| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Windows/Help/Windows/en-US/ |
Upload File : |
MZ @ PE L ! @ 0 @ .rsrc @ @.its @ @ 0 H X | |4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 b ! F i l e V e r s i o n 1 . 0 0 . 0 0 l " F i l e D e s c r i p t i o n C o m p i l e d M i c r o s o f t H e l p 2 . 0 T i t l e B F i l e S t a m p 9 8 D F 8 8 4 7 0 1 C A 0 4 1 F 4 J C o m p i l e r V e r s i o n 2 . 5 . 7 1 2 1 0 . 0 8 5 7 9 V C o m p i l e D a t e 2 0 0 9 - 0 7 - 1 4 T 0 1 : 0 8 : 2 8 > T o p i c C o u n t 9 7 0 0 0 0 0 0 0 0 0 0 0 0 A L e g a l C o p y r i g h t 2 0 0 5 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . C C C C C C C C C C C C C D V a r F i l e I n f o $ T r a n s l a t i o n ti a Gߘ ÐYITOLITLS ( X쌡^
V` x Z CAOL P HH C ITSF # 3 -Y쌡^
VY쌡^
VIFCM AOLL Z IFCM AOLL / /$FXFtiAttribute/ /$FXFtiAttribute/BTREE#/$FXFtiAttribute/DATA /$FXFtiAttribute/PROPERTY;N /$FXFtiMain/ /$FXFtiMain/BTREEE/$FXFtiMain/DATA]x/$FXFtiMain/PROPERTYUN/$Index/$ATTRNAME T/$Index/$PROPBAGa/$Index/$STRINGS!L/$Index/$SYSTEM^
/$Index/$TOC/ /$Index/$TOC/$dsac :/$Index/$TOPICATTR /$Index/$TOPICSc /$Index/$URLSTRmn/$Index/$URLTBL[/$Index/$VTAIDX]8/$Index/AssetId/ /$Index/AssetId/$BL0 /$Index/AssetId/$LEAF_COUNTS /$Index/AssetId/$LEAVES! /$OBJINST: /assets/ 0/assets/0093fd1d-372f-4f8b-9a71-51dfe19c9353.xml t=0/assets/103155f5-8171-4ce0-80b3-84ca7233bfde.xml 1#0/assets/13d75518-088d-48a6-bc1d-c6c499678daa.xml T*0/assets/1ade67b9-2f33-4075-80c8-07ef32a6486a.xml ~0/assets/1f8c3563-1cf4-438f-8967-149a02740470.xml }0/assets/20cf6385-c763-4a73-8bec-1d60ff4f3c65.xml
0/assets/21bdeabf-f601-4a1a-ae37-ec463526b339.xml )v0/assets/27584af3-5f9e-487c-bc94-dd632ae1195f.xml a0/assets/29bcac26-c9e6-455f-a69d-371cf1653097.xml v0/assets/2a65077d-48c5-46c0-aea5-bb23af222c9e.xml v 0/assets/2e7fb6b3-333f-42c9-b94e-769d1ea84b61.xml +0/assets/329e598c-8607-410a-95e9-0203acf77edc.xml * 0/assets/3416503b-2a04-4d80-bbc1-7b8b0f6defa1.xml F0/assets/36f23e85-adfe-4140-ab0a-a629dd13e282.xml \A0/assets/45555a35-f428-4298-8241-599217649c55.xml g0/assets/4d317cbf-28f8-4deb-b0ee-4b67a867e626.xml Y0/assets/536c96f9-5efc-4dab-8d81-632047d83d25.xml ]a0/assets/59c77fa8-3514-41dd-907e-235cff4b5634.xml >0/assets/5c4e1ee5-553f-4bfc-a633-d4122906eede.xml E50/assets/5dc7c150-6b3d-4e29-ba34-8e9a452a0142.xml zV0/assets/737e1fc9-c253-4659-9e54-b01b8fe3aaea.xml PP0/assets/73acc58e-f40d-4d4b-bcdc-9d97d39112c8.xml 0/assets/754b1a48-3802-4d8b-930c-613e1de2074b.xml $40/assets/7d69e1ed-7731-45ae-bc6d-cc213ef714ed.xml X0/assets/7f64b4b8-fbf9-43b3-9b5b-5160b73194ed.xml m0/assets/8767a036-292c-4ef0-ba2b-3645a22ec2ec.xml ~>0/assets/8af62920-cd73-4e19-b932-165599000009.xml <0/assets/8f9f23b0-37c3-4615-bd84-f3155f940d9c.xml ?+0/assets/9903f114-ea06-42ac-a96f-3ee85ae1c219.xml jS0/assets/992291e2-38f1-4a71-8796-8b3d520ee175.xml =H0/assets/9bc50ddb-3835-4cf3-983f-2146b6170a01.xml 0/assets/a14c2094-1491-4b23-b813-3a9d7b2ad2a9.xml s0/assets/a49a9bd3-b8e8-4745-9608-3d6e89aee280.xml 0/assets/a5432485-1ac7-433a-ac83-64efd6ca3eea.xml 0/assets/abeae4a5-c2b0-4695-8065-cc6f8fd13572.xml 0/assets/b398c749-d513-47b0-a1f3-a7dbc893bd3e.xml *50/assets/bbe55f3a-9635-4385-bc71-c19e7b5987f9.xml _0/assets/bd51787e-555d-44f9-af3d-404d7de1bb13.xml b*0/assets/bdd31e17-a283-45a9-8e62-ac0f8e48b907.xml `0/assets/c47c4e11-1d84-43c8-8b6f-d0b44b9663cb.xml lv0/assets/cfaae176-7c7d-41ed-868c-6d879e1ef008.xml bJ0/assets/e20d05ef-2361-482e-95f0-eafbe7e72664.xml ,J0/assets/ea4feae1-04db-4c02-8365-02b8fe69147d.xml vM0/assets/f49b175c-6d5c-4483-b9ee-a60ced4dbe6a.xml C0/assets/f51462ad-d2aa-460d-bfb5-3631e9edf274.xml Ea0/assets/f6e84891-ef26-4f1d-bac8-b58b7b977139.xml &{0/assets/f91ca7df-6101-45a6-947f-21385d0b5e01.xml !E0/assets/fb4fed9c-c641-404a-ab6a-df9398351443.xml f? /dsac.h1c %w /dsac.H1F 2 /dsac.H1T 0q /dsac.H1V Nb/dsac_AssetId.H1K !k/dsac_BestBet.H1K k/dsac_LinkTerm.H1K wl/dsac_SubjectTerm.H1K co::DataSpace/NameList <(::DataSpace/Storage/MSCompressed/Content R|,::DataSpace/Storage/MSCompressed/ControlData T )::DataSpace/Storage/MSCompressed/SpanInfo L/::DataSpace/Storage/MSCompressed/Transform/List <_::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ i::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ResetTable N`3::Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/
n[H5#@P q Z U n c o m p r e s s e d M S C o m p r e s s e d FX쌡^
VD LZXC HH <maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To delete a computer account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the computer account that you want to delete.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the computer account that you want to delete, and then click <maml:ui>Delete</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141803</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141803"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Reset the Password of a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To reset a user password using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the user account whose password you want to reset.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the user whose password you want to reset, and then click <maml:ui>Reset password</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Reset Password</maml:ui> dialog box, type and then confirm the password.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>If you want to require the user to change this password at the next logon process, select the <maml:ui>User must change password at next log on</maml:ui> check box.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Reset the Password of a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141679</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141679"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also reset a user password by using the <maml:ui>Reset Password</maml:ui> tile on the <maml:ui>Active Directory Administrative Center Overview</maml:ui> page.</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Computers</maml:title><maml:introduction>
<maml:para>You can use Active Directory Administrative Center to create new computer accounts or manage existing computer accounts. </maml:para>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding Computer Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=bbe55f3a-9635-4385-bc71-c19e7b5987f9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Create a New Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=20cf6385-c763-4a73-8bec-1d60ff4f3c65"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Add a Computer Account to a Group</maml:linkText><maml:uri href="mshelp://windows/?id=e20d05ef-2361-482e-95f0-eafbe7e72664"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Move a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=1ade67b9-2f33-4075-80c8-07ef32a6486a"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Reset a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=fb4fed9c-c641-404a-ab6a-df9398351443"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Disable or Enable a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=cfaae176-7c7d-41ed-868c-6d879e1ef008"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Delete a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=0093fd1d-372f-4f8b-9a71-51dfe19c9353"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To move a computer account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the computer account that you want to move.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the computer account that you want to move, and then click <maml:ui>Move</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Move</maml:ui> dialog box, use the column explorer to navigate to and select the folder to which you want to move the group, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You cannot use Active Directory Administrative Center to move computer accounts between domains. To move computer accounts between domains, use the Active Directory Migration Tool (ADMT). For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141774</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141774"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change a User's Primary Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To change a user’s primary group using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the user account whose primary group you want to change.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the user whose primary group you want to change, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Member Of</maml:ui> section, click the group that you want to set as the user's primary group, and then click <maml:ui>Set Primary Group</maml:ui>.
</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Change a User's Primary Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141695</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141695"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To create a new computer account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, right-click the node in which you want to add a new computer account, click <maml:ui>New</maml:ui>, and then click <maml:ui>Computer</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create Computer</maml:ui>, in the <maml:ui>Computer</maml:ui> section:</maml:para>
<maml:list class="unordered"><maml:listItem>
<maml:para>In <maml:ui>Name</maml:ui>, type the name of the new computer account.</maml:para>
<maml:para>By default, the name that you type is also entered as the <maml:ui>Computer (NetBIOS) name</maml:ui> of the new computer account.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>To protect the computer account from accidental deletion, select the <maml:ui>Protect from accidental deletion</maml:ui> check box.</maml:para></maml:listItem>
<maml:listItem><maml:para>If the computer using the account that you are creating is a pre–Windows 2000 computer, select the <maml:ui>Assign this computer account as a Pre-Windows 2000 computer</maml:ui> check box.</maml:para></maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create Computer</maml:ui>, modify the appropriate values in the <maml:ui>Managed By</maml:ui> and <maml:ui>Member Of</maml:ui> sections, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141741</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141741"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Organizational Units</maml:title><maml:introduction>
<maml:para>You can use Active Directory Administrative Center to create new organizational units (OUs) and containers or manage existing OUs and containers.</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=2a65077d-48c5-46c0-aea5-bb23af222c9e"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Create a New Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=59c77fa8-3514-41dd-907e-235cff4b5634"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Move an Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=a14c2094-1491-4b23-b813-3a9d7b2ad2a9"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Delete an Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=ea4feae1-04db-4c02-8365-02b8fe69147d"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Modify Group Type or Group Scope</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To modify group type or group scope using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the group whose type or scope you want to modify.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the group whose type or scope you want to modify, and then click <maml:ui>Properties</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Group</maml:ui> section, do one of the following: </maml:para>
<maml:list class="unordered"><maml:listItem><maml:para>To modify group type, under <maml:ui>Group type</maml:ui>, click the group type.</maml:para></maml:listItem>
<maml:listItem><maml:para>To modify group scope, under <maml:ui>Group scope</maml:ui>, select the group scope.</maml:para></maml:listItem></maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Modify Group Type or Group Scope (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141712</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141712"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>To modify group type or group scope, the domain functional level must be set to Windows 2000 native or higher. You cannot modify group type or group scope when the domain functional level is set to Windows 2000 mixed.</maml:para></maml:listItem>
<maml:listItem><maml:para>You can change the scope of a group from universal to domain local only on a global catalog server. An error message appears if the domain controller is not a global catalog server.</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To move a user account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the user account that you want to move.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the user account that you want to move, and then click <maml:ui>Move</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Move</maml:ui> dialog box, use the column explorer to navigate to and select the container to which you want to move the user account, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para>You cannot use Active Directory Administrative Center to move user accounts between domains. To move user accounts between domains, use the Active Directory Migration Tool (ADMT). For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141690</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141690"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Organizational Units</maml:title><maml:introduction>
<maml:para>The organizational unit (OU) is a particularly useful type of directory object in domains. OUs are Active Directory containers into which you can place users, groups, computers, and other OUs. An OU cannot contain objects from other domains.</maml:para>
<maml:para>An OU is the smallest scope or unit to which you can assign Group Policy settings or delegate administrative authority. By using OUs, you can create containers within a domain that represent the hierarchical, logical structures in your organization. You can then manage the configuration and use of accounts and resources based on your organizational model.</maml:para>
<maml:para>OUs can contain other OUs. You can extend a hierarchy of OUs as necessary to model your organization's hierarchy within a domain. Using OUs helps you minimize the number of domains that are required for your network.</maml:para>
<maml:para>You can use OUs to create an administrative model that you can scale to any size. A user can have administrative authority for all OUs in a domain or for a single OU. An administrator of an OU does not have to have administrative authority for any other OUs in the domain.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Raise the Domain Functional Level</maml:title><maml:introduction>
<maml:para>When you install Active Directory Domain Services (AD DS) on a server running Windows Server 2008 R2, a set of basic Active Directory features is enabled by default. In addition to the basic Active Directory features on individual domain controllers, there are new domain-wide and forest-wide Active Directory features that are available when all domain controllers in a domain or forest are running Windows Server 2008 R2. For more information, see <maml:navigationLink><maml:linkText>Understanding Domain and Forest Functionality</maml:linkText><maml:uri href="mshelp://windows/?id=36f23e85-adfe-4140-ab0a-a629dd13e282"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>For the new domain-wide features to be enabled, all domain controllers in the domain must be running Windows Server 2008 R2, and the domain functional level must be raised to Windows Server 2008 R2. You can use the following procedure to raise the domain functional level using Active Directory Administrative Center. </maml:para>
<maml:para>Membership in <maml:phrase>Domain Admins</maml:phrase> in the domain for which you want to raise the functional level or <maml:phrase>Enterprise Admins</maml:phrase> in AD DS, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To raise the domain functional level using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the navigation pane, right-click the domain for which you want to raise the functional level, and then click <maml:ui>Raise the domain functional level</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select an available domain functional level</maml:ui>, do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To raise the domain functional level to Windows Server 2008, click <maml:ui>Windows Server 2008</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To raise the domain functional level to Windows Server 2008 R2, click <maml:ui>Windows Server 2008 R2</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="caution"><maml:title>Caution </maml:title><maml:alert>After you set the domain functional level to a certain value, you cannot roll back or lower the domain functional level, with one exception: when you raise the domain functional level to Windows Server 2008 R2 and if the forest functional level is Windows Server 2008 or lower, you have the option of rolling the domain functional level back to Windows Server 2008. </maml:alert><maml:alert>You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.
</maml:alert></maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Raise the Domain Functional Level (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141909</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141909"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Interface: Active Directory Administrative Center</maml:title><maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Raise Forest Functional Level Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=c47c4e11-1d84-43c8-8b6f-d0b44b9663cb"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Raise Domain Functional Level Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=f91ca7df-6101-45a6-947f-21385d0b5e01"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Change Domain Controller Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=bd51787e-555d-44f9-af3d-404d7de1bb13"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Add Navigation Nodes Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=7d69e1ed-7731-45ae-bc6d-cc213ef714ed"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Customizing the Active Directory Administrative Center Navigation Pane</maml:linkText><maml:uri href="mshelp://windows/?id=4d317cbf-28f8-4deb-b0ee-4b67a867e626"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Properties - Account Section</maml:linkText><maml:uri href="mshelp://windows/?id=f51462ad-d2aa-460d-bfb5-3631e9edf274"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Properties - Profile Section</maml:linkText><maml:uri href="mshelp://windows/?id=5dc7c150-6b3d-4e29-ba34-8e9a452a0142"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Computer Properties - Delegation Section</maml:linkText><maml:uri href="mshelp://windows/?id=f6e84891-ef26-4f1d-bac8-b58b7b977139"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Create Organizational Unit - Organizational Unit Section</maml:linkText><maml:uri href="mshelp://windows/?id=a49a9bd3-b8e8-4745-9608-3d6e89aee280"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Domains</maml:title><maml:introduction>
<maml:para>Domains are units of replication. All the domain controllers in a particular domain can receive changes and replicate those changes to all the other domain controllers in the domain. Each domain in Active Directory Domain Services (AD DS) is identified by a Domain Name System (DNS) domain name. Each domain requires one or more domain controllers. If your network requires more than one domain, you can easily create multiple domains.</maml:para>
<maml:para>One or more domains that share a common schema and global catalog are referred to as a forest. The first domain in a forest is referred to as the forest root domain. If multiple domains in the forest have contiguous DNS domain names, the structure is referred to as a domain tree.</maml:para>
<maml:para>A single domain can span multiple physical locations or sites and contain millions of objects. Site structure and domain structure are separate and flexible. A single domain can span multiple geographical sites. A single site can include users and computers that belong to multiple domains. </maml:para>
<maml:para>A domain provides several benefits:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You can organize objects.</maml:para>
<maml:para>You do not have to create separate domains merely to reflect your company's organization of divisions and departments. Within a domain, you can use organizational units (OUs) for this purpose. Using OUs helps you manage the accounts and resources in the domain. You can then assign Group Policy settings and place users, groups, and computers into the OUs. Using a single domain greatly simplifies administrative overhead. For more information, see <maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can publish resources and information about domain objects. </maml:para>
<maml:para>A domain stores information only for objects that are located in that domain. Therefore, when you create multiple domains, you are partitioning or segmenting the directory to better serve different parts of your user base. When you use multiple domains, you can scale AD DS to include very large numbers of objects to accommodate your administrative and directory publishing requirements.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Delegating authority eliminates the need for a number of administrators with broad administrative authority. </maml:para>
<maml:para>By using delegated authority in conjunction with Group Policy objects and group memberships, you can assign an administrator rights and permissions to manage objects in an entire domain or in one or more OUs within the domain. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Security policies and settings (such as user rights and password policies) do not cross from one domain to another. </maml:para>
<maml:para>Each domain has its own security policies and trust relationships with other domains. However, the forest is the final security boundary.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Domain and Forest Functionality</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Domain and forest functionality</maml:title><maml:introduction>
<maml:para>Domain and forest functionality, which is available in Windows Server 2008 R2 Active Directory Domain Services (AD DS), provides a way to enable domain-wide or forest-wide Active Directory features in your network environment. Different levels of domain functionality and forest functionality are available, depending on your network environment.</maml:para>
<maml:para>If all the domain controllers in your domain or forest are running Windows Server 2008 R2 and the domain and forest functional levels are set to Windows Server 2008 R2, all domain-wide features and forest-wide features are available. When your domain or forest contains Windows 2000, Windows Server 2003, or Windows Server 2008 domain controllers, Active Directory features are limited. For more information about how to enable domain-wide features or forest-wide features, see <maml:navigationLink><maml:linkText>Raise the Domain Functional Level</maml:linkText><maml:uri href="mshelp://windows/?id=2e7fb6b3-333f-42c9-b94e-769d1ea84b61"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Raise the Forest Functional Level</maml:linkText><maml:uri href="mshelp://windows/?id=9903f114-ea06-42ac-a96f-3ee85ae1c219"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Domain functionality</maml:title><maml:introduction>
<maml:para>Domain functionality enables features that affect the entire domain—and that domain only. In Windows Server 2008 R2 AD DS, four domain functional levels are available: Windows 2000 native, Windows Server 2003 (the default), Windows Server 2008, and Windows Server 2008 R2. </maml:para>
<maml:para>The following table lists the domain functional levels and their corresponding supported domain controllers.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Domain functional level</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Supported domain controllers </maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Windows 2000 native</maml:para>
</maml:entry>
<maml:entry><maml:para>Windows 2000 Server</maml:para>
<maml:para>Windows Server 2003</maml:para>
<maml:para>Windows Server 2008</maml:para>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2003</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows Server 2003</maml:para>
<maml:para>Windows Server 2008</maml:para>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows Server 2008</maml:para>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>When you raise the domain functional level, domain controllers that run earlier operating systems cannot be introduced into the domain. For example, if you raise the domain functional level to Windows Server 2008 R2, you cannot add domain controllers running Windows Server 2008 to the domain.</maml:para>
<maml:para>The following table describes the domain-wide features that are enabled for the Windows Server 2008 R2 AD DS domain functional levels.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Domain functional level</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enabled features</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Windows 2000 native</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All default Active Directory features and the following features:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Universal groups are enabled for both distribution groups and security groups.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Group nesting.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Group conversion is enabled, which makes conversion possible between security groups and distribution groups.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Security identifier (SID) history.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2003</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All default Active Directory features, all features from the Windows 2000 native domain functional level, plus the following features:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The availability of the domain management tool, Netdom.exe, to prepare for domain controller rename.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Update of the logon time stamp. The <maml:phrase>lastLogonTimestamp</maml:phrase> attribute is updated with the last logon time of the user or computer. This attribute is replicated within the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The ability to set the <maml:phrase>userPassword</maml:phrase> attribute as the effective password on the inetOrgPerson object and user objects.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The ability to redirect Users and Computers containers. By default, two well-known containers are provided for housing computer and user/group accounts: cn=Computers,<domain root> and cn=Users,<domain root>. This feature makes it possible to define a new well-known location for these accounts.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Authorization Manager can store its authorization policies in AD DS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Constrained delegation is included, which makes it possible for applications to take advantage of the secure delegation of user credentials by means of the Kerberos authentication protocol. You can configure delegation to be allowed only to specific destination services.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Selective authentication is supported, which makes it possible to specify the users and groups from a trusted forest who are allowed to authenticate to resource servers in a trusting forest. </maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All default Active Directory features, all features from the Windows Server 2003 domain functional level, plus the following features:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Distributed File System (DFS) Replication support for SYSVOL, which provides more robust and detailed replication of SYSVOL contents.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Advanced Encryption Services (AES 128 and 256) support for the Kerberos authentication protocol. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Last Interactive Logon Information, which displays the time of the last successful interactive logon for a user, from what workstation, and the number of failed logon attempts since the last logon.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Fine-grained password policies (FGPP), which make it possible for password policies and account lockout policies to be specified for users and global security groups in a domain.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All default Active Directory features, all features from the Windows Server 2008 domain functional level, plus the following feature:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Authentication mechanism assurance, which packages information about the type of logon method (smart card or user name/password) that is used to authenticate domain users inside each user’s Kerberos token. When this feature is enabled in a network environment that has deployed a federated identity management infrastructure, such as Active Directory Federation Services (AD FS), the information in the token can then be extracted whenever a user attempts to access any claims-aware application that has been developed to determine authorization based on a user’s logon method.</maml:para></maml:listItem>
</maml:list>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Forest functionality</maml:title><maml:introduction>
<maml:para>Forest functionality enables features across all the domains in your forest. Four forest functional levels are available in Windows Server 2008 R2 operating system: Windows 2000, Windows Server 2003 (default), Windows Server 2008, and Windows Server 2008 R2. </maml:para>
<maml:para>The following table lists the forest functional levels that are available in Windows Server 2008 R2 and their corresponding supported domain controllers.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Forest functional level</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Supported domain controllers </maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Windows 2000 Server</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows NT 4.0</maml:para>
<maml:para>Windows 2000</maml:para>
<maml:para>Windows Server 2003</maml:para>
<maml:para>Windows Server 2008</maml:para>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2003 (the default)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows Server 2003</maml:para>
<maml:para>Windows Server 2008</maml:para>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows Server 2008</maml:para><maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>When you raise the forest functional level, domain controllers that are running earlier operating systems cannot be introduced into the forest. For example, if you raise the forest functional level to Windows Server 2008 R2, domain controllers that are running Windows Server 2008 cannot be added to the forest.</maml:para>
<maml:para>The following table describes the forest-wide features that are enabled for the Windows Server 2008 R2 forest functional levels.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Forest functional level</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Enabled features</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2003</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All default Active Directory features, plus the following features:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Forest trust.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Domain rename.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Linked-value replication. Changes in group membership store and replicate values for individual members instead of replicating the entire membership as a single unit. This results in lower network bandwidth and processor usage during replication and eliminates the possibility of lost updates when different members are added or removed concurrently at different domain controllers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The ability to deploy a read-only domain controller (RODC) that runs Windows Server 2008.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Improved Knowledge Consistency Checker (KCC) algorithms and scalability. The intersite topology generator (ISTG) uses improved algorithms that scale to support forests with a greater number of sites than can be supported at the Windows 2000 forest functional level. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The ability to create instances of the dynamic auxiliary class called <maml:phrase>dynamicObject</maml:phrase> in a domain directory partition.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The ability to convert an inetOrgPerson object instance into a User object instance, and the reverse.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The ability to create instances of the new group types, called application basic groups and Lightweight Directory Access Protocol (LDAP) query groups, to support role-based authorization.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Deactivation and redefinition of attributes and classes in the schema. </maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All the features that are available at the Windows Server 2003 forest functional level, but no additional features. All domains that are subsequently added to the forest, however, will operate at the Windows Server 2008 domain functional level by default.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Windows Server 2008 R2</maml:para>
</maml:entry>
<maml:entry><maml:para>All the features that are available at the Windows Server 2003 forest functional level, plus the following features:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>Active Directory Recycle Bin, which provides the ability to restore deleted objects in their entirety while AD DS is running.</maml:para></maml:listItem>
</maml:list>
<maml:para>All domains that are subsequently added to the forest will operate at the Windows Server 2008 R2 domain functional level by default.</maml:para>
<maml:para>If you plan to include only domain controllers that run Windows Server 2008 R2 in the entire forest, you might choose this forest functional level for administrative convenience. If you do, you will never have to raise the domain functional level for each domain that you create in the forest.</maml:para>
</maml:entry>
</maml:row>
</maml:table>
</maml:introduction>
</maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Groups</maml:title><maml:introduction>
<maml:para>You can use Active Directory Administrative Center to create new groups or manage existing groups. </maml:para>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding Groups</maml:linkText><maml:uri href="mshelp://windows/?id=8767a036-292c-4ef0-ba2b-3645a22ec2ec"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Create a New Group</maml:linkText><maml:uri href="mshelp://windows/?id=992291e2-38f1-4a71-8796-8b3d520ee175"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Add a Member to a Group</maml:linkText><maml:uri href="mshelp://windows/?id=bdd31e17-a283-45a9-8e62-ac0f8e48b907"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Modify Group Type or Group Scope</maml:linkText><maml:uri href="mshelp://windows/?id=27584af3-5f9e-487c-bc94-dd632ae1195f"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Move a Group</maml:linkText><maml:uri href="mshelp://windows/?id=5c4e1ee5-553f-4bfc-a633-d4122906eede"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Delete a Group</maml:linkText><maml:uri href="mshelp://windows/?id=8af62920-cd73-4e19-b932-165599000009"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Customizing the Active Directory Administrative Center Navigation Pane</maml:title><maml:introduction>
<maml:para>You can browse through the Active Directory Administrative Center Navigation Pane by using the tree view, which is similar to the Active Directory Users and Computers console tree, or by using the simple list view. </maml:para>
<maml:para>Whether you use the tree view or the simple list view, you can customize your Active Directory Administrative Center navigation pane anytime by adding various containers from the local domain or poany foreign domain (that is, a domain other than the local domain that has an established trust with the local domain) to the navigation pane as separate nodes. Customizing Active Directory Administrative Center navigation pane can provide quicker access to Active Directory objects. For more information, see <maml:navigationLink><maml:linkText>Manage Different Domains</maml:linkText><maml:uri href="mshelp://windows/?id=9bc50ddb-3835-4cf3-983f-2146b6170a01"></maml:uri></maml:navigationLink>. </maml:para>
<maml:para>Also, to further customize the navigation pane, you can rename or remove these manually added navigation pane nodes, create duplicates of these nodes, or move them up or down in the navigation pane.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You cannot customize the default local domain node.</maml:para>
</maml:alertSet>
<maml:procedure><maml:title>To customize the Active Directory Administrative Center navigation pane</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the Active Directory Administrative Center navigation pane, right-click the node that you want to modify. You can modify the position or name of the node, or you can create a duplicate of it.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Select one of the following options:</maml:para><maml:list class="unordered"><maml:listItem><maml:para><maml:ui>Rename</maml:ui></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:ui>Create duplicate node</maml:ui></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:ui>Remove</maml:ui></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:ui>Move up</maml:ui></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:ui>Move down</maml:ui></maml:para></maml:listItem></maml:list></maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>By using the simple list view, you can take advantage of the Most Recently Used (MRU) list. The MRU list automatically appears under a navigation node when you visit at least one container within this navigation node. You can also view the current MRU list by expanding the Active Directory Administrative Center breadcrumb bar. The MRU list always contains the last three containers that you visited within a particular navigation node. Every time that you select a particular container, this container is added to the top of the MRU list and the last container in the MRU list is removed from it.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Using the Active Directory Administrative Center breadcrumb bar</maml:title>
<maml:introduction>
<maml:para>You can use the Active Directory Administrative Center breadcrumb bar to navigate directly to a specific container within a local domain or any trusted foreign domain by clicking the breadcrumb bar (which puts it in edit mode) and specifying one of the following:</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para>A Lightweight Directory Access Protocol (LDAP) path for the desired container, for example, <maml:userInput>LDAP://cn=Users,DC=contoso,DC=com</maml:userInput></maml:para></maml:listItem>
<maml:listItem><maml:para>A distinguished name (also known as DN) for the desired container, for example, <maml:userInput>cn=Users,DC=contoso,DC=com</maml:userInput></maml:para></maml:listItem>
<maml:listItem><maml:para>A hierarchical path for the desired container, for example, <maml:userInput>Active Directory Domain Services\contoso (local)\Users</maml:userInput></maml:para></maml:listItem></maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:list class="unordered">
<maml:listItem><maml:para>You can use the Active Directory Administrative Center breadcrumb bar to navigate directly to a specific container only if this container is stored in the domain directory partition of the local domain or the trusted foreign domain that you are managing in Active Directory Administrative Center. You cannot use the Active Directory Administrative Center breadcrumb bar to navigate directly to containers that are stored in the configuration, schema, or application directory partitions of the local or trusted foreign domains that you are managing in Active Directory Administrative Center.
</maml:para></maml:listItem>
<maml:listItem><maml:para>To successfully navigate directly to a container by specifying its hierarchical path in the Active Directory Administrative Center breadcrumb bar, you must be managing the domain (local or a trusted foreign) that this container belongs to in the selected instance of Active Directory Administrative Center. However, this restriction does not apply to navigating to a specific container by specifying its LDAP path or a distinguished name in the breadcrumb bar.
</maml:para><maml:para>For example, if the domains contoso.com (a local domain) and fabricam.com (a foreign domain) have an established trust relationship, you can specify the LDAP paths or distinguished names of the containers in the breadcrumb bar. You can navigate successfully to the desired containers within both contoso.com and fabricam.com, regardless of whether contoso.com or fabricam.com is currently added to your Active Directory Administrative Center navigation pane. However, contoso.com and fabricam.com must be added to your navigation pane for you to navigate successfully to the containers within these domains by specifying the hierarchical paths of these containers in the breadcrumb bar.</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also copy a specified LDAP path, a distinguished name, or a hierarchical path from the Active Directory Administrative Center breadcrumb bar (by right-clicking the breadcrumb bar and selecting either <maml:ui>Copy Path</maml:ui> or <maml:ui>Copy Distinguished Name</maml:ui>) or paste it into the breadcrumb bar. This can be very useful if you want to copy and paste a certain path or distinguished name from the Active Directory Administrative Center into other tools and applications, such as, for example, the Active Directory module for Windows PowerShell, an instant message window, or an e-mail message.</maml:para></maml:listItem></maml:list>
</maml:alertSet>
</maml:introduction>
</maml:section><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding User Accounts</maml:title><maml:introduction>
<maml:para>Active Directory user accounts represent physical entities, such as people. You can also use them as dedicated service accounts for some applications.</maml:para>
<maml:para>User accounts are also referred to as security principals. Security principals are directory objects that are automatically assigned security identifiers (SIDs), which can be used to access domain resources. A user account primarily:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Authenticates the identity of a user.</maml:para>
<maml:para>A user account enables a user to log on to computers and domains with an identity that the domain can authenticate. Each user who logs on to the network should have his or her own unique user account and password. To maximize security, avoid having multiple users sharing one account.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Authorizes or denies access to domain resources.</maml:para>
<maml:para>After a user is authenticated, the user is authorized or denied access to domain resources based on the explicit permissions that are assigned to that user on the resource.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>User accounts</maml:title><maml:introduction>
<maml:para>The Users container in Active Directory Administrative Center contains three built-in user accounts: Administrator, Guest, and HelpAssistant. These built-in user accounts are created automatically when you create the domain.</maml:para>
<maml:para>Each built-in account has a different combination of rights and permissions. The Administrator account has the most extensive rights and permissions over the domain. The Guest account has limited rights and permissions. The following table describes each default user account on domain controllers running Windows Server 2008 R2.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Default user account</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Administrator </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The Administrator account has full control of the domain. It can assign user rights and access control permissions to domain users as necessary. Use this account only for tasks that require administrative credentials. We recommend that you set up this account with a strong password. </maml:para>
<maml:para>The Administrator account is a default member of the following Active Directory groups: Administrators, Domain Admins, Enterprise Admins, Group Policy Creator Owners, and Schema Admins. </maml:para>
<maml:para>The Administrator account can never be deleted or removed from the Administrators group, but it can be renamed or disabled. Because the Administrator account is known to exist on many versions of Windows, renaming or disabling this account will make it more difficult for malicious users to try to gain access to it.</maml:para>
<maml:para>The Administrator account is the first account that is created when you set up a new domain with the Active Directory Domain Services Installation Wizard.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>When the Administrator account is disabled, it can still be used to gain access to a domain controller in Safe Mode.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Guest </maml:para>
</maml:entry>
<maml:entry>
<maml:para>People who do not have an actual account in the domain can use the Guest account. A user whose account is disabled (but not deleted) can also use the Guest account. The Guest account does not require a password.</maml:para>
<maml:para>You can set rights and permissions for the Guest account just like any user account. By default, the Guest account is a member of the built-in Guests group and the Domain Guests global group, which allows a user to log on to a domain. The Guest account is disabled by default, and we recommend that it stay disabled.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>HelpAssistant (installed with a Remote Assistance session)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The HelpAssistant account is the primary account for establishing a Remote Assistance session. This account is created automatically when a Remote Assistance session is requested. It has limited access to the computer. The Remote Desktop Help Session Manager service manages the HelpAssistant account. This account is deleted automatically if no Remote Assistance requests are pending.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Securing user accounts</maml:title><maml:introduction>
<maml:para>If a network administrator does not modify the rights and permissions of built-in accounts, a malicious user (or service) can use them to illegally log on to a domain by using the Administrator account or Guest account. A good security practice for protecting these accounts is to rename or disable them. Because it retains its SID, a renamed user account retains all its other properties, such as its description, password, group memberships, user profile, account information, and any assigned permissions and user rights.</maml:para>
<maml:para>To obtain the security advantages of user authentication and authorization, use the Active Directory Administrative Center to create an individual user account for each user who will participate in your network. You can then add each user account (including the Administrator account and Guest account) to a group to control the rights and permissions that are assigned to the account. When you have accounts and groups that are appropriate for your network, you ensure that you can identify users that log on to your network and that they have access only to the permitted resources.</maml:para>
<maml:para>You can help defend your domain from attackers by requiring strong passwords and implementing an account lockout policy. Strong passwords reduce the risk of intelligent password guessing and dictionary attacks on passwords. An account lockout policy decreases the possibility of an attacker compromising your domain through repeated logon attempts. An account lockout policy determines how many failed logon attempts a user account can have before it is disabled.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>InetOrgPerson accounts</maml:title><maml:introduction>
<maml:para>Active Directory Domain Services (AD DS) provides support for the <maml:phrase>InetOrgPerson</maml:phrase> object class and its associated attributes, as defined in Request for Comments (RFC) 2798. The <maml:phrase>InetOrgPerson</maml:phrase> object class is used in several non-Microsoft, Lightweight Directory Access Protocol (LDAP) and X.500 directory services to represent people in an organization.</maml:para>
<maml:para>Support for <maml:phrase>InetOrgPerson</maml:phrase> makes migration from other LDAP directories to AD DS more efficient. An InetOrgPerson object is derived from the <maml:phrase>user</maml:phrase> class. It can function as a security principal, just like an object from the <maml:phrase>user</maml:phrase> class. For information about creating an inetOrgPerson user account, see <maml:navigationLink><maml:linkText>Create a New User Account</maml:linkText><maml:uri href="mshelp://windows/?id=b398c749-d513-47b0-a1f3-a7dbc893bd3e"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>When the domain functional level is set to Windows Server 2008 or Windows Server 2008 R2, you can set the <maml:phrase>userPassword</maml:phrase> attribute on <maml:phrase>InetOrgPerson</maml:phrase> and user objects as being the effective password, just as you can with the <maml:phrase>unicodePwd</maml:phrase> attribute.</maml:para>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To create a new organizational unit using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, right-click the node in which you want to add an organizational unit (OU), click <maml:ui>New</maml:ui>, and then click <maml:ui>Organizational Unit</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create Organizational Unit</maml:ui>, under <maml:ui>Organizational Unit</maml:ui>, </maml:para><maml:list class="unordered"><maml:listItem><maml:para>In <maml:ui>Name</maml:ui>, type the name of the new OU.</maml:para></maml:listItem>
<maml:listItem><maml:para>In <maml:ui>Address</maml:ui>, <maml:ui>Country/Region</maml:ui>, and <maml:ui>Description</maml:ui>, type the appropriate information.</maml:para></maml:listItem>
<maml:listItem><maml:para>To protect the OU from accidental deletion, select the <maml:ui>Protect from accidental deletion</maml:ui> check box.</maml:para></maml:listItem>
<maml:listItem><maml:para>To create the OU in a different node, click <maml:ui>Change</maml:ui>, and then use column explorer to navigate to and select another location for the OU.</maml:para></maml:listItem></maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create Organizational Unit</maml:ui>, modify the appropriate values under <maml:ui>Managed By</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141997</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141997"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To move a group using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the group that you want to move.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the group that you want to move, and then click <maml:ui>Move</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Move</maml:ui> dialog box, use the column explorer to navigate to and select the folder to which you want to move the group, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para>You cannot use Active Directory Administrative Center to move groups between domains. To move groups between domains, use the Active Directory Migration Tool (ADMT). For more information, see the ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141723</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141723"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Properties - Profile Section</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Profile path</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the profile path, for example, \\servername\sharefolder\<maml:replaceable>user name</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Log on script</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the location of the logon script.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Local path</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the home folder is located on a local path. In the space provided, type the path location.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Connect</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to choose a network path to connect to a home folder. You can select and configure the network path as follows:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Click the arrow in the drop-down list, and then select a drive letter.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In the <maml:ui>To</maml:ui> box, you can specify that the home folder is located on a network. To specify a network path for the home folder, you must first create the shared resource and set permissions that allow the user access. You can do this by using shared folders on another computer.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Active Directory Administrative Center</maml:title><maml:introduction>
<maml:para>Network administrators can use Active Directory® Administrative Center in the Windows Server® 2008 R2 operating system to administer and publish information in the directory. </maml:para>
<maml:para>Active Directory Administrative Center is built on Windows PowerShell™ command-line interface technology. It provides an enhanced Active Directory data management experience and a rich graphical user interface (GUI). </maml:para>
<maml:para>You can use Active Directory Administrative Center to perform common Active Directory object management tasks through both data-driven navigation and task-oriented navigation.
</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Locating Active Directory Objects in Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=73acc58e-f40d-4d4b-bcdc-9d97d39112c8"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
<maml:para>For more information about Active Directory Administrative Center, see What's New in AD DS: Active Directory Administrative Center (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=131022</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=131022"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Locating Active Directory Objects in Active Directory Administrative Center</maml:title><maml:introduction>
<maml:para>If you want to locate Active Directory objects quickly, you can use the Active Directory Administrative Center query-building search and filtering mechanism. When the Active Directory objects that you target are returned as the results of a search or a filter query, you can perform the necessary administrative tasks. </maml:para>
<maml:para>You can also save the queries that you build and use them again at a later time. Each saved query consists of the query criteria that you select, as well as the customized sorting and column information that you specify.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>Searching for Active Directory objects</maml:title>
<maml:introduction>
<maml:para>To search for Active Directory objects in Active Directory Administrative Center, you can use Global Search to specify a scope for your search query. </maml:para>
<maml:para>There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To search for Active Directory objects using Global Search</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the Active Directory Administrative Center navigation pane, click <maml:ui>Global Search</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You can also use the <maml:ui>Global Search</maml:ui> tile on the <maml:ui>Active Directory Administrative Center Overview</maml:ui> page.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>You can build a Global Search query using keywords and the available search criteria or by using the Lightweight Directory Access Protocol (LDAP) query mode.</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para>To build a query using keywords and search criteria, click <maml:ui>Normal</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>To add search criteria to your query, click <maml:ui>Add Criteria</maml:ui>.</maml:para>
</maml:alertSet></maml:listItem>
<maml:listItem><maml:para>To search for Active Directory Data by using the LDAP query mode, click <maml:ui>Convert to LDAP</maml:ui>.</maml:para></maml:listItem></maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To adjust the scope of your search query, click <maml:ui>Scope</maml:ui>.</maml:para>
<maml:para>The default Global Search scope is set to the local domain, that is, the domain that you are currently logged on to. You can also set Global Search scope to Global Catalog Search for any forest that you are managing in the selected instance of Active Directory Administrative Center or to one or more nodes that are currently added to your navigation pane.</maml:para>
<maml:para>If you set the scope of your query to Global Catalog Search for a particular forest that you are managing in Active Directory Administrative Center, the query returns a subset of the Active Directory objects that are stored across all the partitions of the selected forest, including domain partitions, configuration partitions, schema partitions, and all other user-defined partitions.</maml:para>
<maml:para>If you set the scope of your query to one or more nodes that are currently added to your navigation pane, the query returns a subset of the Active Directory objects that are stored in the containers that the selected navigation nodes represent, including all the children containers of the selected parent containers.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To run your query, click <maml:ui>Search</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>By default, Active Directory Administrative Center is installed on your Windows Server 2008 R2 computer with the Active Directory module for Windows PowerShell and the Active Directory Web Services (ADWS) service. The Active Directory module must be installed on your Windows Server 2008 R2 computer for Active Directory Administrative Center on this computer to function correctly. The ADWS service must be installed on at least one domain controller in the Active Directory domain so that you can use Active Directory Administrative Center to manage this domain. </maml:alert><maml:alert>The Active Directory module imposes a two-minute operations time-out (when it attempts to connect to the ADWS service), which is different from the operations time-out that is monitored and controlled by the ADWS service that is running on a Windows Server 2008 R2 server. When you are running a Global Search query in Active Directory Administrative Center, if you are experiencing a slow network connection or if the results of your Global Search query are not returned within the two minutes of the Active Directory module time-out, you might see the following error message: “The operation was aborted because the client side timeout limit was exceeded.”</maml:alert></maml:alertSet>
</maml:introduction>
</maml:section><maml:section><maml:title>Filtering through the Active Directory data of selected organizational units</maml:title>
<maml:introduction>
<maml:para>If an organizational unit (OU) contains a particularly large data set, you can narrow it down by building a query and filtering through the Active Directory data of that specific OU.</maml:para>
<maml:para>There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To filter through the Active Directory data of a selected OU</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Navigate to the desired OU by using either the Active Directory Administrative Center navigation pane or management list.</maml:para><maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>The scope of filtering through the Active Directory data of a specific OU is always set to that particular OU. It cannot be adjusted. This scope does not include any children OUs of the selected parent OU. To include the children OUs of the selected parent OU in the scope, in the <maml:ui>Tasks</maml:ui> pane, click <maml:ui>Search under this node</maml:ui>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Filter</maml:ui>, type keywords for your query, or to add criteria, click <maml:ui>Add criteria</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>If you build a query to filter through the Active Directory data of a specific OU, your query is applied only to the objects that are displayed in the Active Directory Administrative Center management list for this OU. In other words, this query will return a subset of the objects that are displayed in the Active Directory Administrative Center management list for this OU, not a subset of all objects that this OU contains. To specify the maximum number of objects that are displayed, per container (or OU), in the Active Directory Administrative Center management list, on the <maml:ui>View</maml:ui> menu, click <maml:ui>Management List Options</maml:ui>.</maml:para>
</maml:alertSet>
</maml:introduction>
</maml:section><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=737e1fc9-c253-4659-9e54-b01b8fe3aaea"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Domains and Domain Controllers</maml:title><maml:introduction>
<maml:para>You can use Active Directory Administrative Center to connect to a specific domain or domain controller and then view or manage the directory information for that domain or domain controller. You can also use Active Directory Administrative Center to manage Active Directory objects across multiple trusted domains.</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding Domains</maml:linkText><maml:uri href="mshelp://windows/?id=3416503b-2a04-4d80-bbc1-7b8b0f6defa1"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding Domain and Forest Functionality</maml:linkText><maml:uri href="mshelp://windows/?id=36f23e85-adfe-4140-ab0a-a629dd13e282"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Raise the Domain Functional Level</maml:linkText><maml:uri href="mshelp://windows/?id=2e7fb6b3-333f-42c9-b94e-769d1ea84b61"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Raise the Forest Functional Level</maml:linkText><maml:uri href="mshelp://windows/?id=9903f114-ea06-42ac-a96f-3ee85ae1c219"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Manage the Domain With a Different Domain Controller</maml:linkText><maml:uri href="mshelp://windows/?id=f49b175c-6d5c-4483-b9ee-a60ced4dbe6a"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Manage Different Domains</maml:linkText><maml:uri href="mshelp://windows/?id=9bc50ddb-3835-4cf3-983f-2146b6170a01"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add Navigation Nodes Dialog Box</maml:title><maml:introduction><maml:para>You can use <maml:ui>Add Navigation Nodes</maml:ui> to add nodes to your Active Directory Administrative Center navigation pane. You can browse through the <maml:ui>Add Navigation Nodes</maml:ui> column explorer and select (double-click) one or more containers to add to your navigation pane.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Connect to other domains</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click this link to connect to the domain that you want to manage in the selected instance of Active Directory Administrative Center using your current set of logon credentials.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>For more information about managing Active Directory objects across multiple domains, see <maml:navigationLink><maml:linkText>Manage Different Domains</maml:linkText><maml:uri href="mshelp://windows/?id=9bc50ddb-3835-4cf3-983f-2146b6170a01"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Connect to</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the name of the domain that you want to manage in the selected instance of Active Directory Administrative Center using your current set of logon credentials, for example, contoso.com.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para></maml:para>
<maml:para>For more information about customizing the Active Directory Administrative Center navigation pane, see <maml:navigationLink><maml:linkText>Customizing the Active Directory Administrative Center Navigation Pane</maml:linkText><maml:uri href="mshelp://windows/?id=4d317cbf-28f8-4deb-b0ee-4b67a867e626"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Modify the Logon Hours of a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To modify logon hours for a user account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the user account whose logon hours you want to modify.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the user whose logon hours you want to modify, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Account</maml:ui> section, click <maml:ui>Log on hours</maml:ui>, and then set the permitted or denied logon hours for the user.</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Modify the Logon Hours of a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141694</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141694"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Groups</maml:title><maml:introduction>
<maml:para>A group is a collection of user and computer accounts, contacts, and other groups that you can manage as a single unit. Users and computers that belong to a particular group are referred to as group members. </maml:para>
<maml:para>Groups in Active Directory Domain Services (AD DS) are directory objects that reside in a domain and in organizational unit (OU) container objects. AD DS provides a set of default groups at installation. It also provides an option to create groups.</maml:para>
<maml:para>You can use groups in AD DS to:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Simplify administration by assigning permissions on a shared resource to a group, rather than to individual users. Assigning permissions to a group assigns the same access to the resource to all members of that group.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Delegate administration by assigning user rights once to a group through Group Policy. You can then add members to the group that you want to have the same rights as the group.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Create e-mail distribution lists.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Groups are characterized by their scope and their type. The scope of a group determines the extent to which the group is applied within a domain or forest. The group type determines whether you can use a group to assign permissions from a shared resource (for security groups) or use a group for e-mail distribution lists only (for distribution groups). </maml:para>
<maml:para>There are also groups for which you cannot modify or view the memberships. These groups are referred to as special identities. They represent different users at different times, depending on the circumstances. For example, the Everyone group is a special identity that represents all current network users, including guests and users from other domains.</maml:para>
<maml:para>The following sections provide additional information about group accounts in AD DS.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Default groups</maml:title><maml:introduction>
<maml:para>Default groups, such as the Domain Admins group, are security groups that are created automatically when you create an Active Directory domain. You can use these predefined groups to help control access to shared resources and to delegate specific, domain-wide, administrative roles.</maml:para>
<maml:para>Many default groups are automatically assigned a set of user rights that authorize members of the group to perform specific actions in a domain, such as logging on to a local system or backing up files and folders. For example, a member of the Backup Operators group has the right to perform backup operations for all domain controllers in the domain.</maml:para>
<maml:para>When you add a user to a group, the user receives the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>All the user rights that are assigned to the group</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All the permissions that are assigned to the group on any shared resources</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Default groups are located in the Builtin container and the Users container. The default groups in the Builtin container have a group scope of Builtin Local. Their group scope and group type cannot be changed. The Users container contains groups that are defined with global scope and groups that are defined with domain local scope. You can move groups that are located in these containers to other groups or OUs within the domain, but you cannot move them to other domains.</maml:para>
<maml:para>For more information about default groups, see Default groups (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=131422</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=131422"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Group scope</maml:title><maml:introduction>
<maml:para>Groups are characterized by a scope that identifies the extent to which the group is applied in the domain tree or forest. There are three group scopes: domain local, global, and universal.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Domain local groups</maml:title><maml:introduction>
<maml:para>Members of domain local groups can include other groups and accounts from Windows NT, Windows 2000, Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2 domains. Members of these groups can be assigned permissions only within a domain.</maml:para>
<maml:para>Groups with domain local scope help you define and manage access to resources within a single domain. These groups can have the following as their members: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Accounts from any domain</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Global groups from any domain</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Universal groups from any domain</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Domain local groups, but only from the same domain as the parent domain local group</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A mixture of any of the above</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For example, to give five users access to a particular printer, you can add all five user accounts in the printer permissions list. If, however, you later want to give the five users access to a new printer, you again have to specify all five accounts in the permissions list for the new printer.</maml:para>
<maml:para>With a little planning, you can simplify this routine administrative task by creating a group with domain local scope and assigning it permission to access the printer. Put the five user accounts in a group with global scope, and add this group to the group that has domain local scope. When you want to give the five users access to a new printer, assign the group with domain local scope permission to access the new printer. All members of the group with global scope automatically receive access to the new printer.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Global groups</maml:title><maml:introduction>
<maml:para>Members of global groups can include accounts from the same domain as the parent global group and global groups from the same domain as the parent global group. Members of these groups can be assigned permissions in any domain in the forest.</maml:para>
<maml:para>Use groups with global scope to manage directory objects that require daily maintenance, such as user and computer accounts. Because groups with global scope are not replicated outside their own domain, you can change accounts in a group having global scope frequently without generating replication traffic to the global catalog.</maml:para>
<maml:para>Although rights and permissions assignments are valid only within the domain in which they are assigned, by applying groups with global scope uniformly across the appropriate domains, you can consolidate references to accounts with similar purposes. This simplifies and rationalizes group management across domains. For example, in a network with two domains, Europe and UnitedStates, if there is a group with global scope called GLAccounting in the UnitedStates domain, there should also be a group called GLAccounting in the Europe domain (unless the accounting function does not exist in the Europe domain).</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>We strongly recommend that you use global groups or universal groups instead of domain local groups when you specify permissions on domain directory objects that are replicated to the global catalog. </maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Universal groups</maml:title><maml:introduction>
<maml:para>Members of universal groups can have the following as their members: </maml:para>
<maml:list class="unordered"><maml:listItem><maml:para>Accounts from any domain within the forest in which this Universal Group resides</maml:para></maml:listItem>
<maml:listItem><maml:para>Global groups from any domain within the forest in which this Universal Group resides</maml:para></maml:listItem>
<maml:listItem><maml:para>Universal groups from any domain within the forest in which this Universal Group resides</maml:para></maml:listItem></maml:list>
<maml:para>Members of these groups can be assigned permissions in any domain in the domain tree or forest. Use groups with universal scope to consolidate groups that span domains. To do this, add the accounts to groups with global scope and nest these groups within groups that have universal scope. When you use this strategy, any membership changes in the groups that have global scope do not affect the groups with universal scope.</maml:para>
<maml:para></maml:para>
<maml:para>For example, in a network with two domains, Europe and UnitedStates, and a group that has global scope called GLAccounting in each domain, create a group with universal scope called UAccounting that has as its members the two GLAccounting groups, UnitedStates\GLAccounting and Europe\GLAccounting. You can then use the UAccounting group anywhere in the enterprise. Any changes in the membership of the individual GLAccounting groups will not cause replication of the UAccounting group.</maml:para>
<maml:para>Do not change the membership of a group with universal scope frequently. Any changes to the membership of this type of group cause the entire membership of the group to be replicated to every global catalog in the forest. </maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Group types</maml:title><maml:introduction>
<maml:para>There are two types of groups in AD DS: distribution groups and security groups. You can use distribution groups to create e-mail distribution lists. You can use security groups to assign permissions to shared resources.</maml:para>
<maml:para>You can use distribution groups only with e-mail applications (such as Microsoft Exchange Server 2007) to send e-mail to collections of users. Distribution groups are not security enabled, which means that they cannot be listed in discretionary access control lists (DACLs). If you need a group for controlling access to shared resources, create a security group.</maml:para>
<maml:para>When they are used with care, security groups provide an efficient way to assign access to resources on your network. By using security groups, you can: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Assign user rights to security groups in AD DS. </maml:para>
<maml:para>User rights are assigned to a security group to determine what members of that group can do within the scope of a domain (or forest). User rights are automatically assigned to some security groups at the time that AD DS is installed to help administrators define a person's administrative role in the domain. For example, a user who is added to the Backup Operators group in AD DS has the ability to back up and restore files and directories on each domain controller in the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Assign permissions to security groups on resources. </maml:para>
<maml:para>Permissions are different from user rights. Permissions determine who can access a shared resource. They also determine the level of access, such as Full Control. You can use security groups to manage access and permissions to a shared resource. Some permissions that are set on domain objects are automatically assigned to allow various levels of access to default security groups, such as the Account Operators group or the Domain Admins group. </maml:para>
</maml:listItem>
</maml:list>
<maml:para>Like distribution groups, security groups can also be used as e-mail entities. Sending an e-mail message to a security group sends the message to all the members of the group.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Special identities</maml:title><maml:introduction>
<maml:para>In addition to the groups in the Users container and Builtin container, servers running Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 include several special identities. For convenience, these identities are generally referred to as groups. These special groups do not have specific memberships that can be modified. However, they can represent different users at different times, depending on the circumstances. The following groups represent special identities:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Anonymous Logon </maml:para>
<maml:para>This group represents users and services that access a computer and its resources through the network without using an account name, password, or domain name. On computers running Windows NT and earlier, the Anonymous Logon group is a default member of the Everyone group. On computers running Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003, the Anonymous Logon group is not a member of the Everyone group by default.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Everyone </maml:para>
<maml:para>This group represents all current network users, including guests and users from other domains. Whenever a user logs on to the network, the user is added automatically to the Everyone group. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Network </maml:para>
<maml:para>This group represents users who are currently accessing a given resource over the network, as opposed to users who access a resource by logging on locally at the computer where the resource is located. Whenever a user accesses a given resource over the network, the user is added automatically to the Network group. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Interactive </maml:para>
<maml:para>This group represents all users who are currently logged on to a particular computer and who are accessing a given resource that is located on that computer, as opposed to users who access the resource over the network. Whenever a user accesses a given resource on the computer to which they are currently logged on, the user is added automatically to the Interactive group. </maml:para>
</maml:listItem>
</maml:list>
<maml:para>Although the special identities can be assigned rights and permissions to resources, the memberships of special identities cannot be modified or viewed. Group scopes do not apply to special identities. Users are assigned automatically to these special identities whenever they log on or access a particular resource. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Where groups can be created</maml:title><maml:introduction>
<maml:para>In AD DS, groups are created in domains. You can use Active Directory Administrative Center to create groups. When you have the necessary permissions, you can create groups in the root domain of the forest, in any other domain in the forest, or in an OU.</maml:para>
<maml:para>Besides the domain in which it is created, a group is also characterized by its scope. The scope of a group determines the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The domain from which members can be added</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The domain in which the rights and permissions that are assigned to the group are valid</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Choose the particular domain or OU where you create a group based on the administration that is required for the group. For example, if your directory has multiple OUs, each of which has a different administrator, you may want to create groups with global scope within those OUs so that the administrators can manage group membership for users in their respective OUs. If groups are required for access control outside the OU, you can nest the groups in the OU into groups with universal scope (or other groups with global scope) that you can use elsewhere in the forest.</maml:para>
<maml:para>If the domain functional level is set to Windows 2000 native or higher, the domain contains a hierarchy of OUs, and administration is delegated to administrators at each OU, it may be more efficient to nest groups with global scope. For example, if OU1 contains OU2 and OU3, a group with global scope in OU1 can have as its members groups with global scope in OU2 and OU3. In OU1, the administrator can add or remove group members from OU1, and the administrators of OU2 and OU3 can add or remove group members for accounts from their own OUs without having administrative rights for the group with global scope in OU1.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You can move groups within a domain. However, only groups with universal scope can be moved from one domain to another. The rights and permissions that are assigned to a group with universal scope are lost when the group is moved to another domain, and new assignments must be made.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To delete a group using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the group that you want to delete.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the group that you want to delete, and then click <maml:ui>Delete</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141735</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141735"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To delete a user account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the user account that you want to delete.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the user that you want to delete, and then click <maml:ui>Delete</maml:ui>. </maml:para>
</maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141700</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141700"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Raise the Forest Functional Level</maml:title><maml:introduction>
<maml:para>When you install Active Directory Domain Services (AD DS) on a server running Windows Server 2008 R2, a set of basic Active Directory features is enabled by default. In addition to the basic Active Directory features on individual domain controllers, there are new domain-wide and forest-wide Active Directory features that are available when all domain controllers in a domain or forest are running Windows Server 2008 R2. For more information, see <maml:navigationLink><maml:linkText>Understanding Domain and Forest Functionality</maml:linkText><maml:uri href="mshelp://windows/?id=36f23e85-adfe-4140-ab0a-a629dd13e282"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To enable new forest-wide features, all domain controllers in the forest must be running Windows Server 2008 R2 and the forest functional level must be raised to Windows Server 2008 R2. You can use the following procedure to raise the forest functional level using Active Directory Administrative Center.</maml:para>
<maml:para>Membership in <maml:phrase>Domain Admins</maml:phrase> in the forest root domain or <maml:phrase>Enterprise Admins</maml:phrase> in AD DS, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To raise the forest functional level using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the navigation pane, right-click the domain that belongs to a forest whose functional level you want to raise, and then click <maml:ui>Raise the forest functional level</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select an available forest functional level</maml:ui>, do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To raise the forest functional level to Windows Server 2008, click <maml:ui>Windows Server 2008</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To raise the forest functional level to Windows Server 2008 R2, click <maml:ui>Windows Server 2008 R2</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="caution"><maml:title>Caution </maml:title><maml:alert>After you set the forest functional level to a certain value, you cannot roll back or lower the forest functional level, with one exception: when you raise the forest functional level to Windows Server 2008 R2 and if Active Directory Recycle Bin is not enabled, you have the option of rolling the forest functional level back to Windows Server 2008. (For more information about the Active Directory Recycle Bin, see What's New in AD DS: Active Directory Recycle Bin (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141392</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141392"></maml:uri></maml:navigationLink>). </maml:alert><maml:alert>You can lower the forest functional level only from Windows Server 2008 R2 to Windows Server 2008. If the forest functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.
</maml:alert></maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Domains that are set to the domain functional level of Windows Server 2008 will be raised automatically to Windows Server 2008 R2 at the same time that the forest functional level is raised to Windows Server 2008 R2.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Raise the Forest Functional Level (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141939</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141939"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To create a new group using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, right-click the node in which you want to add a group, click <maml:ui>New</maml:ui>, and then click <maml:ui>Group</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create Group</maml:ui>, in the <maml:ui>Group</maml:ui> section:</maml:para>
<maml:list class="unordered"><maml:listItem>
<maml:para>Type the name of the new group.</maml:para>
<maml:para>By default, the name that you type is also entered as the <maml:ui>Group (SamAccountName) name</maml:ui> of the new group.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In <maml:ui>Group scope</maml:ui>, click one of the options.</maml:para>
<maml:para>For more information, see the section "Group scope" in <maml:navigationLink><maml:linkText>Understanding Groups</maml:linkText><maml:uri href="mshelp://windows/?id=8767a036-292c-4ef0-ba2b-3645a22ec2ec"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In <maml:ui>Group type</maml:ui>, click one of the options.</maml:para>
<maml:para>For more information, see the section "Group types" in <maml:navigationLink><maml:linkText>Understanding Groups</maml:linkText><maml:uri href="mshelp://windows/?id=8767a036-292c-4ef0-ba2b-3645a22ec2ec"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>To protect the group from accidental deletion, select the <maml:ui>Protect from accidental deletion</maml:ui> check box.</maml:para></maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create Group</maml:ui>, modify the appropriate values in the <maml:ui>Managed By</maml:ui>, <maml:ui>Member Of</maml:ui>, and <maml:ui>Members</maml:ui> sections, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141703</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141703"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Manage Different Domains</maml:title><maml:introduction>
<maml:para>When you open Active Directory Administrative Center on your computer that is running Windows Server 2008 R2 or Windows 7 (the latter, by using Windows Server 2008 R2 Remote Server Administrative Tools (RSAT)), the domain that you are currently logged on to on this computer (the local domain) appears in the Active Directory Administrative Center navigation pane. Depending on the rights of your current set of logon credentials, you can view or manage the Active Directory objects in this local domain.</maml:para>
<maml:para>You can also use the same set of logon credentials and the same instance of Active Directory Administrative Center to view or manage Active Directory objects in any other domain (that belongs or does not belong to the same forest as the local domain) as long as it has an established trust with the local domain. Both one-way trusts and two-way trusts are supported.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>If there is a one-way trust between Domain A and Domain B through which users in Domain A can access resources in Domain B but users in Domain B cannot access resources in Domain A, if you are running Active Directory Administrative Center on the computer where Domain A is your local domain, you can connect to Domain B with the current set of logon credentials and in the same instance of Active Directory Administrative Center. But if you are running Active Directory Administrative Center on the computer where Domain B is your local domain, you cannot connect to Domain A with the same set of credentials in the same instance of the Active Directory Administrative Center.</maml:para>
</maml:alertSet>
<maml:para>There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To manage a foreign domain in the selected instance of Active Directory Administrative Center using the current set of logon credentials</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open <maml:ui>Add Navigation Nodes</maml:ui>, in Active Directory Administrative Center, click <maml:ui>Add Navigation Nodes</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open <maml:ui>Add Navigation Nodes</maml:ui> is to right-click anywhere in the Active Directory Administrative Center navigation pane, and then click <maml:ui>Add Navigation Nodes</maml:ui>. </maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Add Navigation Nodes</maml:ui>, click <maml:ui>Connect to other domains</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Connect to</maml:ui>, type the name of the foreign domain that you want to manage (for example, <maml:userInput>contoso.com</maml:userInput>), and then click <maml:ui>OK</maml:ui>. </maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>When you are successfully connected to the foreign domain, browse through the columns in the <maml:ui>Add Navigation Nodes</maml:ui> window, select the container or containers to add to your Active Directory Administrative Center navigation pane, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>For more information about customizing the Active Directory Administrative Center navigation pane, see <maml:navigationLink><maml:linkText>Customizing the Active Directory Administrative Center Navigation Pane</maml:linkText><maml:uri href="mshelp://windows/?id=4d317cbf-28f8-4deb-b0ee-4b67a867e626"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
<maml:para>You can also open Active Directory Administrative Center by using a set of logon credentials that is different from your current set of logon credentials. The command in the following procedure can be useful if you are logged on to the computer that is running Active Directory Administrative Center with normal user credentials, but you want to use Active Directory Administrative Center on this computer to manage your local domain as an administrator. This command can also be useful if you want to use Active Directory Administrative Center to remotely manage a domain that is different from your local domain with a set of credentials that is different from your current set of logon credentials. However, this domain must have an established trust with the local domain.</maml:para>
<maml:para>There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To manage a domain using logon credentials that are different from the current set of logon credentials</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, at a command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:codeInline>runas /user:<domain\user> dsac</maml:codeInline></maml:para><maml:para>
Where <maml:codeInline>runas /user</maml:codeInline> is the command that allows users to remotely execute commands as a different user, <maml:codeInline><domain\user></maml:codeInline> is the set of credentials that you want to open Active Directory Administrative Center with, and <maml:codeInline>dsac</maml:codeInline> is the Active Directory Administrative Center executable file name (Dsac.exe). </maml:para>
<maml:para>For example, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:codeInline>runas /user:contoso\administrator dsac</maml:codeInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>When Active Directory Administrative Center is open, browse through the navigation pane to view or manage your Active Directory domain.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move an Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To move an organizational unit using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the organizational unit (OU) that you want to move.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the OU that you want to move, and then click <maml:ui>Move</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Move</maml:ui> dialog box, use the column explorer to navigate to and select the folder to which you want to move the OU, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered">
<maml:listItem><maml:para>You cannot use Active Directory Administrative Center to move OUs between domains. To move OUs between domains, use the Active Directory Migration Tool (ADMT). For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move an Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141998</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141998"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create Organizational Unit - Organizational Unit Section</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the name of the organizational unit (OU).</maml:para>
</maml:entry></maml:row>
<maml:row><maml:entry><maml:para><maml:ui>Create in</maml:ui></maml:para></maml:entry><maml:entry><maml:para>Specifies the container in which the new OU is created. To specify a different container, click <maml:ui>Change</maml:ui>.</maml:para></maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Protect from accidental deletion</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it updates the security descriptor of the object—and, potentially, its parent—which denies all administrators or users of this domain and domain controller the ability to delete this object.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>This setting does not provide protection against accidental deletion of a subtree that contains the protected object. Therefore, we recommend that you enable this setting for all the protected object's containers, up to the domain naming context head.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Disable or Enable a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To disable or enable a user account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the user account whose status you want to change.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the user whose status you want to change. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Depending on the status of the user account, do one of the following:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>To disable the user account, click <maml:ui>Disable</maml:ui>.</maml:para></maml:listItem>
<maml:listItem><maml:para>To enable the user account, click <maml:ui>Enable</maml:ui>.</maml:para></maml:listItem></maml:list></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141696</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141696"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Users</maml:title><maml:introduction>
<maml:para>You can use Active Directory Administrative Center to create new user accounts or manage existing user accounts.</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Understanding User Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=536c96f9-5efc-4dab-8d81-632047d83d25"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Create a New User Account</maml:linkText><maml:uri href="mshelp://windows/?id=b398c749-d513-47b0-a1f3-a7dbc893bd3e"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Reset the Password of a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=103155f5-8171-4ce0-80b3-84ca7233bfde"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Move a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=29bcac26-c9e6-455f-a69d-371cf1653097"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Modify the Logon Hours of a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=7f64b4b8-fbf9-43b3-9b5b-5160b73194ed"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Change a User's Primary Group</maml:linkText><maml:uri href="mshelp://windows/?id=1f8c3563-1cf4-438f-8967-149a02740470"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Disable or Enable a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=a5432485-1ac7-433a-ac83-64efd6ca3eea"></maml:uri></maml:navigationLink></maml:para></maml:listItem>
<maml:listItem><maml:para><maml:navigationLink><maml:linkText>Delete a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=8f9f23b0-37c3-4615-bd84-f3155f940d9c"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New User Account</maml:title><maml:introduction>
<maml:para>To manage users in a domain, create user accounts in Active Directory Domain Services (AD DS). In contrast, to manage users that are specific to one computer, create local user accounts. For more information about creating local user accounts, see Create a local user account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=58123</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=58123"></maml:uri></maml:navigationLink>).</maml:para>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To create a new user account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, right-click the node in which you want to add a user account, click <maml:ui>New</maml:ui>, and then click <maml:ui>User</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>For interoperability with other directory services, you can click <maml:ui>InetOrgPerson</maml:ui> instead. For more information about the <maml:phrase>InetOrgPerson</maml:phrase> class, see <maml:navigationLink><maml:linkText>Understanding User Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=536c96f9-5efc-4dab-8d81-632047d83d25"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create User</maml:ui>, in the <maml:ui>Account</maml:ui> section:</maml:para>
<maml:list class="unordered"><maml:listItem><maml:para>In <maml:ui>First name</maml:ui>, type the user's first name.</maml:para></maml:listItem>
<maml:listItem><maml:para>In <maml:ui>Middle initials</maml:ui>, type the user's initials.</maml:para></maml:listItem>
<maml:listItem><maml:para>In <maml:ui>Last name</maml:ui>, type the user's last name.</maml:para></maml:listItem>
<maml:listItem><maml:para>Modify <maml:ui>Full name</maml:ui> to add initials or reverse the order of the first and last names.</maml:para></maml:listItem>
<maml:listItem><maml:para>In <maml:ui>User UPN logon</maml:ui>, type the user’s logon name, and then click the user principal name (UPN) suffix in the drop-down list.</maml:para><maml:para>If the user will use a different name to log on to computers running Microsoft® Windows® 95, Windows 98, or Windows NT® operating systems, you can change the user’s logon name as it appears in <maml:ui>User SamAccountName logon</maml:ui> to the different name.</maml:para></maml:listItem>
<maml:listItem><maml:para>In <maml:ui>Password</maml:ui> and <maml:ui>Confirm password</maml:ui>, type the user's password, and then select the appropriate password options.</maml:para></maml:listItem>
<maml:listItem><maml:para>To protect the user account from accidental deletion, select the <maml:ui>Protect from accidental deletion</maml:ui> check box.</maml:para></maml:listItem>
<maml:listItem><maml:para>Click <maml:ui>Log on hours</maml:ui>, and then set the permitted or denied logon hours for the user. </maml:para></maml:listItem>
<maml:listItem><maml:para>Click <maml:ui>Log on to</maml:ui>, and then set the permitted logon workstations for the user.</maml:para></maml:listItem>
<maml:listItem><maml:para>In <maml:ui>Account expires</maml:ui>, select <maml:ui>Never</maml:ui> or enter the account expiration date.</maml:para></maml:listItem>
<maml:listItem><maml:para>Expand <maml:ui>Password options</maml:ui>, <maml:ui>Encryption options</maml:ui>, and <maml:ui>Other options</maml:ui>, and then make the appropriate selections.</maml:para></maml:listItem></maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Create User</maml:ui>, modify the appropriate fields in the <maml:ui>Organization</maml:ui>, <maml:ui>Member Of</maml:ui>, and <maml:ui>Profile</maml:ui> sections, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New User (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141531</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141531"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Computer Accounts</maml:title><maml:introduction>
<maml:para>Every computer running Windows NT, Windows 2000, Windows XP, Windows Vista®, or Windows 7 operating systems or a server running Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2 that joins a domain has a computer account. Like user accounts, computer accounts provide a means for authenticating and auditing access to the network and to domain resources. Each computer account must be unique.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Computers running Windows 95 and Windows 98 do not have advanced security features. Therefore, they are not assigned computer accounts.</maml:para>
</maml:alertSet>
<maml:para>You can add, move, reset, disable, enable, and delete computer accounts with Active Directory Administrative Center. You can also create a computer account when you join a computer to a domain. </maml:para>
<maml:para>When the domain functional level is set to Windows Server 2008 or Windows Server 2008 R2, a <maml:phrase>lastLogonTimestamp</maml:phrase> attribute is used to track the last logon time of a user or computer account. This attribute is replicated within the domain, and it can provide you with important information regarding the history of a user or computer.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Understanding computer names</maml:title><maml:introduction>
<maml:para>Each computer account that is created in Active Directory Domain Services (AD DS) has a relative distinguished name (also known as RDN), a pre–Windows 2000 computer name (that is, a Security Accounts Manager (SAM) account name), a primary Domain Name System (DNS) suffix, a DNS host name, and a service principal name (SPN). The administrator enters the computer name when he or she creates the computer account. This computer name is used as the Lightweight Directory Access Protocol (LDAP) relative distinguished name.</maml:para>
<maml:para>AD DS suggests the pre–Windows 2000 name using the first 15 bytes of the relative distinguished name. You can change the pre–Windows 2000 name anytime.</maml:para>
<maml:para>The DNS name for a host is called a full computer name. This is a DNS fully qualified domain name (FQDN). The full computer name is a concatenation of the computer name (the first 15 bytes of the SAM account name of the computer account without the "$" character) and the primary DNS suffix (the DNS domain name of the domain in which the computer account exists), for example, computer1.contoso.com.</maml:para>
<maml:para>By default, the primary DNS suffix portion of the FQDN for a computer must be the same as the name of the Active Directory domain where the computer is located. To allow different primary DNS suffixes, a domain administrator may build a restricted list of allowed suffixes by creating the <maml:phrase>msDS-AllowedDNSSuffixes</maml:phrase> attribute in the domain object container. The domain administrator creates and manages this attribute with Active Directory Service Interfaces (ADSI) or LDAP.</maml:para>
<maml:para>The SPN is a multivalue attribute. It is usually built from the DNS name of the host. The SPN is used in the process of mutual authentication between the client and the server that hosts a particular service. The client finds a computer account based on the SPN of the service to which it is trying to connect. Members of the Domain Admins group can modify the SPN.</maml:para>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change Domain Controller Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Any writable domain controller</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to find any available domain controller that is writable in the currently selected domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Select a domain controller from the following list</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to select a domain controller from the list of domain controllers that are registered in the currently selected domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Filter domain controllers</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>To connect to a specific domain controller, type the computer name of a server that hosts this domain controller.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Member to a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To add a member to a group using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the group to which you want to add members, and then click <maml:ui>Properties</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Members</maml:ui> section, click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Enter the object names to select</maml:ui>, type the name of the user, group, or computer that you want to add to the group, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add a Member to a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141707</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141707"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>In addition to users and computers, group members can include contacts and other groups.</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Raise Forest Functional Level Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Forest name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the selected forest. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Current forest functional level</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the current setting of the forest functional level. </maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>After you set the forest functional level to a certain value, you cannot roll back or lower the forest functional level, with one exception: when you raise the forest functional level to Windows Server 2008 R2 and if Active Directory Recycle Bin is not enabled, you have the option of rolling the forest functional level back to Windows Server 2008. (For more information about Active Directory Recycle Bin, see What's New in AD DS: Active Directory Recycle Bin (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141392</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141392"></maml:uri></maml:navigationLink>). </maml:alert><maml:alert>You can lower the forest functional level only from Windows Server 2008 R2 to Windows Server 2008. If the forest functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.
</maml:alert></maml:alertSet>
<maml:para>The functional level of a domain or forest defines only the set of Windows Server operating systems that can run on domain controllers, along with the available features. It does not define the client operating systems that are supported in the domain or forest. </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Disable or Enable a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To disable or enable a computer account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the computer account whose status you want to change.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the computer whose status you want to change. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Depending on the status of the computer account, do one of the following:</maml:para><maml:list class="unordered"><maml:listItem><maml:para>To disable the computer account, click <maml:ui>Disable</maml:ui>.</maml:para></maml:listItem>
<maml:listItem><maml:para>To enable the computer account, click <maml:ui>Enable</maml:ui>.</maml:para></maml:listItem></maml:list></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>When you disable a computer account, the computer cannot authenticate to the domain until it has been enabled.</maml:para></maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141801</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141801"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Computer Account to a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To add a computer account to a group using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the computer account that you want to add to a group.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the computer account that you want to add to a group, and then click <maml:ui>Properties</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Under <maml:ui>Member Of</maml:ui>, click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In <maml:ui>Enter the object names to select</maml:ui>, type the name of the group to which you want to add this computer account, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add a Computer Account to a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141773</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141773"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem>
<maml:listItem><maml:para>By adding a computer to a group, you can assign permissions to all the computer accounts in that group and you can filter Group Policy settings on all the accounts in that group.</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete an Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To delete an organizational unit using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the organizational unit (OU) that you want to delete.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the OU that you want to delete, and then click <maml:ui>Delete</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete an Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=141999</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=141999"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Manage the Domain With a Different Domain Controller</maml:title><maml:introduction>
<maml:para>There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To manage the domain with a different domain controller using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the navigation pane, right-click the domain that you want to manage with a different domain controller, and then click <maml:ui>Change domain controller</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You can also right-click any navigation node that represents a container within the domain that you want to manage with a different domain controller, and then click <maml:ui>Change domain controller</maml:ui>. In other words, you can change a domain controller connection for any node in the navigation pane. However, changing a domain controller connection for any particular node that represents a container within a certain domain also changes that connection for all other nodes in the navigation pane that represent containers that belong to that same domain.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Any writable domain controller</maml:ui> or click <maml:ui>Select a domain controller from the following list</maml:ui>, and then select a domain controller in the list.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Domains and Domain Controllers</maml:linkText><maml:uri href="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Properties - Account Section</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>User UPN logon</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The text box on the left provides a space for you to type the account name for this user. This is the name that the user will use to log on to an Active Directory domain.</maml:para>
<maml:para>The drop-down list on the right lists the available user principal name (UPN) suffixes that may be used to create the user logon name. The list contains the full Domain Name System (DNS) name of the current domain, the full DNS name of the root domain of the current forest, and any alternative UPN suffixes that are created with Active Directory Domains and Trusts.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>User SamAccountName logon</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The read-only text box on the left displays the domain name that is used by computers that are running pre–Windows 2000 operating systems.</maml:para>
<maml:para>The text box on the right provides a space for you to type the user's pre–Windows 2000 logon name.</maml:para>
</maml:entry></maml:row>
<maml:row><maml:entry><maml:para><maml:ui>Protect from accidental deletion</maml:ui> check box</maml:para></maml:entry><maml:entry><maml:para>Select this option to update the security descriptor of the object—and, potentially, its parent—to deny all administrators or users of this domain and domain controller the ability to delete this object.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title><maml:para>This setting does not provide protection against accidental deletion of a subtree that contains the protected object. Therefore, we recommend that you enable this setting for all the protected object’s containers, up to the domain naming context head.</maml:para>
</maml:alertSet></maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Log on Hours</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to change the hours during which this selected object can log on to the domain. By default, domain logon is allowed 24 hours a day, 7 days a week. Note that this control does not affect the user's ability to log on locally to a computer by using a local computer account instead of a domain account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Log On To</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to specify workstation logon restrictions that will allow this user to log on only to specified computers in the domain. By default, a user is able to log on at any workstation computer that is joined to the domain. Note that this control does not affect the user's ability to log on locally to a computer by using a local computer account instead of a domain account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Account expires</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the account expiration policy for this user. You can select between the following options:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Use <maml:ui>Never</maml:ui> to specify that the selected account will never expire. This option is the default for new users.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Select <maml:ui>End of</maml:ui>, and then select a date if you want to have the user's account expire on a specified date.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Password options</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The following are the password options for an Active Directory user account:</maml:para>
<maml:list class="unordered"><maml:listItem>
<maml:para><maml:ui>User must change password at next logon</maml:ui>—Forces a user to change his or her password the next time that the user logs on to the network. Enable this option when you want to ensure that the user will be the only person that knows the password.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Smart card is required for interactive log on</maml:ui>—Requires that a user possess a smart card to log on to the network interactively. The user must also have a smart-card reader attached to the computer and a valid personal identification number (PIN) for the smart card.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Password never expires</maml:ui>—Prevents a user’s password from expiring. We recommend that service accounts have this option enabled and that they use strong passwords.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>User cannot change password</maml:ui>—Prevents a user from changing his or her password. Enable this option when you want to maintain control over a user account, such as a Guest account or a temporary account.</maml:para>
</maml:listItem></maml:list>
</maml:entry></maml:row>
<maml:row><maml:entry><maml:para><maml:ui>Encryption options</maml:ui></maml:para></maml:entry><maml:entry><maml:para>The following are the encryption options for an Active Directory user account:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:ui>Store password using reversible encryption</maml:ui>—Allows a user to log on to a Windows network from Apple computers. If the user is not logging on from an Apple computer, do not enable this option.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>User Kerberos DES encryption types for this account</maml:ui>—Provides support for the Data Encryption Standard (DES). DES supports multiple levels of encryption, including Microsoft Point-to-Point Encryption (MPPE) Standard (40-bit), MPPE Standard (56-bit), MPPE Strong (128-bit), Internet Protocol security (IPsec) DES (40-bit), IPsec 56-bit DES, and IPsec Triple DES (3DES).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>This account supports Kerberos AES 128 bit encryption </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>This account supports Kerberos AES 256 bit encryption </maml:ui></maml:para>
</maml:listItem></maml:list><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>The Kerberos Advanced Encryption Standard (AES) encryption options (both the 128-bit option and the 256-bit option) are available only when the domain functional level is set to Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003. AES is a new encryption algorithm that has been standardized by the National Institute of Standards and Technology (NIST). For more information about Kerberos authentication, see Kerberos Explained (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=85494</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=85494"></maml:uri></maml:navigationLink>).</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row><maml:entry><maml:para><maml:ui>Other options</maml:ui></maml:para></maml:entry><maml:entry><maml:para>The following are additional options for an Active Directory user account:</maml:para>
<maml:list class="unordered"><maml:listItem>
<maml:para><maml:ui>Account is sensitive and cannot be delegated</maml:ui>—You can use this option if the account, for example a Guest or temporary account, cannot be assigned for delegation by another account. For more information, see Enabling Delegated Authentication (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=143007</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=143007"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Do not require Kerberos preauthentication</maml:ui>—Provides support for alternative implementations of the Kerberos protocol. However, use caution when you enable this option, because Kerberos preauthentication provides additional security and requires time synchronization between the client and the server. For more information, see Kerberos Explained (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=120374</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=120374"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem></maml:list>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Computer Properties - Delegation Section</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Do not trust this computer for delegation</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that no delegation of any services is allowed on this computer. For more information, see Delegating authentication (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=143012</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=143012"></maml:uri></maml:navigationLink>).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Trust this computer for delegation to any service (Kerberos only)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the delegation of services on this computer is allowed only with the Kerberos protocol.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>The Kerberos version 5 (V5) authentication protocol is the primary security protocol for authentication in a domain. It verifies the identity of the user and the system.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Trust this computer for delegation to specified services only</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that only certain selected services are allowed to be delegated on this computer. If the <maml:ui>Use Kerberos only</maml:ui> option is selected, delegation is allowed only with the Kerberos protocol. If <maml:ui>Use any authentication protocol</maml:ui> option is selected, delegation is allowed with any available authentication protocol.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Add</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to select services to which delegated credentials can be presented.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Remove</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to remove services from the list of services to which delegated credentials can be presented.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Raise Domain Functional Level Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Domain name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the selected domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Current domain functional level</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the current setting of the domain functional level. </maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>After you set this option to a certain value, you cannot roll back or lower the domain functional level, with one exception: when you raise the domain functional level to Windows Server 2008 R2 and if the forest functional level is Windows Server 2008 or lower, you have the option of rolling the domain functional level back to Windows Server 2008. </maml:alert><maml:alert>You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.</maml:alert></maml:alertSet>
<maml:para>The functional level of a domain or forest defines only the set of Windows Server operating systems that can run on domain controllers, along with the set of available features. It does not define the client operating systems that are supported in the domain or forest.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Administrative Center</maml:linkText><maml:uri href="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Reset a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title>
<maml:introduction>
<maml:procedure><maml:title>To reset a computer account using Active Directory Administrative Center</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Administrative Center, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Administrative Center</maml:ui>.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Another way to open Active Directory Administrative Center is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsac.exe</maml:userInput>.</maml:para>
</maml:alertSet></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the navigation pane, select the node that contains the computer account that you want to reset.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the management list, right-click the computer account that you want to reset, and then click <maml:ui>Reset account</maml:ui>.</maml:para></maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional considerations</maml:title>
<maml:introduction>
<maml:list class="unordered"><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Reset a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=141775</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=141775"></maml:uri></maml:navigationLink>).
</maml:para><maml:para>For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).</maml:para></maml:listItem></maml:list>
</maml:introduction></maml:section>
<maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction>
</maml:section>
</maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><?xml version="1.0" encoding="utf-8"?>
<HelpCollection Id="dsac" DTDVersion="1.0" FileVersion="" LangId="1033" Copyright="© 2005 Microsoft Corporation. All rights reserved." Title="Active Directory Administrative Center" xmlns="http://schemas.microsoft.com/help/collection/2004/11">
<CompilerOptions CompileResult="H1S" CreateFullTextIndex="Yes" BreakerId="Microsoft.NLG.en.WordBreaker">
<IncludeFile File="dsac.H1F" />
</CompilerOptions>
<TOCDef File="dsac.H1T" Id="dsac_TOC" />
<VTopicDef File="dsac.H1V" />
<KeywordIndexDef File="dsac_AssetId.H1K" />
<KeywordIndexDef File="dsac_BestBet.H1K" />
<KeywordIndexDef File="dsac_LinkTerm.H1K" />
<KeywordIndexDef File="dsac_SubjectTerm.H1K" />
<ItemMoniker Name="!DefaultTOC" ProgId="HxDs.HxHierarchy" InitData="AnyString" />
<ItemMoniker Name="!DefaultFullTextSearch" ProgId="HxDs.HxFullTextSearch" InitData="AnyString" />
<ItemMoniker Name="!DefaultAssetIdIndex" ProgId="HxDs.HxIndex" InitData="AssetId" />
<ItemMoniker Name="!DefaultBestBetIndex" ProgId="HxDs.HxIndex" InitData="BestBet" />
<ItemMoniker Name="!DefaultAssociativeIndex" ProgId="HxDs.HxIndex" InitData="LinkTerm" />
<ItemMoniker Name="!DefaultKeywordIndex" ProgId="HxDs.HxIndex" InitData="SubjectTerm" />
</HelpCollection><?xml version="1.0" encoding="utf-8"?>
<HelpFileList xmlns="http://schemas.microsoft.com/help/filelist/2004/11">
<File Url="assets\0093fd1d-372f-4f8b-9a71-51dfe19c9353.xml" />
<File Url="assets\103155f5-8171-4ce0-80b3-84ca7233bfde.xml" />
<File Url="assets\13d75518-088d-48a6-bc1d-c6c499678daa.xml" />
<File Url="assets\1ade67b9-2f33-4075-80c8-07ef32a6486a.xml" />
<File Url="assets\1f8c3563-1cf4-438f-8967-149a02740470.xml" />
<File Url="assets\20cf6385-c763-4a73-8bec-1d60ff4f3c65.xml" />
<File Url="assets\21bdeabf-f601-4a1a-ae37-ec463526b339.xml" />
<File Url="assets\27584af3-5f9e-487c-bc94-dd632ae1195f.xml" />
<File Url="assets\29bcac26-c9e6-455f-a69d-371cf1653097.xml" />
<File Url="assets\2a65077d-48c5-46c0-aea5-bb23af222c9e.xml" />
<File Url="assets\2e7fb6b3-333f-42c9-b94e-769d1ea84b61.xml" />
<File Url="assets\329e598c-8607-410a-95e9-0203acf77edc.xml" />
<File Url="assets\3416503b-2a04-4d80-bbc1-7b8b0f6defa1.xml" />
<File Url="assets\36f23e85-adfe-4140-ab0a-a629dd13e282.xml" />
<File Url="assets\45555a35-f428-4298-8241-599217649c55.xml" />
<File Url="assets\4d317cbf-28f8-4deb-b0ee-4b67a867e626.xml" />
<File Url="assets\536c96f9-5efc-4dab-8d81-632047d83d25.xml" />
<File Url="assets\59c77fa8-3514-41dd-907e-235cff4b5634.xml" />
<File Url="assets\5c4e1ee5-553f-4bfc-a633-d4122906eede.xml" />
<File Url="assets\5dc7c150-6b3d-4e29-ba34-8e9a452a0142.xml" />
<File Url="assets\737e1fc9-c253-4659-9e54-b01b8fe3aaea.xml" />
<File Url="assets\73acc58e-f40d-4d4b-bcdc-9d97d39112c8.xml" />
<File Url="assets\754b1a48-3802-4d8b-930c-613e1de2074b.xml" />
<File Url="assets\7d69e1ed-7731-45ae-bc6d-cc213ef714ed.xml" />
<File Url="assets\7f64b4b8-fbf9-43b3-9b5b-5160b73194ed.xml" />
<File Url="assets\8767a036-292c-4ef0-ba2b-3645a22ec2ec.xml" />
<File Url="assets\8af62920-cd73-4e19-b932-165599000009.xml" />
<File Url="assets\8f9f23b0-37c3-4615-bd84-f3155f940d9c.xml" />
<File Url="assets\9903f114-ea06-42ac-a96f-3ee85ae1c219.xml" />
<File Url="assets\992291e2-38f1-4a71-8796-8b3d520ee175.xml" />
<File Url="assets\9bc50ddb-3835-4cf3-983f-2146b6170a01.xml" />
<File Url="assets\a14c2094-1491-4b23-b813-3a9d7b2ad2a9.xml" />
<File Url="assets\a49a9bd3-b8e8-4745-9608-3d6e89aee280.xml" />
<File Url="assets\a5432485-1ac7-433a-ac83-64efd6ca3eea.xml" />
<File Url="assets\abeae4a5-c2b0-4695-8065-cc6f8fd13572.xml" />
<File Url="assets\b398c749-d513-47b0-a1f3-a7dbc893bd3e.xml" />
<File Url="assets\bbe55f3a-9635-4385-bc71-c19e7b5987f9.xml" />
<File Url="assets\bd51787e-555d-44f9-af3d-404d7de1bb13.xml" />
<File Url="assets\bdd31e17-a283-45a9-8e62-ac0f8e48b907.xml" />
<File Url="assets\c47c4e11-1d84-43c8-8b6f-d0b44b9663cb.xml" />
<File Url="assets\cfaae176-7c7d-41ed-868c-6d879e1ef008.xml" />
<File Url="assets\e20d05ef-2361-482e-95f0-eafbe7e72664.xml" />
<File Url="assets\ea4feae1-04db-4c02-8365-02b8fe69147d.xml" />
<File Url="assets\f49b175c-6d5c-4483-b9ee-a60ced4dbe6a.xml" />
<File Url="assets\f51462ad-d2aa-460d-bfb5-3631e9edf274.xml" />
<File Url="assets\f6e84891-ef26-4f1d-bac8-b58b7b977139.xml" />
<File Url="assets\f91ca7df-6101-45a6-947f-21385d0b5e01.xml" />
<File Url="assets\fb4fed9c-c641-404a-ab6a-df9398351443.xml" />
</HelpFileList><?xml version="1.0" encoding="utf-8"?>
<VTopicSet DTDVersion="1.0" xmlns="http://schemas.microsoft.com/help/vtopic/2004/11">
<Vtopic Url="assets\0093fd1d-372f-4f8b-9a71-51dfe19c9353.xml" RLTitle="Delete a Computer Account">
<Attr Name="assetid" Value="0093fd1d-372f-4f8b-9a71-51dfe19c9353" />
<Keyword Index="AssetId" Term="0093fd1d-372f-4f8b-9a71-51dfe19c9353" />
<Keyword Index="AssetId" Term="0093fd1d-372f-4f8b-9a71-51dfe19c93531033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0093fd1d-372f-4f8b-9a71-51dfe19c9353" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\103155f5-8171-4ce0-80b3-84ca7233bfde.xml" RLTitle="Reset the Password of a User Account">
<Attr Name="assetid" Value="103155f5-8171-4ce0-80b3-84ca7233bfde" />
<Keyword Index="AssetId" Term="103155f5-8171-4ce0-80b3-84ca7233bfde" />
<Keyword Index="AssetId" Term="103155f5-8171-4ce0-80b3-84ca7233bfde1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="103155f5-8171-4ce0-80b3-84ca7233bfde" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\13d75518-088d-48a6-bc1d-c6c499678daa.xml" RLTitle="Managing Computers">
<Attr Name="assetid" Value="13d75518-088d-48a6-bc1d-c6c499678daa" />
<Keyword Index="AssetId" Term="13d75518-088d-48a6-bc1d-c6c499678daa" />
<Keyword Index="AssetId" Term="13d75518-088d-48a6-bc1d-c6c499678daa1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="13d75518-088d-48a6-bc1d-c6c499678daa" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1ade67b9-2f33-4075-80c8-07ef32a6486a.xml" RLTitle="Move a Computer Account">
<Attr Name="assetid" Value="1ade67b9-2f33-4075-80c8-07ef32a6486a" />
<Keyword Index="AssetId" Term="1ade67b9-2f33-4075-80c8-07ef32a6486a" />
<Keyword Index="AssetId" Term="1ade67b9-2f33-4075-80c8-07ef32a6486a1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1ade67b9-2f33-4075-80c8-07ef32a6486a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1f8c3563-1cf4-438f-8967-149a02740470.xml" RLTitle="Change a User's Primary Group">
<Attr Name="assetid" Value="1f8c3563-1cf4-438f-8967-149a02740470" />
<Keyword Index="AssetId" Term="1f8c3563-1cf4-438f-8967-149a02740470" />
<Keyword Index="AssetId" Term="1f8c3563-1cf4-438f-8967-149a027404701033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1f8c3563-1cf4-438f-8967-149a02740470" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\20cf6385-c763-4a73-8bec-1d60ff4f3c65.xml" RLTitle="Create a New Computer Account">
<Attr Name="assetid" Value="20cf6385-c763-4a73-8bec-1d60ff4f3c65" />
<Keyword Index="AssetId" Term="20cf6385-c763-4a73-8bec-1d60ff4f3c65" />
<Keyword Index="AssetId" Term="20cf6385-c763-4a73-8bec-1d60ff4f3c651033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="20cf6385-c763-4a73-8bec-1d60ff4f3c65" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\21bdeabf-f601-4a1a-ae37-ec463526b339.xml" RLTitle="Managing Organizational Units">
<Attr Name="assetid" Value="21bdeabf-f601-4a1a-ae37-ec463526b339" />
<Keyword Index="AssetId" Term="21bdeabf-f601-4a1a-ae37-ec463526b339" />
<Keyword Index="AssetId" Term="21bdeabf-f601-4a1a-ae37-ec463526b3391033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="21bdeabf-f601-4a1a-ae37-ec463526b339" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\27584af3-5f9e-487c-bc94-dd632ae1195f.xml" RLTitle="Modify Group Type or Group Scope">
<Attr Name="assetid" Value="27584af3-5f9e-487c-bc94-dd632ae1195f" />
<Keyword Index="AssetId" Term="27584af3-5f9e-487c-bc94-dd632ae1195f" />
<Keyword Index="AssetId" Term="27584af3-5f9e-487c-bc94-dd632ae1195f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="27584af3-5f9e-487c-bc94-dd632ae1195f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\29bcac26-c9e6-455f-a69d-371cf1653097.xml" RLTitle="Move a User Account">
<Attr Name="assetid" Value="29bcac26-c9e6-455f-a69d-371cf1653097" />
<Keyword Index="AssetId" Term="29bcac26-c9e6-455f-a69d-371cf1653097" />
<Keyword Index="AssetId" Term="29bcac26-c9e6-455f-a69d-371cf16530971033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="29bcac26-c9e6-455f-a69d-371cf1653097" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2a65077d-48c5-46c0-aea5-bb23af222c9e.xml" RLTitle="Understanding Organizational Units">
<Attr Name="assetid" Value="2a65077d-48c5-46c0-aea5-bb23af222c9e" />
<Keyword Index="AssetId" Term="2a65077d-48c5-46c0-aea5-bb23af222c9e" />
<Keyword Index="AssetId" Term="2a65077d-48c5-46c0-aea5-bb23af222c9e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2a65077d-48c5-46c0-aea5-bb23af222c9e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2e7fb6b3-333f-42c9-b94e-769d1ea84b61.xml" RLTitle="Raise the Domain Functional Level">
<Attr Name="assetid" Value="2e7fb6b3-333f-42c9-b94e-769d1ea84b61" />
<Keyword Index="AssetId" Term="2e7fb6b3-333f-42c9-b94e-769d1ea84b61" />
<Keyword Index="AssetId" Term="2e7fb6b3-333f-42c9-b94e-769d1ea84b611033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2e7fb6b3-333f-42c9-b94e-769d1ea84b61" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\329e598c-8607-410a-95e9-0203acf77edc.xml" RLTitle="User Interface: Active Directory Administrative Center">
<Attr Name="assetid" Value="329e598c-8607-410a-95e9-0203acf77edc" />
<Keyword Index="AssetId" Term="329e598c-8607-410a-95e9-0203acf77edc" />
<Keyword Index="AssetId" Term="329e598c-8607-410a-95e9-0203acf77edc1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="329e598c-8607-410a-95e9-0203acf77edc" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3416503b-2a04-4d80-bbc1-7b8b0f6defa1.xml" RLTitle="Understanding Domains">
<Attr Name="assetid" Value="3416503b-2a04-4d80-bbc1-7b8b0f6defa1" />
<Keyword Index="AssetId" Term="3416503b-2a04-4d80-bbc1-7b8b0f6defa1" />
<Keyword Index="AssetId" Term="3416503b-2a04-4d80-bbc1-7b8b0f6defa11033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3416503b-2a04-4d80-bbc1-7b8b0f6defa1" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\36f23e85-adfe-4140-ab0a-a629dd13e282.xml" RLTitle="Understanding Domain and Forest Functionality">
<Attr Name="assetid" Value="36f23e85-adfe-4140-ab0a-a629dd13e282" />
<Keyword Index="AssetId" Term="36f23e85-adfe-4140-ab0a-a629dd13e282" />
<Keyword Index="AssetId" Term="36f23e85-adfe-4140-ab0a-a629dd13e2821033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="36f23e85-adfe-4140-ab0a-a629dd13e282" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\45555a35-f428-4298-8241-599217649c55.xml" RLTitle="Managing Groups">
<Attr Name="assetid" Value="45555a35-f428-4298-8241-599217649c55" />
<Keyword Index="AssetId" Term="45555a35-f428-4298-8241-599217649c55" />
<Keyword Index="AssetId" Term="45555a35-f428-4298-8241-599217649c551033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="45555a35-f428-4298-8241-599217649c55" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4d317cbf-28f8-4deb-b0ee-4b67a867e626.xml" RLTitle="Customizing the Active Directory Administrative Center Navigation Pane">
<Attr Name="assetid" Value="4d317cbf-28f8-4deb-b0ee-4b67a867e626" />
<Keyword Index="AssetId" Term="4d317cbf-28f8-4deb-b0ee-4b67a867e626" />
<Keyword Index="AssetId" Term="4d317cbf-28f8-4deb-b0ee-4b67a867e6261033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4d317cbf-28f8-4deb-b0ee-4b67a867e626" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\536c96f9-5efc-4dab-8d81-632047d83d25.xml" RLTitle="Understanding User Accounts">
<Attr Name="assetid" Value="536c96f9-5efc-4dab-8d81-632047d83d25" />
<Keyword Index="AssetId" Term="536c96f9-5efc-4dab-8d81-632047d83d25" />
<Keyword Index="AssetId" Term="536c96f9-5efc-4dab-8d81-632047d83d251033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="536c96f9-5efc-4dab-8d81-632047d83d25" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\59c77fa8-3514-41dd-907e-235cff4b5634.xml" RLTitle="Create a New Organizational Unit">
<Attr Name="assetid" Value="59c77fa8-3514-41dd-907e-235cff4b5634" />
<Keyword Index="AssetId" Term="59c77fa8-3514-41dd-907e-235cff4b5634" />
<Keyword Index="AssetId" Term="59c77fa8-3514-41dd-907e-235cff4b56341033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="59c77fa8-3514-41dd-907e-235cff4b5634" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5c4e1ee5-553f-4bfc-a633-d4122906eede.xml" RLTitle="Move a Group">
<Attr Name="assetid" Value="5c4e1ee5-553f-4bfc-a633-d4122906eede" />
<Keyword Index="AssetId" Term="5c4e1ee5-553f-4bfc-a633-d4122906eede" />
<Keyword Index="AssetId" Term="5c4e1ee5-553f-4bfc-a633-d4122906eede1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5c4e1ee5-553f-4bfc-a633-d4122906eede" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5dc7c150-6b3d-4e29-ba34-8e9a452a0142.xml" RLTitle="User Properties - Profile Section">
<Attr Name="assetid" Value="5dc7c150-6b3d-4e29-ba34-8e9a452a0142" />
<Keyword Index="AssetId" Term="5dc7c150-6b3d-4e29-ba34-8e9a452a0142" />
<Keyword Index="AssetId" Term="5dc7c150-6b3d-4e29-ba34-8e9a452a01421033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5dc7c150-6b3d-4e29-ba34-8e9a452a0142" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\737e1fc9-c253-4659-9e54-b01b8fe3aaea.xml" RLTitle="Active Directory Administrative Center">
<Attr Name="assetid" Value="737e1fc9-c253-4659-9e54-b01b8fe3aaea" />
<Keyword Index="AssetId" Term="737e1fc9-c253-4659-9e54-b01b8fe3aaea" />
<Keyword Index="AssetId" Term="737e1fc9-c253-4659-9e54-b01b8fe3aaea1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="737e1fc9-c253-4659-9e54-b01b8fe3aaea" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\73acc58e-f40d-4d4b-bcdc-9d97d39112c8.xml" RLTitle="Locating Active Directory Objects in Active Directory Administrative Center">
<Attr Name="assetid" Value="73acc58e-f40d-4d4b-bcdc-9d97d39112c8" />
<Keyword Index="AssetId" Term="73acc58e-f40d-4d4b-bcdc-9d97d39112c8" />
<Keyword Index="AssetId" Term="73acc58e-f40d-4d4b-bcdc-9d97d39112c81033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="73acc58e-f40d-4d4b-bcdc-9d97d39112c8" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\754b1a48-3802-4d8b-930c-613e1de2074b.xml" RLTitle="Managing Domains and Domain Controllers">
<Attr Name="assetid" Value="754b1a48-3802-4d8b-930c-613e1de2074b" />
<Keyword Index="AssetId" Term="754b1a48-3802-4d8b-930c-613e1de2074b" />
<Keyword Index="AssetId" Term="754b1a48-3802-4d8b-930c-613e1de2074b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="754b1a48-3802-4d8b-930c-613e1de2074b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7d69e1ed-7731-45ae-bc6d-cc213ef714ed.xml" RLTitle="Add Navigation Nodes Dialog Box">
<Attr Name="assetid" Value="7d69e1ed-7731-45ae-bc6d-cc213ef714ed" />
<Keyword Index="AssetId" Term="7d69e1ed-7731-45ae-bc6d-cc213ef714ed" />
<Keyword Index="AssetId" Term="7d69e1ed-7731-45ae-bc6d-cc213ef714ed1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7d69e1ed-7731-45ae-bc6d-cc213ef714ed" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7f64b4b8-fbf9-43b3-9b5b-5160b73194ed.xml" RLTitle="Modify the Logon Hours of a User Account">
<Attr Name="assetid" Value="7f64b4b8-fbf9-43b3-9b5b-5160b73194ed" />
<Keyword Index="AssetId" Term="7f64b4b8-fbf9-43b3-9b5b-5160b73194ed" />
<Keyword Index="AssetId" Term="7f64b4b8-fbf9-43b3-9b5b-5160b73194ed1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7f64b4b8-fbf9-43b3-9b5b-5160b73194ed" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8767a036-292c-4ef0-ba2b-3645a22ec2ec.xml" RLTitle="Understanding Groups">
<Attr Name="assetid" Value="8767a036-292c-4ef0-ba2b-3645a22ec2ec" />
<Keyword Index="AssetId" Term="8767a036-292c-4ef0-ba2b-3645a22ec2ec" />
<Keyword Index="AssetId" Term="8767a036-292c-4ef0-ba2b-3645a22ec2ec1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8767a036-292c-4ef0-ba2b-3645a22ec2ec" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8af62920-cd73-4e19-b932-165599000009.xml" RLTitle="Delete a Group">
<Attr Name="assetid" Value="8af62920-cd73-4e19-b932-165599000009" />
<Keyword Index="AssetId" Term="8af62920-cd73-4e19-b932-165599000009" />
<Keyword Index="AssetId" Term="8af62920-cd73-4e19-b932-1655990000091033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8af62920-cd73-4e19-b932-165599000009" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8f9f23b0-37c3-4615-bd84-f3155f940d9c.xml" RLTitle="Delete a User Account">
<Attr Name="assetid" Value="8f9f23b0-37c3-4615-bd84-f3155f940d9c" />
<Keyword Index="AssetId" Term="8f9f23b0-37c3-4615-bd84-f3155f940d9c" />
<Keyword Index="AssetId" Term="8f9f23b0-37c3-4615-bd84-f3155f940d9c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8f9f23b0-37c3-4615-bd84-f3155f940d9c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9903f114-ea06-42ac-a96f-3ee85ae1c219.xml" RLTitle="Raise the Forest Functional Level">
<Attr Name="assetid" Value="9903f114-ea06-42ac-a96f-3ee85ae1c219" />
<Keyword Index="AssetId" Term="9903f114-ea06-42ac-a96f-3ee85ae1c219" />
<Keyword Index="AssetId" Term="9903f114-ea06-42ac-a96f-3ee85ae1c2191033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9903f114-ea06-42ac-a96f-3ee85ae1c219" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\992291e2-38f1-4a71-8796-8b3d520ee175.xml" RLTitle="Create a New Group">
<Attr Name="assetid" Value="992291e2-38f1-4a71-8796-8b3d520ee175" />
<Keyword Index="AssetId" Term="992291e2-38f1-4a71-8796-8b3d520ee175" />
<Keyword Index="AssetId" Term="992291e2-38f1-4a71-8796-8b3d520ee1751033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="992291e2-38f1-4a71-8796-8b3d520ee175" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9bc50ddb-3835-4cf3-983f-2146b6170a01.xml" RLTitle="Manage Different Domains">
<Attr Name="assetid" Value="9bc50ddb-3835-4cf3-983f-2146b6170a01" />
<Keyword Index="AssetId" Term="9bc50ddb-3835-4cf3-983f-2146b6170a01" />
<Keyword Index="AssetId" Term="9bc50ddb-3835-4cf3-983f-2146b6170a011033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9bc50ddb-3835-4cf3-983f-2146b6170a01" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a14c2094-1491-4b23-b813-3a9d7b2ad2a9.xml" RLTitle="Move an Organizational Unit">
<Attr Name="assetid" Value="a14c2094-1491-4b23-b813-3a9d7b2ad2a9" />
<Keyword Index="AssetId" Term="a14c2094-1491-4b23-b813-3a9d7b2ad2a9" />
<Keyword Index="AssetId" Term="a14c2094-1491-4b23-b813-3a9d7b2ad2a91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a14c2094-1491-4b23-b813-3a9d7b2ad2a9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a49a9bd3-b8e8-4745-9608-3d6e89aee280.xml" RLTitle="Create Organizational Unit - Organizational Unit Section">
<Attr Name="assetid" Value="a49a9bd3-b8e8-4745-9608-3d6e89aee280" />
<Keyword Index="AssetId" Term="a49a9bd3-b8e8-4745-9608-3d6e89aee280" />
<Keyword Index="AssetId" Term="a49a9bd3-b8e8-4745-9608-3d6e89aee2801033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a49a9bd3-b8e8-4745-9608-3d6e89aee280" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a5432485-1ac7-433a-ac83-64efd6ca3eea.xml" RLTitle="Disable or Enable a User Account">
<Attr Name="assetid" Value="a5432485-1ac7-433a-ac83-64efd6ca3eea" />
<Keyword Index="AssetId" Term="a5432485-1ac7-433a-ac83-64efd6ca3eea" />
<Keyword Index="AssetId" Term="a5432485-1ac7-433a-ac83-64efd6ca3eea1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a5432485-1ac7-433a-ac83-64efd6ca3eea" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\abeae4a5-c2b0-4695-8065-cc6f8fd13572.xml" RLTitle="Managing Users">
<Attr Name="assetid" Value="abeae4a5-c2b0-4695-8065-cc6f8fd13572" />
<Keyword Index="AssetId" Term="abeae4a5-c2b0-4695-8065-cc6f8fd13572" />
<Keyword Index="AssetId" Term="abeae4a5-c2b0-4695-8065-cc6f8fd135721033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="abeae4a5-c2b0-4695-8065-cc6f8fd13572" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b398c749-d513-47b0-a1f3-a7dbc893bd3e.xml" RLTitle="Create a New User Account">
<Attr Name="assetid" Value="b398c749-d513-47b0-a1f3-a7dbc893bd3e" />
<Keyword Index="AssetId" Term="b398c749-d513-47b0-a1f3-a7dbc893bd3e" />
<Keyword Index="AssetId" Term="b398c749-d513-47b0-a1f3-a7dbc893bd3e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b398c749-d513-47b0-a1f3-a7dbc893bd3e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\bbe55f3a-9635-4385-bc71-c19e7b5987f9.xml" RLTitle="Understanding Computer Accounts">
<Attr Name="assetid" Value="bbe55f3a-9635-4385-bc71-c19e7b5987f9" />
<Keyword Index="AssetId" Term="bbe55f3a-9635-4385-bc71-c19e7b5987f9" />
<Keyword Index="AssetId" Term="bbe55f3a-9635-4385-bc71-c19e7b5987f91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="bbe55f3a-9635-4385-bc71-c19e7b5987f9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\bd51787e-555d-44f9-af3d-404d7de1bb13.xml" RLTitle="Change Domain Controller Dialog Box">
<Attr Name="assetid" Value="bd51787e-555d-44f9-af3d-404d7de1bb13" />
<Keyword Index="AssetId" Term="bd51787e-555d-44f9-af3d-404d7de1bb13" />
<Keyword Index="AssetId" Term="bd51787e-555d-44f9-af3d-404d7de1bb131033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="bd51787e-555d-44f9-af3d-404d7de1bb13" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\bdd31e17-a283-45a9-8e62-ac0f8e48b907.xml" RLTitle="Add a Member to a Group">
<Attr Name="assetid" Value="bdd31e17-a283-45a9-8e62-ac0f8e48b907" />
<Keyword Index="AssetId" Term="bdd31e17-a283-45a9-8e62-ac0f8e48b907" />
<Keyword Index="AssetId" Term="bdd31e17-a283-45a9-8e62-ac0f8e48b9071033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="bdd31e17-a283-45a9-8e62-ac0f8e48b907" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c47c4e11-1d84-43c8-8b6f-d0b44b9663cb.xml" RLTitle="Raise Forest Functional Level Dialog Box">
<Attr Name="assetid" Value="c47c4e11-1d84-43c8-8b6f-d0b44b9663cb" />
<Keyword Index="AssetId" Term="c47c4e11-1d84-43c8-8b6f-d0b44b9663cb" />
<Keyword Index="AssetId" Term="c47c4e11-1d84-43c8-8b6f-d0b44b9663cb1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c47c4e11-1d84-43c8-8b6f-d0b44b9663cb" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\cfaae176-7c7d-41ed-868c-6d879e1ef008.xml" RLTitle="Disable or Enable a Computer Account">
<Attr Name="assetid" Value="cfaae176-7c7d-41ed-868c-6d879e1ef008" />
<Keyword Index="AssetId" Term="cfaae176-7c7d-41ed-868c-6d879e1ef008" />
<Keyword Index="AssetId" Term="cfaae176-7c7d-41ed-868c-6d879e1ef0081033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="cfaae176-7c7d-41ed-868c-6d879e1ef008" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e20d05ef-2361-482e-95f0-eafbe7e72664.xml" RLTitle="Add a Computer Account to a Group">
<Attr Name="assetid" Value="e20d05ef-2361-482e-95f0-eafbe7e72664" />
<Keyword Index="AssetId" Term="e20d05ef-2361-482e-95f0-eafbe7e72664" />
<Keyword Index="AssetId" Term="e20d05ef-2361-482e-95f0-eafbe7e726641033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e20d05ef-2361-482e-95f0-eafbe7e72664" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ea4feae1-04db-4c02-8365-02b8fe69147d.xml" RLTitle="Delete an Organizational Unit">
<Attr Name="assetid" Value="ea4feae1-04db-4c02-8365-02b8fe69147d" />
<Keyword Index="AssetId" Term="ea4feae1-04db-4c02-8365-02b8fe69147d" />
<Keyword Index="AssetId" Term="ea4feae1-04db-4c02-8365-02b8fe69147d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ea4feae1-04db-4c02-8365-02b8fe69147d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f49b175c-6d5c-4483-b9ee-a60ced4dbe6a.xml" RLTitle="Manage the Domain With a Different Domain Controller">
<Attr Name="assetid" Value="f49b175c-6d5c-4483-b9ee-a60ced4dbe6a" />
<Keyword Index="AssetId" Term="f49b175c-6d5c-4483-b9ee-a60ced4dbe6a" />
<Keyword Index="AssetId" Term="f49b175c-6d5c-4483-b9ee-a60ced4dbe6a1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f49b175c-6d5c-4483-b9ee-a60ced4dbe6a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f51462ad-d2aa-460d-bfb5-3631e9edf274.xml" RLTitle="User Properties - Account Section">
<Attr Name="assetid" Value="f51462ad-d2aa-460d-bfb5-3631e9edf274" />
<Keyword Index="AssetId" Term="f51462ad-d2aa-460d-bfb5-3631e9edf274" />
<Keyword Index="AssetId" Term="f51462ad-d2aa-460d-bfb5-3631e9edf2741033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f51462ad-d2aa-460d-bfb5-3631e9edf274" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f6e84891-ef26-4f1d-bac8-b58b7b977139.xml" RLTitle="Computer Properties - Delegation Section">
<Attr Name="assetid" Value="f6e84891-ef26-4f1d-bac8-b58b7b977139" />
<Keyword Index="AssetId" Term="f6e84891-ef26-4f1d-bac8-b58b7b977139" />
<Keyword Index="AssetId" Term="f6e84891-ef26-4f1d-bac8-b58b7b9771391033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f6e84891-ef26-4f1d-bac8-b58b7b977139" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f91ca7df-6101-45a6-947f-21385d0b5e01.xml" RLTitle="Raise Domain Functional Level Dialog Box">
<Attr Name="assetid" Value="f91ca7df-6101-45a6-947f-21385d0b5e01" />
<Keyword Index="AssetId" Term="f91ca7df-6101-45a6-947f-21385d0b5e01" />
<Keyword Index="AssetId" Term="f91ca7df-6101-45a6-947f-21385d0b5e011033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f91ca7df-6101-45a6-947f-21385d0b5e01" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\fb4fed9c-c641-404a-ab6a-df9398351443.xml" RLTitle="Reset a Computer Account">
<Attr Name="assetid" Value="fb4fed9c-c641-404a-ab6a-df9398351443" />
<Keyword Index="AssetId" Term="fb4fed9c-c641-404a-ab6a-df9398351443" />
<Keyword Index="AssetId" Term="fb4fed9c-c641-404a-ab6a-df93983514431033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="audience_msCustomerSegment" Value="do it yourselfers" />
<Attr Name="audience_msCustomerSegment" Value="infrastructure specialists" />
<Attr Name="audience_msCustomerSegment" Value="IT generalists" />
<Attr Name="audience_msCustomerSegment" Value="IT managers" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="contentLevel" Value="100" />
<Attr Name="contentLevel" Value="200" />
<Attr Name="Description" Value="Online Help for Active Directory Administrative Center in Windows Server 2008 R2. Administrators can use Active Directory Administrative Center, which is built on Windows PowerShell technology, to perform common Active Directory object management tasks." />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="subject_serverRole" Value="Active Directory Domain Controller" />
<Attr Name="updatedDate" Value="2009/02/17" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1669" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="fb4fed9c-c641-404a-ab6a-df9398351443" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
</VTopicSet><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpTOC>
<HelpTOC xmlns="http://schemas.microsoft.com/help/toc/2004/11" DTDVersion="1.0" Id="dsac_TOC" FileVersion="" LangId="1033" ParentNodeIcon="Book" PluginStyle="Hierarchical">
<HelpTOCNode Url="mshelp://windows/?tocid=70c2c837-d4fc-4c08-9845-e5fd5fedfdc8" Title="">
<HelpTOCNode Url="mshelp://windows/?id=737e1fc9-c253-4659-9e54-b01b8fe3aaea" Title="Active Directory Administrative Center">
<HelpTOCNode Url="mshelp://windows/?id=abeae4a5-c2b0-4695-8065-cc6f8fd13572" Title="Managing Users">
<HelpTOCNode Url="mshelp://windows/?id=536c96f9-5efc-4dab-8d81-632047d83d25" Title="Understanding User Accounts" />
<HelpTOCNode Url="mshelp://windows/?id=b398c749-d513-47b0-a1f3-a7dbc893bd3e" Title="Create a New User Account" />
<HelpTOCNode Url="mshelp://windows/?id=103155f5-8171-4ce0-80b3-84ca7233bfde" Title="Reset the Password of a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=29bcac26-c9e6-455f-a69d-371cf1653097" Title="Move a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=7f64b4b8-fbf9-43b3-9b5b-5160b73194ed" Title="Modify the Logon Hours of a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=1f8c3563-1cf4-438f-8967-149a02740470" Title="Change a User's Primary Group" />
<HelpTOCNode Url="mshelp://windows/?id=a5432485-1ac7-433a-ac83-64efd6ca3eea" Title="Disable or Enable a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=8f9f23b0-37c3-4615-bd84-f3155f940d9c" Title="Delete a User Account" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=45555a35-f428-4298-8241-599217649c55" Title="Managing Groups">
<HelpTOCNode Url="mshelp://windows/?id=8767a036-292c-4ef0-ba2b-3645a22ec2ec" Title="Understanding Groups" />
<HelpTOCNode Url="mshelp://windows/?id=992291e2-38f1-4a71-8796-8b3d520ee175" Title="Create a New Group" />
<HelpTOCNode Url="mshelp://windows/?id=bdd31e17-a283-45a9-8e62-ac0f8e48b907" Title="Add a Member to a Group" />
<HelpTOCNode Url="mshelp://windows/?id=27584af3-5f9e-487c-bc94-dd632ae1195f" Title="Modify Group Type or Group Scope" />
<HelpTOCNode Url="mshelp://windows/?id=5c4e1ee5-553f-4bfc-a633-d4122906eede" Title="Move a Group" />
<HelpTOCNode Url="mshelp://windows/?id=8af62920-cd73-4e19-b932-165599000009" Title="Delete a Group" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=13d75518-088d-48a6-bc1d-c6c499678daa" Title="Managing Computers">
<HelpTOCNode Url="mshelp://windows/?id=bbe55f3a-9635-4385-bc71-c19e7b5987f9" Title="Understanding Computer Accounts" />
<HelpTOCNode Url="mshelp://windows/?id=20cf6385-c763-4a73-8bec-1d60ff4f3c65" Title="Create a New Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=e20d05ef-2361-482e-95f0-eafbe7e72664" Title="Add a Computer Account to a Group" />
<HelpTOCNode Url="mshelp://windows/?id=1ade67b9-2f33-4075-80c8-07ef32a6486a" Title="Move a Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=fb4fed9c-c641-404a-ab6a-df9398351443" Title="Reset a Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=cfaae176-7c7d-41ed-868c-6d879e1ef008" Title="Disable or Enable a Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=0093fd1d-372f-4f8b-9a71-51dfe19c9353" Title="Delete a Computer Account" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=754b1a48-3802-4d8b-930c-613e1de2074b" Title="Managing Domains and Domain Controllers">
<HelpTOCNode Url="mshelp://windows/?id=3416503b-2a04-4d80-bbc1-7b8b0f6defa1" Title="Understanding Domains" />
<HelpTOCNode Url="mshelp://windows/?id=36f23e85-adfe-4140-ab0a-a629dd13e282" Title="Understanding Domain and Forest Functionality" />
<HelpTOCNode Url="mshelp://windows/?id=2e7fb6b3-333f-42c9-b94e-769d1ea84b61" Title="Raise the Domain Functional Level" />
<HelpTOCNode Url="mshelp://windows/?id=9903f114-ea06-42ac-a96f-3ee85ae1c219" Title="Raise the Forest Functional Level" />
<HelpTOCNode Url="mshelp://windows/?id=f49b175c-6d5c-4483-b9ee-a60ced4dbe6a" Title="Manage the Domain With a Different Domain Controller" />
<HelpTOCNode Url="mshelp://windows/?id=9bc50ddb-3835-4cf3-983f-2146b6170a01" Title="Manage Different Domains" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=21bdeabf-f601-4a1a-ae37-ec463526b339" Title="Managing Organizational Units">
<HelpTOCNode Url="mshelp://windows/?id=2a65077d-48c5-46c0-aea5-bb23af222c9e" Title="Understanding Organizational Units" />
<HelpTOCNode Url="mshelp://windows/?id=59c77fa8-3514-41dd-907e-235cff4b5634" Title="Create a New Organizational Unit" />
<HelpTOCNode Url="mshelp://windows/?id=a14c2094-1491-4b23-b813-3a9d7b2ad2a9" Title="Move an Organizational Unit" />
<HelpTOCNode Url="mshelp://windows/?id=ea4feae1-04db-4c02-8365-02b8fe69147d" Title="Delete an Organizational Unit" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=73acc58e-f40d-4d4b-bcdc-9d97d39112c8" Title="Locating Active Directory Objects in Active Directory Administrative Center" />
<HelpTOCNode Url="mshelp://windows/?id=329e598c-8607-410a-95e9-0203acf77edc" Title="User Interface: Active Directory Administrative Center">
<HelpTOCNode Url="mshelp://windows/?id=c47c4e11-1d84-43c8-8b6f-d0b44b9663cb" Title="Raise Forest Functional Level Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=f91ca7df-6101-45a6-947f-21385d0b5e01" Title="Raise Domain Functional Level Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=bd51787e-555d-44f9-af3d-404d7de1bb13" Title="Change Domain Controller Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=7d69e1ed-7731-45ae-bc6d-cc213ef714ed" Title="Add Navigation Nodes Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=4d317cbf-28f8-4deb-b0ee-4b67a867e626" Title="Customizing the Active Directory Administrative Center Navigation Pane" />
<HelpTOCNode Url="mshelp://windows/?id=f51462ad-d2aa-460d-bfb5-3631e9edf274" Title="User Properties - Account Section" />
<HelpTOCNode Url="mshelp://windows/?id=5dc7c150-6b3d-4e29-ba34-8e9a452a0142" Title="User Properties - Profile Section" />
<HelpTOCNode Url="mshelp://windows/?id=f6e84891-ef26-4f1d-bac8-b58b7b977139" Title="Computer Properties - Delegation Section" />
<HelpTOCNode Url="mshelp://windows/?id=a49a9bd3-b8e8-4745-9608-3d6e89aee280" Title="Create Organizational Unit - Organizational Unit Section" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
</HelpTOC><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="AssetId" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="BestBet" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="LinkTerm" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="SubjectTerm" /> yT `! `F E Ooց 졕b
!JJ* ډ*%I% JPL$å} "<@{g}毿>onx `^Y b!PU @3XEdXF hV @ U Uw֭6EAyAVy?s<8U;j M̳|c\[nϽ'{kۯ|qpn,fy wkpnmqυ+S^v'wwߏG]k{
8ַ9ַ+=_k.|]yw[9/^̧\{EsmkKMίL6uɳP[^~yi.f;E\;;rZކ |nr}o{<C}g3f^8,ĵ^9fwW߂#:~6zq=K7? r37ߦKpnqv.r}sn
}zn֦Sv̹=ۀ߯~nϳM?v_ywy/ykS:on7yW?a ogs
9u/ۏs?{Kx)Nc E'=x䀷 o8D ?Jͧyp^?; 'IIߔu 2X57~5\^w .8 {6CȹywAkk{wqX/yz3jHSG Pqu?]|+Wj| ϯIz &gzD͝'RzNѫ_.}W9?y:}>Hǽw2Q٢_]
~cqW}WϮo}g}{__}g{o64j ;5<<g|TRB9:{un]{㽯sy>.;<gl쟽_})W٬gӇ}{}gվӳy_uuj=gK7ٯg}{6ܞz>۹ Fl#ճ}{퇽+}wг ]MW= 듶FWٞ }g7gwNƾg[ܚG[;s87&;|VF #<#=k!\^/}SMvOԧ>u~ԧ>]O~jzWԧ:}jSgZ빟}SoM꺽~7ޏ>wwu~ ztνw;w]~}7snݟux `Ղw{= w؆<yn ŷ~~snp{Wln r>%įj u[p ޅ-¿Wth+^W?=!_/Ցivj j {tڅu==ۅu5|az/_/; ;u=vZ.]|aؐ;_q4. -] a}~W]؋ǻ= AwGuqE;Z]nwzwx|]}V>η?vw^Nw pa[ o}r_ }?<j0$ }C >r}; {sǀ#!17~Rś]Oc:H3)s:Ý uŶ>F/Gw)+><pJy_S:g{JtJguN靵)yoS:3=:S=S:3=:S:t{Jt澧JuO~Oҝ) >S:g|Jt aLN)ҹ
);t&çJF|tvJ\Oҝ)ҙS:g|JtnǧJg~|tg|Jti,N)yS:3;tfʧJ|t|JtmΜOΚ鼜OOΞ?)>:Ss>S:g}Jt qY:ϺSJg&}twJ\N)>:SJg>}tyYS:3>:SJgwOΪ鼬Oҝ[)<tgxJ NS:>:Ss>S:gxJ<OΙҝi)s>S:gxJ|O):'SV<tgxJ鼹OάOλҙy)s<tv:G SIJg:O,SO%8VXx^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^Ŕk
hCGGC4|pGÿGGCph4CxGh*>
C" pHh4,|?LӏahLq4GCCGh>Y>
CG0|4S?CG4|>
e3 ahh^>
i GCa~4
7 hv>
q9 CG~4
; ah(|4c?!hX|4>
CGaPh8>
GC0hX?kۏ!h44 }>
I CGht~4
O CGaP4|N}>
U h! Gh0` `0 0` `0 0` `0 0` `0 0` `0 0` `0 0` `0 0` ` 0?DYDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD}CcCw1p?}pN
c)) M)rZIoVvxK 1s)$zϜN1ه'} F ˼ѫg]x6vzAF#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1F#Ĉ1b#Fb1 <zLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLcdy2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!d2 !CȐ2d C!kM<X]_cB$~^\p\. ¸p.\
p\. ¸p.\:u\p.\
p\. ¸p.\
p\.? ³q n=
p\. ¸pznVu W
p\. ~q.r6Å ¸p.\
p\. ¸p.\
p\srG AwwgG v}0y wG |}Pno9 pr}ۂ }7}>x },c7 q{@ yיqp\e./4
M44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MOӸ[֑[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVgii544MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4o[VmV[[mVmV[[mVmV[[mnjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjjګjv 4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MO[3mn}/[\/.} w
ql6V[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVmV[[mVgiiiiiiiiiiiiiiiiiiiiiii4^
Qiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiۦiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiimqiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii[|/(4MM=C7=;ޮwW7 8 3yuf7T]FaЮ2![U!m2iݝ;xKt
B}e}ݼ?=[N!%JBj:$%(TDDmG>+HnX "J ^A̙mU . v*g@^7
ɈVx2^26
b*%$?D0"*:}\s-310BzH,B$Ժ }܇ <&d&xWI'$NH_{l<w>,!.|S4Dr.sE 4!=A/W/PW 2~oSHpxχ e+r CV| ءt =) ;_Hog@`J2 :50`B (nS|ky,`ə *uU!0k& xsMDq3U|}'y{RR4fkN}f(5{p!@q2yk8iT o 9* s aPGL;u6M i?M?,}Fw}܆ιޏ U|@3鸇 ?#].7ZޓS?-"D /,=BS~Jo-s!tKx8gWchEc9s4>~O)eI֘RΡЊ S
8 SWW1;:WI1ɕB/l tiȳjVUc!T\oZZ)et6[@y>=<3Gr -?M&z kj
zbUwj5z mGjYK͖ r`1b oJ8E&iT4uu1mͬc#1%#M鱇9m]
" p= 9o
r(,mo8;U>3 z^ OQs]^q"5B%!bLCO<2T l{2qBҬG1AaG9N;5ʍF12=uƪ9ř `qIcSs} !ZoTH6$,q8NAU_
N8kp*D9Xmp#X}-bв oH) DvQ>l}ՈiH+Bٿ%2t,vи=f.`NR"/E6iRz=@*qqњfG9hȠ !D:;@8lZ[Q{5ٳ nf.ᒇ(ƛԛ@&ha +pp=v\`p93S ;;`Hy I gc}Xt0;^_Pٶ0stRpO2 \RZX[te?ݖB?ۥχAf
/іW[س.U^ට'z[tlo62H|5W?|/hΉ?%>~jO6HsZO6G{
ĭ1 >tmޝMEn
9}FlUnriֻ>^ WH2yC<T,u]A5bYDY X_"Qm{7MV"L,loUd9 @ @(?08X-De͉o覊2jiίƯڄ[ά:g .K @AF͡ d24MHqE k$8JLGS("CI|@-8;Y;AJ6=` CRy; ōQ~
kSC y#; \m]vfrK> `o ]5 }H.-e" S3ԥs<b̧5,s #[83̷ W_0h˹D^z:N @{],5z:D" es3A."2X֔W r"/gu{@ Of0I8HbyM%q4yy*֍3݂g<!a _q]" %ubBh\c1n z @x *%H jj7] #,4q#0aX uS3~ݠ/i8 PH67"X":~!& ݸpP'Å-2<$6~b1 >C,} X5ўE!]x@(|dJB il#ZT$ ?xe 2C03jnLka0Se ` ՙY$6.
}x[x*Ѕ| /ЗGےCJk*]Ϸ}`ڭ-8ۮrҽj9
2h)dk{hw9
QH0`CIJK0N?ujp<.+ yg.6 gB-Lp7܇K1[MI^kwŽ" pV&um#{\a gCeKXĹc&)J3YฮhRfӘzEY[I ɂNu١F A8 k ]P#U@,r B.:n>~DvA*- ٳEయy;c] In=gY0bzevvy
ةH
˔y,Nb{hd LϝQy<}:Lig[͔z)" 1; O)-XMwaӿx&^km1shyg)EdPq$Ky E E5E ChNYV{HiUk&
y?PKGsj K\?E
C G_wl{렧@ͬ(_ΐ]5Sou7mx{/(
z-PY'U> qP ԗ˿@juwΘEhk P,ǥ,?Ϣ[k'V{U-yˡ ɝX&KnWj❮a 6N0U'-Gm>fW.}X3
#)Oȍist;@^5#_1 @˟ WPR! L $ &zqŁ,7Wnϵ}D\Xw ԭI+I ] >nsob'T3q;%V92iG1Gl] [/+YHPSBQ[/vW5 Ή"uUkv FZq`]xYSeʈ6f+V (/G]YgGM$s D^_^^'AVgE/uBV ;0n.p{H.dտ?э76<d٦,Z"xle8!ClUY4JԲ[k^}\)^'Aʢd.4q'yO`BOCD `NT?A֢>D # u DӵV
VqG͠@+DM>goף;Z[X9ơI^)ȣi 3"d/
Lo)>L' )n7=D[o3)={0
;nR;J :(IHvgî / bvcy,ܡjZxlKT'ф$4Zc D[<+~qH'UZzgĥR15.׃66jBOVm ~ o"&KS7tA^s8ƹɋDd`SE 2v[Ѓ6 -Ch{8QD=G2c7F#TUt5U]: #s+"
)5
-^)AUZ}43sx{]iB"Jb$"žsseX e chל սWQ $GE&Hm&=WiuHgzYԣ-N
/I6x "pp)
+?STл+\2gБZ&> P$%꓂Y [w|7nQ]"Ipv=9 Ϗ8ؾ4,ZDgXk"fwی´hmĻm ~'HlLfLc#3X&
<Hcz@ F
27,-xCEhMj ) s)ZʬYnwu&Ev! %Ѡ@Y\ x}fj~ՇGۡؽ;W
VE#Nwfpm_*JGQOq ^v`(XjmA2;sK*gGc.0cټQq*ӄ
Bpq: P|NmzQnD\OPUcab%:GJHN}''= ǏT!46놉Zr!ju z1} h>2%[` J < |H3 3!hc~JjDɗ<
19R=cNҚu
bk! 1]ko@ ?@ꆛ潡s{IRs[<sJ ō
Tw ,yP: W q ˊ1QX@P ]aë.lSS
$mHL`8`e#`!G016,l
_-qZz̈́g͟0hA6c1 (LvXݷu.LBRK-ݪ0hrn~|f-Pl Po63*1?&2- C
Zu|\ > /xg-b-
KM Ȱvx\3~Os[jx7hilNj빦
y)퀶bk&MHעa!&4媭"U֣v˅M8<hݳd<B=͎ ۱0e p3I{8Z!/3G\#<
`_N áfY/7HW2
,qDG\/ :D#1UsA3$yV͢A:A
}+^&{ifm`vވhbS
#0c#}!p{|>5S[ 7
*0\ 2 XTb}B IU87V,yV6y S
ծSܛuJ{
p6`sF\HT1+ PJe:ʊF@$D{2GECagnMI[l([ ~a6-~mUp܃glko>51ha|6'tIB%TIݭZg}?#X^Djd %{ E+
A4m1eQ+L|cѹl>{ >S:>6+& >.=4WVfJGRm)AxoP/T2z<z)TΥ"3ɡ Ӝd $Ǣ9@te| _
mܠ5(&PڑV'R azR9 ] OFhF a0 # jL W)(` Ӊ }IvF)5&ALsw/T_e =` L 8cX藋bE,"X,bE"XbE,"X,bE#H k@>\g؞-.#Rs ;LL1㟎3im8#Y=d3×D 0gek0 sW4=.
(,:#
z>1no_,>E
"{/ 8?e<ۡq뼣t<Di/;q3cZ.Jhd\A x Wʺ/%s~,I4D%rӜgNrD7ձhYx'V")m4h^)Vtv!ܾ] z13^hq21%_t04r#Q?d\ .6B"8Z3~iytV>3 -ف/ᱤ)>4Kps\@ ż 6#}Gp)d Q)!b1ղwS
md75[?lp&Xv܇ / RA1h4-W{nl|/aF
E` Y)>㒧6;<xünSb^VC. zƞZe K3<>>ˌ1+$nTWBآT)(|KhhP 㑌a\& JMmO.qܫ@~шr8 0[G?2?YjFlcJ\mä@) 6c z0!VWWǞp 1mV1%Ҟ ejsi'_KA~_{$ϴNȢE0ZE,Ô$3_@=bZBԢIy֥u|%{y-e۶T|#;n碅?m*}M¢g$B/< S(w~s K&ߕc.l.;)Se YFaY`+ cB^j iE'rϗ:a u oa(^ܑ֚F='d%⺑1Kd7IMKNPHf3,m׆Y\n]nBlɋ3xHYJX_6`*q̟l`is)L/Ca>&v \|r{4@$jg@LΚI~G_fU&6t ~
ЏUh4A g]RLNP cx . e<k͟ Y
IrT'ɚnzl!cYcʆ\5Mx
%cl)&~L,U¯{M1zA.t><`m3)]8[W:%[<ezT-K]bFz& D'hS& v͡s"Ytw 9
W 4ɫǑJ8)4)wJ~'rS275 ,~ 5 P,ʳ
9 D8
1DpAg!crk^ #`v 8EJa1 NZM ~JOcDwޙN!8sH8W_KZ ȊYF&1k3vk쵤!sY6`s& A-o|="M1T?k~TbLJ#!HPյ`(^_n
U/CGc:)fDyQkf%I?yqk$|ڧ~[%X>ѣp~Cym6UdIή W8R"a=_-g]noj@w_56$rQ@WI0&[PY# g}hؐLWDڒmϲ!Ǿ !)w>΅Xj,zjDU{ z~W͂tʑ&Kı+|U43&i ohK7KF.@/<zg'(}ӳk^%t9xh `:<V˵-Ym<B`mo3Fֵo<z90ό'symmԇ|%ճi~uYEtv[# ?ҝ p Nc' [$t%8qMB1@#8DSqƩ3*OJ,os#}ei)!o
2<u 8Jn/.f"_2H_"mDܝ.i>O\3,TlZ[= f8K9vf}W2*yCWj9o!5=Ct[_zܜ ~#FX>Kik| {X=Ԯ>Y lS"Y* m QW>,!};+) gPid 7i|*yX}9Ij+{VF94[VVJG b.7YH\ bW Lvg<N=SyqaWn臶=^o{-;^_iżO``HcCS]mo]"L:`Ջ.T".jo/R59LW-3DY*[&чZ'}olLZt( l0],=}~VV bKb<)K
ǛMXa[jxvO02|X 鴺H&@}i"G,.LSwl-,%hW%%y BM 1nP2v_ y4%'>?$
rH$/<c!=wɡ<9JrvQ.\KkN|ζ7Q[)8$c㢣@UɌ@H` bj9}]՟hK~w(`":4C^ '%Ӡh M8Lkm݊0dzN-@nn IjKAט?A1B2z5<vi#5b؛U+|>9̳_̎3Sl>58k$ٮΚhmCj㚓i
Xt^dpZ s}8nj_tm8v}[B
+*\x?BIクdْ&i&Vg`VYO:|ZKFa(W>hµ$D zdY_ku$ FO$hxFcuQ,1"q G3|WKf1|fm-hgw7^!R&3Ǹ!:vz:3me
c^eG\PRǟ}nnb 7/9r\jO($r >,wv+mGkE/P,PpY>&)dCF_ʳdm@.@tJ S1"H~
0B,{܄qni @$s|0]ǦnZ
gJ To5άc8l/N{.ko^"Z!s |x|(H grL?"21\ YWN2ğLr_ IY D^ҁoF> } Eˮu PE!>|A\Pq
4VAU)8~2-N{M3श=*lvUk4Tn>T6{}́Lˊ=,X6ߥU@|_k҅$ˢ/wv8XqWj8dvmp,at ?\5 jNOZ fbYݛjBC'-* .DG
4BM*o%⥸8}tķ{4^ׂtT!9E+eu ύE=: X@&Ohkђ~;n&nM
3#3lPT/prE8<`KGQJӀJV}ϤWÌt/WcI<%?h$ P,m7= Qf3L T>=/{`nAEu,1Y^ RMi5Zʺ'
"νDwB2ZcwEc32G*a~q\p3J %
?NycARy Čs8 ԕ UELf`K> 4Q8D00"|F{;`Wۆ (kj^
ޗ̜QpءtLoyx}5!{$^U Vrq_X*A%h-WF4 O}L,ԴսNK |ه F{E|&$ N*Nm^$b9+ң / `?7Q^l-T RȰəB
AKC8u\(=4%`7 4maz:xJ`MSZ5x @:f{٩dU"MoF lo}/KA}œMV2d2e\ %0D(BBtABۏCanX7)FW!/C = Ћ#[B e :
U`PP|(Jg 5ԮjSk& y" 5n7J ҭi!M_im]łZ<aI2 :~ X֕&~ T>8j}U#'2 3VU\'_&è^T(, Uǂ
:-2Y_
(d%X < ս J ;)Dnbtkjsu$]sF1f #г)6z
ڢ_ qS?]1c瘋p_;x\aU2 .Z6
ь!]JyaBEm=N[}GD"o]\d ns,z9jo>;)F\!GPo6[എ X2nw6)Q Z(wɮZ"vd$Y]H! p#`97EZև/V1hm߶)̏vSȺX D3*h#t (437YeW9zi(0Kh`E/wɶXZ$tf˝!Emf ZevցLz=_ a3x|K{l9N-xn&;
Ȯd`^-Mt{@[<kѪv@-_v۬3C+Y,@";h^&*dF,}D<.f3<'3]%F;ƄGC W(l>3Ä#<ŨS6m·W 1&y|Q6>%ߛL=Dʸ!; UsyUbW%" kq$d8I L WJɬ6}:jSn7,B3M)t`˫7c/V &;YfFw ]a5OH$y 0F*[zke)u#YL◿7g}~X9 e|CbS 8_,tꁽo^ZEi8m\luߩ'K1Рy.l&{Kx߹ ._n;'3a\ m(yDb^GӡQ}jy<HRXᨒylq
!0I;^)JReΐʎΎ
Gt~)c}~2'FYBP/ ~FE)WZ@ v͜P
{iyBY*`ӑ9ERB\ Z1F[0̔
f 5M!9PLdi-rЀAv};Cfs,(t059-<1$ Q,D. STReH'K]kYk9%Z; U:Γ(Yd:MO6h*٩ 2ːZBʳK?0N<?Cv\ >XO0)3a8PіK}έ7?TYֹIWgɼլ\qع'q$6VjR4BWօa˨P{ pb嚅0HP#|+54~e$chL@]8Z x~ v\txfqȓ*P|vdf {f*-5L!ODx ǞGC mԯw\a-z#EVd$ȩM)X;Tu ^PvDr:O8
0D}A *ͥ㚡"c^*(+yN$]/\ e=)], 7~:1Q@
3az5d[ ͆D7Ve11ފƳ=6W.OE` !2V?44|#R_z@$fr }K[þѭA ]Fu(/ЭRp>tʹfGDYVavdjŐcǯlGSy`8Xf 4}mu]0j@b 2 )ج'Y;ZSfMxվӗ~ލGH̉R rt\+'H6̑p90ύa 3Ԍ*FZBD`{gz3ѓIu43=¸i ! 47glׁɖ
phYk3|Q\#C$TD<i]q.y/N2M?W˯
{Fro~_j COm8T䦾>Я9 n{'_^˃'q{pǜWowwA%ϕ%/B%ɽހ槨~~W/o ?W_#/O'Ç~nKU|^$yTܿ:rCT_ܻJnO7}*v*~{Dybn PҐ/Ҁ}U(u5y"Sf^ !pdaOHȑFT?0}VɵШ;~8^OdRE/Ys@<n9R>pNLd5\m=Jw%m߶|(DSNd89)mJxղO])?K-^N#^C(y2 ݉F{+U=!<,7|a4_[h>o37{
W? Ră\]q0+Np{c䭲O:aN%}O=N3ĘL
.15}ݓ+Y*ŻTdvZU|NJ8bREiAI72q 2hY{*ǿ3&g4E Ћ#Y?hm(-XEA^NB*8-F(d;V? OӺ/jōB }>|fj@7!<@j͝Ì1gkq2YmDmC3jN#֓df )2V-C|I 3 jWQcHe OY~k.$ϴw<>sTz\OROxi1
ze@[']3ǢO{iuv>)&vUzSV) vԣRť>wHO^Ɣ"o?d1kv,on&21?O4"` &HTbv1Q t\?Ѱi u-%58,.oZ ̔)=زa
^ОS#(f('ePm zd HXȨ`BbalY@A < *(5'Uxzځiȼt
GEo𬹽9ny ۆypH>(|:Թv
c !I'b16 }U'1 mfH m4g Pr>'eiJې JT 2t}X!j1΅ \XCuv}-+ǭ!ق]͍DXvRW- Rb5-S+ ӂe!/mxC (
B|6dtGnc)cakp-&Ho :GwymV !aFc<֍ʧQڠvVlޓCko]s7 YZp;Wߌ3pBD,RE(0lp;|BIe·+oXXua ʗn硉, :i%|glƶ K><rTX kz
#WI k [y{ /G+3g42 XɚXCEOSwd @%=c%k-QԾ)Q}ոJDn?&8Kh::j;n5]x|"ڨv\݄,jH6Ff$H@(H}{5w䂱?+7V@ꗼ< a-(Gi?YNe:p-+wM
A_d?{ (-O}1yi6Ѕ+9ߐN CYRеSY)' >" `g.uo)sEd
0䑉B]hT|~v mnj(dY!~߅66!M{s7hazچ\'=e ApqzLTH'kîv YO^2Sѣ(Zff#IRXUTy3ay ]FqH,N--R
stK9Dz84j6ZQS"'0 T32R.1 DnAb8!6b%Ne ޟtكf5nX
2p6wo ,Me&ҀdKЧ0
Іw<É!
ŔTOf
wMb^"wR0п 6b6qvD d^cSAhX*zn~ Ki%VZ0AhV:ʏ-'>7$4߉f-<5p?jP~hH[.i9bs%OzzI7Mj/^(ے!XZZNIg o6? "f ϨUi
'=}.Qu:U.;@s1`Ϣ-Ջߕ4[]*o.
x5TYA8qXxg-[ {y>y"G/TC1V58<Vy¡gCwI 'z\IĖDbP?5(rvA_|8-5jg2>:V^e9 ,/Jňa2N4ĪbFHM f
*+ W>:ZP:SοYI)sj椭 .lM/e[&Y l; OSd]Qo<q>>e'1 ;3'pZ%B
R*T9vǘbt bmALɫmT+xUME2IU r#rLlS/
r%Ԣ5 tRRbs wj
fQF]$OriNٷ?ziI[frݮX4x*Dp@_ͮeô瑣 o|( jD $r"&HwRiXwvjɡ+K%Ӷjp
Rw; MAyBCb(.)]Gjʵ5/{ Q+X7uD(3xFd@U6MzttlݝnԛXY\E~w{k$FMPlF0bc¤IFy
d2V *UN,g].r*ܼ|o_g7א٪dy'1Pn ?Q\Gbzw̩UUe5.wQy5j::
:}!{ x ~T.ܚYsў ̔2 !Q#zO|WyXU^I=~h;O9$PU,Yc<6G6".5 o !i#ʼW ~e B1};|5ўAӞAj .w|iB֍c-R'
m #OgӶS5L*uq([Y:2P;Uvg S>MqF~R~F"b fN= 몈Dʴ*Umt'Lo
Vf7:j/c:yHt f/Q=[ |vd̉`AnDiЧ;*/焝kE) s:sގ ><o5)s2%L$lZ@cChi^g3 f/V|.o]!dSζ>F߸1YėQ(vi\A~jFldhw^G30*
( Ğ!xb|N*VS%{_:}VF<22x98y`#NY.V% !|6?tm$*5.O#1glˤjNr;j͆@uq{q: h B}
o1cށIH4R0μM])'lvj]|[ ϥ-9vw ϩ{+ldk/5GI
swjWV!<L2 @ ] r< <5; o̿BӗM\ dg:r^ b][ gڮT Lj6W.$gڃ IY@6Ç @'?
U{t]xki{˼*#9ȋsz<3P=sd
q|S")uD[Yes{dZ֜mȇ-DfZM`\' ]bTL_/h̔)6C7/B}/}sQvi$<pj[j黋No >@ -aiȋ{iLSѰx*Wp\Dok\~VZOi$Ǔge a/(>^Nw 6>O$J-+wcAWl2i,=>PזPvNwpSbVArjK3E ۓ}9 PI :S=PRz+o -䭴Ra6`[ `6݈9,".`˲ʵ SH0Zɤ6-͑V"o]&@q>@ephc P;2>
0ފyXU
GxQ mߑJ)љˈI{ATITLsVHgr HD kDj
H5G a %-OoP$=E JمDpxG*]9KiO
Ta)87S6}8zH Kc $RRHp-"5!W;&, .tqB8nTӋа],t.7v_^}93] %>C$ *}:
Ǝ"فόMY ^a1a]WU6,+ Qkn@Ϭ)>Uf"ԕ3EpMZ3喒^P>wCk-m3D2X p.l#*2RծcoF6ͩ,n~G\ l/ XRΞ.I)sL=oZ7,lvr) ՕP
1hF
)-;=o$ZYnsS=\ʾBoǯ`# /:ɥ )BP@AeO JΉi4eY[V|=~Z9A%#́~ihܫGZk JrCh-5vb6|BY،e?ߪ.xIAh
Z&_X"^E-J39<Rz!}Z[Rh 2 4/N dbc4]+*Ibn.wc);ސra{D#_Œz|ic"
yTK`,$N] H!Hs%SE/rۧ)lu?Y247 a`"*@9Q0Nto@Qǘ i{e Cd ᇣ;؇¿if#22b&˪z Q m&/)Ɋ8te@-s<`X Z[twΈx=b-Bpț3(,w_pfy|*T2[b&4Hs-~h?- x9 O )<DN l7 )ō v>Bn+jgTQdfH;.DYcxoPr*XwO𰛗<㧥_p+^)hLp2gU@6N~n#JE$.u,н*+w H>^7 o\nd?]3MOwd4}N 3<yZ;ڇd&⦲
㚵`Tؤ* X|Vù5A
6c + 1պb3 9><.RA>2gb&$Z1R1JΎ:x|&,sϭBHð+MdDg0*+EbeQd"F
UVʅF&܊VRQ dMV%9*CNn"Dl q[\RgݚCsgV _ltdڔ4Y.g hlO86v[[PH"aV,ԒrX6I߀T4ޟ; ] ʺ^ -=ŹɅȼɋپ(N^CH07=zUӞ+(}?rAp7]b6%8Є6 RFE7l(q/AqB
O_a='U[]n' VGSHgH H.!uHuhu rDn|44$3 EB@-P vEBBiy KA[Z'9MO^ 6n1Vrz#QQ;Iq74q <l Q3OMn&Ԩ
T熎gL,q+)V\ qƃUQz"p6 틧PQ(TyP#(g81^ǟN^?5uTg$Lcs5!mܠ>v^h%*\w˔ %NNm1x˃gfE\]|=WPP'] ^CzRг8P:C
/F/dy (G
]- Ic7^@ irt7._ٮ\xIk>Ӆ(>LFjjrR[d/8Xn
_ eT
#|ٶQ~
r 3o{ёrj0۶oƚ [xhob)ypdZ>ߋ6p3wjqlD:$j+ڀ GDry{/mB9\[3x51QkQ`9bJV 槢_D &bd
Ӏ}'r>--6?UQmv)Yl>@/GY|(`(n a,bi8E i " ein 8 `1|Zx GF
}L sXVi34ۘF+I!HZV(&_iϋGSM9ytHx[<>1$t8cw/x 7z*A[-x-m0syjg5ϫm.~~xm]1
?C)S#J O?'tMx ϕ9|e_ goA4t 44V'3;r}DTuxf|߃iƒ@AB/5<',=& 3#)Z T
CAb)^/L9?C/@[=?Bގ?^9ja.!mp *L>aͻJ6xA^ekl}r[vx&H9ɂPOp8X аd+EXk B br}iJp._ ~a*Bq/9܍˲zXRW0*$
;FQ9S,xbtzC /"6'(E^4_w23!AOZ9cadgؐz)>>m!=
{ aDK'
5dpxlA'Uu3{w9 é|/*xR:Xwv r *1V4ߙ텿8~Z /La^M-s ^h\R.,^
Lzh44.qd%I4o[L\yV)͚ 4f,ң%#š>b&Lgm<Kb[evI=+C" ~%aϗr`ykDS^L}5O^ہ0LKxxl0kPm,{. D
$B7튗?F˛lsdsxgxЦ~mKY0)<P,s%y\.$NVmat@(Sƞ9T&ݒq:F.(jX3+'ԘI5e+XyÐD1 ~L> 9" ?J- &|O׆@/m@HwC>_ts? kLbI(jlQ/#",ʞ1PfGHl}x 5@pRŬB"7|",nă8ر*#sX tk
Sk`zOq(,mu)M tV1Pus<lˠz02<x- s5oAȰr~4e:qfj AwJDlK+ Dе
-1
EW98 4%3KD_} Ev;@ۮΫ?;bπ!m )%: ;s8yHUʎ .>ٽ3nI
~Q r]i
| '_E7}#Rq fJo*C۰FK{,=6~vm=}+;|M ~1~KqW_> ;y<i07!<% 0 [/kKP}˴9gׂRtv13 _C+G*le$-q+ @BAȫFb?_//p AcOfoDRȹ:FK 19 =LT/. mevB(*/j#Z}5RzwZ#x?tD 4>Jԛflw@PڛV{H ! !_#%s'܃Nσ#zLe֔e凂SNv8sN1&
kvF
vS*yw N>arI(K,9aW?.+qaEL S9 YtN{7[M V& C5 7*/Oo;{GA =R N9*@>2/y S ^.^\ӂnWTآK{)drS`p|X.Fx*-g7ρy}KE8o9M/?V$S^jaU2O#[ wh/XQœЮ#i}х\E _m %|<(5Lh'zCl4B]K:xKfkBW&]: l6ٶD c͗f zƏ1|~7xc|pWg lO!Q" 1ڒc<7T-YY>μirL
J!+݊
x%<s\Q<߅gg@ Kcw";/`d\~n<lr r|&k~%ڧ:iy$p RJ :͈[JJ&eϞN36QMwX<< k:rxg Ռ 1^ '?.G` ;Mhq1B DbfúcƧD; $+L1E1"Cu5u>BTB"td6oxX|Y%Dе4]oWӕ`M2BW[Ec?>Y&ﾹ
qY_|-a ЌGykNHp@5 GmGB(^"۴7V+KBPLFMɽ0 B@jӞꗈfmA5o&qFj+4W!uu~
yR C3k/0jJ'B8B2 0D*i#t
hBD.UBi0/ף3䂮lP{ ho'BkqaA qH U ' A OZGՖtesA=4zf
E8SJzSt}z]y7k+pzpF7W -NHkT '؛5?GHS^'}HtdkL$>xh먰ݩsMɂ2n (p1`g9$D8b= Ŋ߭Wӳ % Iqă-F/֊ٷV=1J{-a*J0 Bʚ
G(+o Kf
w6U=Fю) ~Cu邸0ϼy㹋UZB :.B^b_(%'<V)= j-~$xccr-V
iq</Hµ7%Hgjyj Ht 8Ev'^-s ȌoN劄~x\G41cO;AF"osdw<H켴mԮS'vL"☪JV5ed LMmO v2RAQq)-7c*j h<ԫFJ:&sb+Ҩ s 25hD iE*u*?@eZ+8ሺ2ze
g}M 7^<>E<$~u$=6X>]:tY$ik(KIM`,fܞIH }ab-#
l9݂
6Β nMIVu%=I7a SޠZ*%< jDH~ y^본LL%d 0ZiO &9g; Uyghi3|- _2ՠoH0Ns ,3 Caݤ PnW||yZ>+J 3: OtwԲ =n$]ZB ^%3癔M* wpoyW}evɝk&. qE 4g} t
3P(Q'' &Q $-y/ι<JRяfGLX1#fo@C2 bhl\JHLP>(,@-4¥`L(J @0*P[^;_4?^[ J8q{;фmbf $5 ݦި.\|Uµmލ?wyC CW Eut٫]&K}x@aR嫢xeUºG8/zhL+O&P4ׂ"ح/8x#u jӞzkX @?)Rv=y8B9ʵjNԢ>04^z3!1]/B={bU8O(XrНZAk+x)Αqv SYϽB ؿWD9\,!}OAyZQG|Rɣь^LDSǴ?7l1틱VSI3n砞ԧ[/kgдUG<iz<ؗ4U'~%0]6RdGh@:Qĥ hgcr1)U?*T
s|DIC'qUg<lRy WZɕx)Y
6x>]VUR|Y{g_ 5xR~m=8K-Bp_fLP{DG§Df5 H`@j<ky% 9)v0 Sn<?Za/ Y\je㬯ڹzq1$й[Ӛ);M04%' CE\h&G2 B[d
}J]ޫ}[Ď_-'dah A1"IKXZH^v#2GfPZié
=n9 o^-.Hos;X} s
Dggvwf<Mb4[$
B6I\sssr%ÕJ4y>P~mdRFp[[~ʏxCdQ n.i]
83URX冏 #25 sDjaw7?HM.!J
I5nRdO䮋&5(n` 2,tu!^5{ ,~^$+ dFղ<Vt̠q +`
pE>+hQ û=aE4t5\Ҫi©mv_疖2؇45zL+^zfR~&@ 7_KpͮT: zET^P?1qu/.T>q \WB='BcvC.7 kMF a 20 _k=Ήc
X].,w=c[l!yI\ XZՃq0x*RNAQ ~|K7uco=l˒œ\]q^WU eYrg&IXᢱ hLs68h6$FX"q;cG̳դ$sJG4EX'/٩4|)rJ4ųiX3S {.us j^HVqkq^c0L^Kl͗':J~ob*ʭ8.hһӦEV~ &.3kmΊlZH69}^"2!lE@O[= Pv)Ӆ 'Pj[431n|> nY!MΕp+ulsBg}!o2&- h%W£*4&˵F R -SʻmX25^ξّ`Kk|6 pvy"C>b]aZlA+w _8 ^eZ1w f
h :7W뿥uIU\&#z %m4qOj]ՂOdQЏw
渋 ȤC\ڜ @NbL%(7^z0d- 0v0+f[*2oC nzc>1123U;#gӪ)"L2uڈ'L! {/u܉+l]: Ԍ ;t/6 #>[{y5G
10F.{^f)sa!taZ.JbZ/ɾ4kbT~,L-$6囶=
<L^Mqu. ~a 28T76<1SZ;9%&]RR(ʳX#":ӑIH;F ɖ p|}O68AJwegvށ1P}Ml P Çp:1LDfzvVL`ucDI7x_{=-f [ =\{ snϟ7n@Kti ̭f6MD2vҵgtϊ-.%dWlQ2pAhmA 9vnO^1oz<?#gX455Sf
Ԍ+_P=V$"SNEʦj-:Al0@>{M >!6?>m8 jt,[0za, =h®Ty%qx߿];tM _ A }Tȣ >.]1F-/ͩqyckA-ȑaSq+&etcKz:Viه;B23W딘b]Z
8J H6ln>;ntz]y>&u T FUoC? ńBГs(,Pez̦y4pM#l/zgh/1;u<vk(
XU'9kCHuF[/$z
"6s5o+zܬ0;Pحul6^\'E!SS -?W
,8ZA#$E 5JH%Õr~GK4azaHBZ0f$
;f- ~LxPr\BrLW#.GE (E#)\8TNyPs%FVWGy^ŖٺYe3NbvcUCϼ;]4RH !z'f7clr SUz# q0/Ql V3r$SH36YI\0gu0g^6G4g<\:ru47W&E,j hfcV*6$m@80=dV.JA KՋ$Ol
j&P䆹.g. S54ix ,4k
h9*z G%'%*iF*@W\+k=c-%Ahĭ !%DA Pqy4ð$
LѷNj6f*2x^JC 8d;Dm{ΏUӝm&P9je2[K d[ 1,%jIq + d"p.]&zB'٠8VYe-}Ԇ."+ԀxX&X<ÿ@f@ OcLRyA`!MG^ʤ?ȑ kɫE&6;>s.jﭡ9$nj#B[nOB^z=T5*q}. scڝ|b_7RjsEZƆԴ6*~ " Ue( d輢թvVQkɵq]|xO@oKw^?&~ zbFJ#19I35g/a\#< i5HF#GF-Zq[\d4l
D+Y5A[8"GdW#O O 7 @?">y+~wIk?ж7x@xBYDB pd(9ۙY}n-7B|ɚ]+N$gaGeGPҺV7{ƥ9(96=&( ]rH搓 Pϱe`zdhtiҭLvnS!e AF
\.`ʫjw({O6);
`SlfY@֦lm5 ݫ[qBޟ%C r C K)gCe2x ,jn$B7Q9|؝Xj Ai℺}\g:_|84/U@ZÌmh<p+c'>L;gvSLE?)Q|`N<<Ъ Tlՠ\6FHmһ
wwly1,̱ܲKpz{i<}̜mYpG fg~B,bE#"cdH*X``mj42$ebH3`(];0))p f03 >l ~9DݯZ\n] iY ? !_S_Ot*ڠ<@*!ɼ.dWl s
vLTQ/ : ެi
HXT,]d>yBO
BeK
NS1 [W
+VTxQ "T#>+*]UIL9V"# OVmm#$"i҇)2DјZPQj5&ɈjlUcbtlζ;{M֔;G9;ެ[1Y3=í VC
gg`vQ20eCB'&c`fgFƫJ
ܐ5(Y
Ab F WկFPh9('|nN&0ÚY:^
űC k3BwKT7s3@ɜ 9t١®3v6|{S;1e;VU Iֶn! ?v^v}YM[P\sYƷlPR7*ޚ F6` RI7":I(c63jɣjU E`+<_V+nj6 g>xV%;vS.C Dg.뮰,fծ`
7DG_H[ Qe>M0amXHRS*ZY n` 2[ۿɲpE gt9ÝƤ;_0ES]X*b0ȮhBw|tfrr^Z1p2@33N>w$\Jj~p Z^3Uutt,20)W@sU+PuAɵYU}>\ 5X1>iEq6j> :m)
i/laʽ㈹}b.|H
߂QXC5_3L=# vMu&m5Dw]DIFf}]q|77cuKm`/$Ow+ 6c{}lrYȕm
k%3g"V
by%3rwu0k]LllHa&*O*7ofk:=<+)5!vp)߯ꂊv綞ArWog3`:EA*Xrq(^M.FVeW-*ޔ vyr|Ie;OTNhl .PKXinY2"_ݾotMRi O-Ka#a/ȷt>h<(zY?he4+
UZ%edwå,(9r\YΑ $3^^ąee%l9\ܹSd2ۗlCPWAɠvC^Ѿ ů?i,X-J u+NCS_j 5H͖:cz!w0휅֩ IٷTT!tq<a[Jv:XlBӥ `ϤPqzWkzh\1z!l"
S"d7\ƺd4 ?u/U0N%?$F`}Ou 6Toyz"%v*EiOsoX룃^z\L2^b7 &Km~Sa9oKj`y Ջ!@#69`7
HO
9#a-zL6k3p5LJ,w&N}wb %0
Y` ^_{a]]hSq\Vw BBTtSsвaQ5^}6ݰհVr鵀A~7úUWnE-zNÂp^!=~<eGۛי&UGU`)\
f4k#,J U 0Xxq<4Jw^FX%є :8V`0FY WzcJ
H/L:Y+l 2=Pp<$eF(mUb{qD`#5v&,rzQUǻQ &Z (ԙjO?*CÃaʌ+3hbri2l@r'0*9np q;VtyȍDWu7$ G_DxV
X256H5Vz,6h¦ B:MaG/3VS#5cre S[[8'-Sm:W)> S]6m(D61DHKp~[ 9
*=@
+\"o͛<
G)תyNkO
Z^g0zdUd/fvt yh;s2
;:scxhwkhTMV#6ڽOJ$,]QZ-G2pW! 2,I4uy۞ f ꒹YiJYcÄ(9I]X
U"NَUΆ?uQ)1%RebN4Ĉ [
bbn1 7ND1rulhs9{ >_ rjyc#Lh> W,:xްLd08=]fo2
l+Mi J.L^Z0[\*5Kt5H&teU3# m9GGyѭy
]ISM|NXZ5GU*kv əd/k8}a&rdρblXMxFGUbxwVQla*5l DS6>q}ތҢг\.ly qm%0ODpSŸ0>.E->0 WdȬ𥳐e
~8 YUhZ r0 p}=pMHst.
[:-[js!nP6EVc">+zb5}>m_cDjn$;"+I0ٱJ8 .RTㆵ
TXwᄕ3Z;t0KEz WQxe-tD ~o#cRhRº $0ZVC{5 F`cIZvbI$rXP~1#7O0-lAJ\YP U
Brz^ *k2gq- 2
kBc~AWA?A l@F|>&øj!*ζE= q*!lLr[XZ$$V2Ϳ rZoUջL](t oDP2F>0n6Z(Uj
elrZvUѣg>fm55{M\$3wb6e.^lFMTק%ӵj2 +ځcjI貛o<e0n/ڭ1q#Cr̢x_qYM_v9|R&FUr&?Fߓb쨖qFHHMX`#;Yk4~| J>6[@X33#"A 87ӌ` 7}f/ H{͟zH*Ç)+ -,/:X^}-XCti%H-)T:Ʃc u H%9UQ0^%3~&s(b(|t.z4IǑ:SKY3ROp<LM x
^}i
s=GEeW~rc2i}/fh* 40@ke2zt1;uZKM\ m5-4^:oG ΌHU5VSIv)HC)؞k%SRץWj8qv"^F*
Kz2QpjY@"=r5*`&fت ur.2F7HO ʍܡt(
Sk-LE\زdV=k~ 4U+.P.+w؛cxߏ+v1V(Ec12s?1҆Od6b9-|o0T嬀0uudvMXHOz<eJL:F,ۚ t4oEAUJ| XYN} t߆D$>"pfZnc( d^Wj
pYkZ+n`"D
r8gn8+-zZ$hi`Mne|܊K/Q8h %0>T@(9 %(;Q\]%\C5dQ G"]e_62PŽhj4=RCϞ7K hB!sĥ~4-os,橇./b
Z~Gb[+t=07 4Hiz 0-#ͷ+ݙdp")<[˘x-Nˁ_x\pTN` Y+-oYI]8X:BZZ
`]
#t7U_ϓ*%=U]~*)D GjgR]*`bzkX>a/
hh!#⊈LaOhƭjD#(N ZW/痹?IȨ5rZYE[Oglp7't,UQ9/ijzd|:v},i:8 <5=2]sQg1XPCK&YVp[ \euvJ (hO<!omJpy; գ_-|
40HV
? WeOvLO^_}|Sj#FD:ׄ;$)6]Y|Fr%Yp z GiJxj{K B6*W y/&~&7cjƪͿϯ| ձWexwlϛ fF; -~LH|u:4ed! _0<AS *nj<ih{mJ>k? m`<l u
G~ HY"W rz3=s(}״cu_s6Wq YF <{T|^:_5Uwҕ>>hsxo -v[:e}yŞ~,~P#?/s q27C @_/R ҃zz ⩯mp~N'x+?/_<j lzn1VZ6Ezw4or~Gl >ރ{) .pvpvZ= N܈o7|>9ۨvzuplPvy]b9]>g_SY_3d7
qӛQO >Ov>^o#o|Ggǜbp9y_/ʇ }E78F!{nbאrU`Z{DCox 9*Z ?%a95n`ai9"SGs C{lۣDFZ;^N}۟ -8_5ܶ= 5Ga88=K{ױ/e톢}WC νN)lo Yj¾ٯOr +L^u#~lIu {}S z+uSSvoثWvJ5ܾ,y;^@ոuTN,fN;n, yD}:[q߿~M ej Ǻ'Ά?Tz{ip3/` 4GPDqǧ]%
w^~οWiϾGN;H v-Sz SO7][Wmoۖ1c{v:vj"U7 woǑW$xs;js|jSst4^]xqF;顁B58T~j=?y'z' ԩi}yQqAEw!π8w NJ=[=Cxx] 6U<.q.lm~D^ .c%FN gS}M^{g ^#s4Os!ũ=)g^W ێmxy~UjϼV8ՉG$נۧW=we|Zٿ8v
߆<rcq٧+uv
^/!;)mI[g#و[yJv=)WF53_jG ~;qe|=6zN߭و_s{4 + U[iٰ[rF0@M]<xIS}={bBŧNk
tFw9" ,G&UJ:~$uOe;_GTƇۍzŻWhn*Ye#ٮZ} TO1xSw~y*G^k ק߾>O$T-{V=P=zۉ\9*<N~>ٽx
|柼Npw*nN߳4`p9
#
^*^oC~0^"*6t`}ɟ-~tx4Q3b[`ebzUI)LzWzڟ/ 47R.K~0Nt7Y^V uU U35" ` _]Q|PD]u6E\W{_ ׇU+o>y#FJR9_I Q(RPؤ a _{P7m,f$V&ڌf!l[:1umcmK/b]6+ȄIp-m-t2[qIH JNID 37+<d+i9,s\?cnf>F2e9nI. =3 }܀>!,DZaX Kp(#qĊЂh#RؖuJɖ?wr>o%6rml@eΩ \8u}՛up$[bYa9 i}r~d[}v=:t{@+n$̻ng]ƬKO{V_pK@b.iboM WyJnm !W:69Z]VsR!bKS'm(6ǚY
cyy:FaIκ6-ע_"' Rq- ^7G*^7c)]9Hx6=/ f6 Thl8YQTmݝ;ϱ^^d|v`}^l錣Vb6ѺEeic,zg'<Me_)pO V&}C$:Y\ߊ_ ߿K_1o<{/KgF0apVy^qɶ<ӓ7~){ubd,ͰS?V~y[αu{8'B2`a[7' Mx#C1 8ž;NP-um&s "ՃZA`-$" W@5 & LO/VT`yܥ3R7
eH8Sߧ ci? ĭv__y/s|3 = >C")/YiO~/ZU!p溙ہew ۸c[X
I Fa˟e}y73O5_% ȴP' ɵ|wi: _yKf8Uͻl]L PJlM`0;l{SCFfνlMfl=)Ֆ
8 Ÿn<7uhp$^!,evoۥ՞s̭ h T4{A.N^ s:_ ?xp}vxK@"WVSmStɁ߳9WK-c4~߸< f'ޜ~Um|"73`v 0|[x6hA2+> s Fe_P2
Dp9- qKF?4r_·cR~ > q~ 3#Hmd.> J5AqzV`9#}nT xQ Yr gR wqZr_gPVϯ R#`^ #M^n<ԀZ烨 Dj81<W'"m>˰|Kw
e1zoKXQ/Ӳ,qk /$waQ{\
Y .pLbMZQ sO,/BZ삢__8z[ϣe0dI1wN- Fs1 F}k䎚:V![p;
#H. 8ymO=p@Ł}P叨#|>izf&V3=#,
1g!;w/~_ޗ%IRba&IjR&M)`
8CN}gtP )hp;=)O
) !(pMX()(JAR`SQ
BRpТREPQ#|\_wۦ
/{i8rb HG؇ G9pQEo>lScK݅@<=@kؘf0LQ|-4F'0Ln'#Ўa0n0,ť>r~8&Ϥ+1.OLI-Q%J)_9zfzg&HD (y )be
k rN1u C. czn5vn:N ؽo!` ƛ .meHQhɞ(mxqBv>X 4n2 buN!vo>hr: BDKC"CȪFV cr"r C!8j&G&s
͌E:đ X&{N& 5H濔g-|vŤtcS`ASޤ#wS GL~3";%00MQ8|yHtъFFǞ4B E^4 ̈7j8.s\1%h6B9us:4Mg.X{ibf!-s\"Bu `;AտY;Ā1 ZC#zC`M.3I ^ސ܍dgqZ AxFeеwp$]t>gn wgk&/t40Z9c M<%E "rogxiK@C}X<Fv!ّ ^d]7 D\^G"0 f5=Viťo 0E|"U?]0%ڤ$ U@
ýK&Jx ( (ЊBch25J` mMI}N_03LP?𖤽 z:5$0s7 IDM˞w9M Ґe*27^oGţ^"D-ʑ3Pz3`8 Čbw'ȍ<xGϛ$5*G3f
b+atn]:~=}$p>
M0[=p>{F!f˦Z]L\/c<i0Z&* ,7Z7B?j䢖Pe|`I0ehŎZrʔx㫧i*Db(_z*$ hǗ"r|lwXѫdVPe|CHz ҖZ3)|l%5*G2oxiӔԗ+~4L 9 6k&u+>@{ J/\LZ/w%5*˘[JK[NcưVaɢ;yk2Q xr GlD-6BcQG}#L&|T#Ixٹ:c1bdpg( |WT^|^ ƿ;muc$]Pe|DTdwwyH5&宼78I*b ʪL/:|,VT>#oz$!ώy{?q_ |"0JE=-5lV6sEET_8.9J~ϚK3B=N/A;'͖eLG4 ;LI6ƫ<~R9R' C!c0_"Z D*'~
Dt_ C^@ ϲޜJ6T&;?D$yᆐ}0FsK!z]T(:IPU)3|Hʳdih9e 3I+bȪIýT&;7ʈ!T&;7وBgLwSo!T&;7T&;7BhLwSo"P{$BgLwL mI i2x1uU'$yפ *mIe&;T%ʙP:<$;LLvP:<eCzs`ԝXA
* w
eCzs7Qwd y |QaqBݲJxAF䩒tX]lXK#iquՎ OKV227x4P+ү!v aqՑ+g^"mm:}f'ʄ;>Zҁb3=V5}.{i;|16PKۚ T`|hpsa5F.u ,ӥw6ID#Ji4f(vy/F1aC94,@.Z&/}^Q+|<UY5CbJ=t)VT1R w]G"Yzۈa*qkg,q
"ѐb nJ
}њNmtއY,kvc|vi[Ƈ;/ tlgVQgд {'6JjCONJyDx*ʄiO3)β
vVXI5Ћk[A Hb?BڕB {@ϣQ:bUT(
ׁH-h/.*R'Px+`ԴkzbE}Fay$D//OD8l5?3 Iaes}JLIOfG>DHD"dECO
Q9G D E '
G.+vd
lhqax(£O)s½e!\VzD[!!wD7K* ;u}s+8QGr E
Tx (;Fzx?iQ(O(QX#mQiQX>R_OV@~(+ģ~Dży2mI"8 qzHn"W(~j+ Og튉a
]xssIWXmKVRYP")vZdlIy+Z;y<8>V,AOg]lO<{Ds0&xR_'֊'n(jp ?>'N<ԍğԖ#YO|^℅ sjMգ?l3/8VJu%CTѠ=WЦg<`jeS`G.j,,&RAwheKCjP
ZIIWHV/ǚ s$B<GFx}yd䄄UFJNՑzL:$63mPQ,ὍgO4-Yoi #(ᑑ-N[<5|A?CѾa<n[:5e<LVZMل]zRlWƀ$ fжi$l'fV(
K_X#%#m ,%(> XB XаVx 1X y q
,7XīC,:ȰYLbF1*h60]|q<&t.?DdBYTjBVJ!=(ŕkeU(+l2fV<%ao+ZQ
jFXJ_ };yZ
-HHXe%fMY:^ ]nuPJܰ!-T{24$7*-P5҄&|E&DDBH1@Uj"\Dת"ݠjTM ZMD TZTM$ 5vP.kU֨k5tP&"D:AՈO_t$HzHfHAxJ[:b6aoR"Аr1Z9uH8-)'9sH ryE)RDr"q[JRN6 r"& "Πj$\'ɤ }e"v<af-%+4-,c]
S$eh.r?WoؠT lwS|dKP z׀i"@B 4G)}& <8c Z<=OrؼNy;AChe?D8@UD>o 3Qye$NGS, CTSJd c08#L)@hCKb2p= h4v4?Vr.AC vQyVؚ &!z@q b+]j]RzӀ%%|vCTy&_)]!Pzto Hq@Zt!Hq ۤ8HDm D-6PbS|{ i!wbpD5 " n%2(1v
!P]SʣmNDPR ;5 j
ޠiYM> B7̎1G~1fgPvE"M4|~)XҶNwLݦ!>(E(#]SIĥCAXPE̶ ̞"-ZS?~i&h& y;e
$HvP&ݫG: M6vW2R4̆nQň<P/ӲˆnI)ZNv)R%u~(ihR
\є
A êmҢOt7h7_R0Ǖs!ͼ9@VJKK|SztN6Dl6`j+[3' (02li7<^TкT ޣ+̿8fjמkAqdoi^gѬW݂ٙpO+Zf);i
/[WBo ^c/Yuwn
l}j#ܢ/E7LE&jػ.fLB7iR̼ V.Yn{cf}Kqͷ2'4lkv~p%/lS4Uk;o;|nX֖{:+gXg{\덿S1Erk 3 QX vj3fUsͅ嶎 YհKBFk۸]/v|hL<zM v[sͩ/wʻT
v?KzҨvo^yn6S[l='YWE{)wn7||?-v l.2?w {a+]
ib'*!TuxFѕ~-3] qT hA/7]zUx
[Ԑe̺hjw ^eS^ 7`3(伽!~}_JM4\.o=|-ۖoy5XyĶ
߆P5Z ~*5rB=朵F,|~)F<o{*8Kr!]+$Ղ 櫼UHdhtf!)MWtL `T-5O05] `l#|
산3\ ^˷itY#dyAj]0 AMs.` 6X%n,7ѐeA^,UWgg?s
ʂ?9o2d% hh C/vqY`,ќ7麚 >4aA{:Eڱ{tZ;cxmM X nC2y@gGEMYE
!W2sD[-je5|
d,ܮf2s"!C#EKx¼h.fr,SbBiVSt8Z46Vmc$H~[Kn+}x8HA6I}D\_3onKD\ D,MQ4&Mˈj;}-Yx~WԆI:Sͯf:c~kjN˻GR랟֚tPMSUܿ
hjE }`.=ä\g%`f#O>w4L ?Fp?@kL 9FY+W] m$u C8~ z\5?T$Hq"v5G#LaoުzEiN xNY1HP'D b e0_Nݗ@jxQ QUԣYP?9o3 {%vZ'K !Te?S[<Ֆg
Uc-ob`/VRnҪ=j.|07sq>ڜ q[7l ? ( D | 2 ' @\