AD. To add them, open the AD Users and Computers Console. Navigate to the desired OU or create one. Then open that OU so that the contents of it are visible in the right hand pane. If it's a new OU the right-hand pane will be empty. Right click in the right-hand pane and select: New->Shared Folder. Enter the name and location for the share you wish to include in AD.

You have to add shares to AD. Just because you share a folder doesn't necessarily mean you want it published in AD.

 

[flawedecision]

what is the purpose of adding a share to AD?

 

[Psychoholic]

<< what is the purpose of adding a share to AD? >>


In all installations I have performed you share the folder then create a "pointer" in AD. AD, from a network share standpoint, makes the shares appear if they are in one location on the network, which makes it easier on the users. Instead of having to find the server name and then the share in Network Neighborhood they can just run down through AD or perform a search. I don't have all shares listed in the Directory because there are some the users don't use..

 

[flawedecision]

i assume this is irrelevant if the share is mapped?

 

[Ulfwald]

Thanks for the info guys.

Psychoholic, What is an OU"? I am learning this for my server, but I also want to understand it so I don't look like a paper MCSE.

 

[MulLa]

Instead of having to find the server name and then the share in Network Neighborhood they can just run down through AD or perform a search

Doesn't a DFS have the same effect?

 

[flawedecision]

Ulfwald an OU is an organizational unit. Consider it a mechanism you create to contain active directory objects. OU's have domainlike properties and a seecurity boundary that can have multiple policies applied to it.

They are good ways to delegate privileges within domains... ie you have a large user group of 'accountants'in your domain... there is a lot of activity in this area with new accounts being created/deleted constantly. Say you don't want to administer to this yourself, rather you want to give the group autonomy. Well rather than create a whole new domain for the 'accountants' group for management over this group, you can create an organizational unit and delegate certain users within the OU administrative privileges over that OU to add/delete accounts, change passwords, etc.

 

[Ulfwald]

Thanks for the information folks. I got it figured out. I knew that this place was a wealth of information, and this proves it. I will be back with more questions. Thans again to all you folks. Time to hit the sack.

 

[Psychoholic]

<< i assume this is irrelevant if the share is mapped? >>


Yeah, but mapping letters are limited. Besides do you really want to map every share to all users??? I don't. In addition you have to be careful and use the same mapping scheme for all users, otherwise when walking them through to a location you might put them in the wrong place.



<< Doesn't a DFS have the same effect? >>


It can from what I understand, but I'll be upfront in saying I don't use a DFS and I'm not sure of the in and outs of it. The AD can also manage, users, groups, contacts, etc. and provides them in a searchable index. This comes in very handy in many large organizations.

Good description of the OU flawedecision.