| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Windows/Help/Windows/en-US/ |
Upload File : |
MZ @ PE L ! @ 0 Դ @ .rsrc @ @.its @ @ 0 H X | |4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 b ! F i l e V e r s i o n 1 . 0 0 . 0 0 l " F i l e D e s c r i p t i o n C o m p i l e d M i c r o s o f t H e l p 2 . 0 T i t l e B F i l e S t a m p 9 8 F 0 3 1 D 2 0 1 C A 0 4 1 F 4 J C o m p i l e r V e r s i o n 2 . 5 . 7 1 2 1 0 . 0 8 5 7 9 V C o m p i l e D a t e 2 0 0 9 - 0 7 - 1 4 T 0 1 : 0 8 : 2 9 > T o p i c C o u n t 1 1 9 0 0 0 0 0 0 0 0 0 0 0 0 A L e g a l C o p y r i g h t 2 0 0 5 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . C C C C C C C C C C C C C D V a r F i l e I n f o $ T r a n s l a t i o n ti w 1 GZITOLITLS ( X쌡^
V` x e CAOL P HH C ITSF # -Y쌡^
VY쌡^
VIFCM AOLL e IFCM AOLL> / /$FXFtiAttribute/ /$FXFtiAttribute/BTREEO/$FXFtiAttribute/DATA /$FXFtiAttribute/PROPERTYgN /$FXFtiMain/ /$FXFtiMain/BTREE+/$FXFtiMain/DATAC>/$FXFtiMain/PROPERTYN/$Index/$ATTRNAME%/$Index/$PROPBAG/$Index/$STRINGS1
/$Index/$SYSTEM+l
/$Index/$TOC/ /$Index/$TOC/$dsadmin /$Index/$TOPICATTR5p/$Index/$TOPICS+ /$Index/$URLSTR;8/$Index/$URLTBLs8/$Index/$VTAIDX=h/$Index/AssetId/ /$Index/AssetId/$BL0% /$Index/AssetId/$LEAF_COUNTS% /$Index/AssetId/$LEAVES1 /$OBJINST /assets/ 0/assets/062ec262-0571-493d-9c7c-3515425cc7cf.xml tz0/assets/078499ae-fba6-4a2c-9e90-1f06c118972b.xml n0/assets/14b544e2-9535-4079-ba47-774073dbb988.xml B0/assets/1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb.xml Gi0/assets/1be639a1-e774-4b48-af43-d13a893765c3.xml 0s0/assets/1c4dcbb0-f996-4166-81a7-c23eb3560b6b.xml #%0/assets/1d88c151-33eb-4b49-8343-cedb1a7c8acd.xml H 0/assets/20cee0f3-3cb8-48e8-8c03-a8be94e8f708.xml H0/assets/2cafa789-a640-488a-89ff-8ed398d78385.xml W60/assets/2d02574b-94ed-4b9b-bd4a-5a5f91030d84.xml
/0/assets/300bd71e-5ab4-40c2-9e43-8cfea26941d0.xml < 0/assets/32fd0ba0-fb10-4b24-be43-b87bcaa9253f.xml <"0/assets/379993bd-2380-4f6b-b4e0-7ed38e606485.xml ^u0/assets/3c461cb2-9565-4fc2-a280-421b6e88741c.xml Sc0/assets/3f8518bf-0b30-484b-9018-accc769cf3a3.xml 6V0/assets/415e69ad-c665-4165-9d2b-b8d41f95310b.xml |0/assets/434206e1-4520-483f-bfc2-2b9033767d7b.xml >0/assets/44b0a830-3f34-486e-bb63-a6d8c743159c.xml FS0/assets/553bfdb0-153a-43af-b161-93bfac2ff131.xml a0/assets/58ac6e0a-33ef-4330-bc8e-cf62978f7f54.xml z^0/assets/5d793e70-e0f9-424f-869b-cbbe52d75fd4.xml X.0/assets/5de13a27-6ca4-442e-9995-e5eae2a0d072.xml 0/assets/5f29b1fa-f94d-483e-9e3b-531d20757f73.xml 0/assets/61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34.xml )!0/assets/672be588-abcc-47fc-ac73-d05628639d4c.xml Jw0/assets/6810ead7-8293-433d-b79c-2fb3c56a9167.xml A-0/assets/6b069902-87f7-4779-928b-2da7db495088.xml n
0/assets/7155834b-a660-4bd2-a1ae-878d07d62600.xml {~0/assets/72701088-d288-418f-802c-2c6371d8e471.xml yI0/assets/7bfa448a-ebe0-4bd3-a60a-4728a2143f57.xml B0/assets/7dabf986-cead-4d5e-968a-564d0c5bdec0.xml PK0/assets/7fd8bd79-4974-42e0-a80f-25e00c7a5481.xml I0/assets/8008691d-1730-4e38-bed0-0138a99c0a9b.xml do0/assets/8157d7f8-5977-4590-9643-8e0f5525f3e9.xml S
0/assets/82790c5d-203b-4e44-8f3f-8e04b1a7c69f.xml `
0/assets/85e93458-3b02-4613-86f1-b82784910775.xml m60/assets/881864ff-6346-4047-a264-0c153823e8a6.xml #&0/assets/8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0.xml IP0/assets/a4b1413f-8027-4d81-b198-4810ed44c06d.xml <0/assets/a909b74f-4d83-4366-8937-cfb3b8261f3a.xml Ut0/assets/ae799df1-b28d-49b5-a575-8dd6d5a5e4fd.xml IQ0/assets/aeeee0c0-9294-4060-af36-dd98f183a150.xml 0/assets/b2e6531e-a311-4e44-b6fd-ab22c499d65c.xml 0~0/assets/b701ce63-d235-46d0-86ba-426ad9761a40.xml .W0/assets/b9468599-b1a4-43e7-976f-934d432a5aac.xml k0/assets/c12616cc-b6bb-4a0e-83f0-dee3ca58896e.xml p{0/assets/c27b8ce6-573b-44d6-a247-29b43e298ec9.xml k>0/assets/c6e98d67-ec0c-4342-b6ee-cee48f37060b.xml )80/assets/da258507-809b-4e7b-8a2a-ead7e03beca5.xml a0/assets/da2654f8-4279-496a-bead-fba880a69c43.xml |.0/assets/db8d1c77-d61b-45af-b3c9-8019bab5358f.xml *F0/assets/dce5a1c3-3e98-46ab-ae10-1304712b0c85.xml pf0/assets/de3c0c98-53a7-49dc-b3a4-32967cc9c1ec.xml V10/assets/df4fe212-1b7e-4ba7-bf4b-2ea273fce40c.xml 0/assets/e20a5fc2-cd8b-4ede-bbfc-3470d56f4997.xml C0/assets/e344ce02-305d-442f-8b08-bc97009a9152.xml RI0/assets/e609485d-96ce-471a-a46b-8547ca64cf87.xml 80/assets/ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e.xml S 0/assets/fd89523a-c431-43b4-884f-08e728ad7c92.xml p~ /dsadmin.h1c n /dsadmin.H1F ~} /dsadmin.H1T L= /dsadmin.H1V {Q/dsadmin_AssetId.H1K k/dsadmin_BestBet.H1K tk/dsadmin_LinkTerm.H1K _l/dsadmin_SubjectTerm.H1K Ko::DataSpace/NameList <(::DataSpace/Storage/MSCompressed/Content :2,::DataSpace/Storage/MSCompressed/ControlData T )::DataSpace/Storage/MSCompressed/SpanInfo L/::DataSpace/Storage/MSCompressed/Transform/List <_::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ i::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ResetTable lh3::Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/ [^
q^K8&CS q e U n c o m p r e s s e d M S C o m p r e s s e d FX쌡^
V LZXC HH <maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Advanced Password Replication Policy Dialog Box - Resultant Policy Tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Add</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to add an account name for which you want to determine the Password Replication Policy setting on this read-only domain controller (RODC) to the account list view.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Refresh</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to refresh the results that are displayed in the account list view.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Clear</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to clear the results that are displayed in the account list view.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Organizational Units</maml:title><maml:introduction>
<maml:para>You can use Active Directory Users and Computers to create new organizational units (OUs) and containers or manage existing OUs and containers.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=881864ff-6346-4047-a264-0c153823e8a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a New Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=7bfa448a-ebe0-4bd3-a60a-4728a2143f57"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Delete an Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=300bd71e-5ab4-40c2-9e43-8cfea26941d0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Move an Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=2cafa789-a640-488a-89ff-8ed398d78385"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Delegate Control of an Organizational Unit</maml:linkText><maml:uri href="mshelp://windows/?id=c6e98d67-ec0c-4342-b6ee-cee48f37060b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Active Directory Object Type</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Control</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>This folder, existing objects in this folder, and creation of new objects in this folder</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option if you want to delegate full control of this folder and all its existing object contents, as well as any future objects that it might contain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Only the following objects in the folder</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option if you want to delegate control of only selected types of objects in this folder. The types of objects that are available are determined by the Active Directory schema. For more information about specific object types, see Active Directory Domain Services Reference (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=80181</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=80181"></maml:uri></maml:navigationLink>).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Create selected objects in this folder </maml:ui>check box</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box to create objects of the types that are selected in the object type list.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Delete selected objects in this folder</maml:ui> check box</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box to remove objects of the types that are selected in the object type list.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delegation of Control Wizard</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Tasks to Delegate</maml:linkText><maml:uri href="mshelp://windows/?id=5de13a27-6ca4-442e-9995-e5eae2a0d072"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Object Type</maml:linkText><maml:uri href="mshelp://windows/?id=14b544e2-9535-4079-ba47-774073dbb988"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Permissions</maml:linkText><maml:uri href="mshelp://windows/?id=c27b8ce6-573b-44d6-a247-29b43e298ec9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Disable or Enable a User Account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To prevent a particular user from logging on for security reasons, you can disable user accounts rather than deleting them.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Disabling or enabling a user account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=1be639a1-e774-4b48-af43-d13a893765c3#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=1be639a1-e774-4b48-af43-d13a893765c3#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable or enable a user account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the user account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the user.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Depending on the status of the account, do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To disable the account, click <maml:ui>Disable Account</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To enable the account, click <maml:ui>Enable Account</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By creating disabled user accounts with common group memberships, you can use disabled user accounts as account templates to simplify user account creation.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138374</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138374"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable or enable a user account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsmod user <UserDN> -disabled {yes|no}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><UserDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the user object to be added. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-disabled</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the value of UF_ACCTDISABLED in userAccountControl.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{yes|no}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether the user account is disabled for logon (<maml:computerOutputInline>yes</maml:computerOutputInline>) or not (<maml:computerOutputInline>no</maml:computerOutputInline>). </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod user /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By creating disabled user accounts with common group memberships, you can use disabled user accounts as account templates to simplify user account creation.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138374</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138374"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Manage a Remote Computer</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To manage a remote computer</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the computer that you want to manage.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the computer, and then click <maml:ui>Manage</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Clicking <maml:ui>Manage</maml:ui> starts Computer Management, which you can use to administer remote computers. You must have administrative credentials on the local computer to view certain information or to modify computer properties with Computer Management.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Interface: Active Directory Users and Computers</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText><Object> Properties - Object tab</maml:linkText><maml:uri href="mshelp://windows/?id=3c461cb2-9565-4fc2-a280-421b6e88741c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>User Properties - Profile Tab</maml:linkText><maml:uri href="mshelp://windows/?id=b9468599-b1a4-43e7-976f-934d432a5aac"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>User Properties - Account Tab</maml:linkText><maml:uri href="mshelp://windows/?id=a909b74f-4d83-4366-8937-cfb3b8261f3a"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Computer Properties - Delegation tab</maml:linkText><maml:uri href="mshelp://windows/?id=8008691d-1730-4e38-bed0-0138a99c0a9b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Read-only Domain Controller Properties - Password Replication Policy Tab</maml:linkText><maml:uri href="mshelp://windows/?id=fd89523a-c431-43b4-884f-08e728ad7c92"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Advanced Password Replication Policy Dialog Box - Policy Usage Tab</maml:linkText><maml:uri href="mshelp://windows/?id=b2e6531e-a311-4e44-b6fd-ab22c499d65c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Advanced Password Replication Policy Dialog Box - Resultant Policy Tab</maml:linkText><maml:uri href="mshelp://windows/?id=062ec262-0571-493d-9c7c-3515425cc7cf"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Prepopulating Passwords</maml:linkText><maml:uri href="mshelp://windows/?id=8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>New Object - Organizational Unit Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=3f8518bf-0b30-484b-9018-accc769cf3a3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change <Domain> or <Forest> Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=da258507-809b-4e7b-8a2a-ead7e03beca5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change Domain Controllers Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=e609485d-96ce-471a-a46b-8547ca64cf87"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Raise Domain Functional Level Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=ae799df1-b28d-49b5-a575-8dd6d5a5e4fd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Delegation of Control Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change Group Scope</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Changing group scope</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=20cee0f3-3cb8-48e8-8c03-a8be94e8f708#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=20cee0f3-3cb8-48e8-8c03-a8be94e8f708#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change group scope using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the folder that contains the group for which you want to change the group scope.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>folder that contains the group</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the group, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, under <maml:ui>Group scope</maml:ui>, select the group scope.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can change group scopes only when the domain functional level is set to Windows 2000 native or higher.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Changing the scope of a group from universal to domain local can only be done on a global catalog server. An error message appears if the domain controller is not a global catalog server.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Change Group Scope (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138380</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138380"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change group scope using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsmod group <GroupDN> -scope {L|G|U}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><GroupDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished names of the group object to which the scope will be changed. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{L|G|U}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the scope of the group is set to local (<maml:computerOutputInline>L</maml:computerOutputInline>), global (<maml:computerOutputInline>G</maml:computerOutputInline>) or universal (<maml:computerOutputInline>U</maml:computerOutputInline>). If the domain functional level is still at Windows 2000 mixed, the universal scope is not supported. Also, it is not possible to convert a domain local group to a global group or a global group to a domain local group. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod group /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can change group scopes only when the domain functional level is set to Windows 2000 native or higher.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Changing the scope of a group from universal to domain local can only be done on a global catalog server. An error message appears if the domain controller is not a global catalog server.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Change Group Scope (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138380</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138380"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move an Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Moving an organizational unit</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=2cafa789-a640-488a-89ff-8ed398d78385#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=2cafa789-a640-488a-89ff-8ed398d78385#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To move an organizational unit using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the organizational unit (OU) that you want to move.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>organizational unit</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Move</maml:ui>, and then click the folder to which you want to move the OU.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Active Directory Users and Computers can only move OUs within the same domain. To move OUs between domains, use the Active Directory Migration Tool (ADMT). For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>). </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move an Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138392</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138392"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To move an organizational unit using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dsmove <OuDN> [-newparent <ParentDN>] -pwd {<Password>|*}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><OuDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the OU object to be moved. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ParentDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the new location to which you want to move the OU object. The new location is specified as the distinguished name of the new parent node.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-newparent</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets <ParentDN> value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-pwd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies to use either a password or a * to log on to a remote server. If you type <maml:userInput>*</maml:userInput>, you are prompted for a password.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Password></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Domain Administrator password.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmov /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Active Directory Users and Computers can move OUs only within the same domain. To move OUs between domains, use ADMT. For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move an Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138392</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138392"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Find Groups in Which a User is a Member</maml:title><maml:introduction>
<maml:para>There is no minimum group membership required to complete this procedure. </maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Finding a groups in which a user is a member</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=2d02574b-94ed-4b9b-bd4a-5a5f91030d84#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=2d02574b-94ed-4b9b-bd4a-5a5f91030d84#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To find groups in which a user is a member using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the user account whose group membership you want to view.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click a user account, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Member Of</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Performing this task does not require you to have administrative credentials. Therefore, as a security best practice, consider performing this task as a user without administrative credentials.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The <maml:ui>Member Of</maml:ui> tab for a user displays a list of groups in the domain in which the user's account is located. Active Directory Domain Services (AD DS) does not display groups that reside in trusted domains where the user is a member.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Find Groups in Which a User is a Member (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138382</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138382"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To find groups in which a user is a member using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<dev:code>dsget user <UserDN> -memberof</dev:code>
</maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>-memberof</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies group membership.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><UserDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the user object for which you want to display group membership. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsget user /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Performing this task does not require you to have administrative credentials. Therefore, as a security best practice, consider performing this task as a user without administrative credentials.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Find Groups in Which a User is a Member (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138382</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138382"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete an Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Deleting an organizational unit</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=300bd71e-5ab4-40c2-9e43-8cfea26941d0#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=300bd71e-5ab4-40c2-9e43-8cfea26941d0#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete an organizational unit using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the organizational unit (OU) that you want to delete.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>organizational unit</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Delete</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the selected OU contains other objects, Active Directory Users and Computers prompts you to either continue or cancel the deletion. If you continue the deletion, all objects in the OU will also be deleted.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete an Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138391</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138391"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete an organizational unit using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dsrm <OrganizationalUnitDN> [-subtree]</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><OrganizationalUnitDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the OU to be deleted. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-subtree</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that all objects that the selected OU contains must be deleted as well.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsrm /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Attempting to delete an OU containing other objects results in an error unless the <maml:computerOutputInline>-subtree</maml:computerOutputInline> option is used. With the <maml:computerOutputInline>-subtree</maml:computerOutputInline> option, <maml:computerOutputInline>dsrm</maml:computerOutputInline> deletes both the selected OU and any objects that it contains.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete an Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138391</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138391"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Groups</maml:title><maml:introduction>
<maml:para>You can use Active Directory Users and Computers to create new groups or manage existing groups. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Group Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=db8d1c77-d61b-45af-b3c9-8019bab5358f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a New Group</maml:linkText><maml:uri href="mshelp://windows/?id=df4fe212-1b7e-4ba7-bf4b-2ea273fce40c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Member to a Group</maml:linkText><maml:uri href="mshelp://windows/?id=434206e1-4520-483f-bfc2-2b9033767d7b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Convert a Group to Another Type</maml:linkText><maml:uri href="mshelp://windows/?id=72701088-d288-418f-802c-2c6371d8e471"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change Group Scope</maml:linkText><maml:uri href="mshelp://windows/?id=20cee0f3-3cb8-48e8-8c03-a8be94e8f708"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Delete a Group</maml:linkText><maml:uri href="mshelp://windows/?id=415e69ad-c665-4165-9d2b-b8d41f95310b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Find Groups in Which a User is a Member</maml:linkText><maml:uri href="mshelp://windows/?id=2d02574b-94ed-4b9b-bd4a-5a5f91030d84"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Assign User Rights to a Group in AD DS</maml:linkText><maml:uri href="mshelp://windows/?id=5d793e70-e0f9-424f-869b-cbbe52d75fd4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Copy a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To copy a user account </maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the user account that you want to copy, and then click <maml:ui>Copy</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>First name</maml:ui>, type the user's first name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Last name</maml:ui>, type the user's last name. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Modify <maml:ui>Full name</maml:ui> to add initials or reverse the order of the first and last names.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>User logon name</maml:ui>, type the user logon name, click the user principal name (UPN) suffix in the drop-down list, and then click <maml:ui>Next</maml:ui>.</maml:para>
<maml:para>If the user will use a different name to log on to computers running Windows 95, Windows 98, or Windows NT, you can change the user logon name as it appears in <maml:ui>User logon name (pre-Windows 2000)</maml:ui> to the different name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Password</maml:ui> and <maml:ui>Confirm password</maml:ui>, type the user's password, and then select the appropriate password options.</maml:para>
<maml:para>If the user account from which the new user account was copied was disabled, click <maml:ui>Account is disabled</maml:ui> to enable the new account.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you create the user account, you can edit the user account properties to enter additional user account information.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Only the most commonly used attributes, such as logon hours, workstation restrictions, and account expiration restrictions are transferred to the copied user by default.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can modify which default attributes are carried over to a newly copied user or specify additional attributes that will be copied to the new user. To do this, open the Active Directory Schema snap-in, view the desired attribute properties, and select (or clear) the <maml:ui>Attribute is copied when duplicating user</maml:ui> check box. You can modify or add only the attributes that are instances of the <maml:phrase>user</maml:phrase> class. </maml:para>
<maml:para>If the Active Directory Schema snap-in is not installed, you can install it. For more information, click <maml:ui>Start</maml:ui>, click <maml:ui>Help and Support</maml:ui>, and then search for the topic "Active Directory Schema," which contains information about how to install, secure, and view the Active Directory Schema snap-in.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Copy a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138371</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138371"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title><Object> Properties - Object tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Protect object from accidental deletion </maml:ui>check box</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to update the security descriptor of the object and, potentially, its parent to deny all administrators or users of this domain and domain controller the ability to delete this object.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>In Active Directory Users and Computers, the <maml:ui>Object</maml:ui> tab is visible only when <maml:ui>Advanced Features</maml:ui> is selected on the <maml:ui>View</maml:ui> menu. </maml:para>
</maml:alertSet>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>This setting does not provide protection against accidental deletion of a subtree that contains the protected object. Therefore, we recommend that you enable this setting for all of the protected object's containers up to the domain naming context head.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>New Object - Organizational Unit Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the name of the organizational unit (OU).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Protect container from accidental deletion</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it updates the security descriptor of the object and, potentially, its parent, which denies all administrators or users of this domain and domain controller the ability to delete this object.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>In Active Directory Users and Computers, the <maml:ui>Object</maml:ui> tab is visible only when <maml:ui>Advanced Features </maml:ui>is selected on the <maml:ui>View</maml:ui> menu. </maml:para>
</maml:alertSet>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>This setting does not provide protection against accidental deletion of a subtree that contains the protected object. Therefore, we recommend that you enable this setting for all the protected object's containers up to the domain naming context head.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Deleting a group account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=415e69ad-c665-4165-9d2b-b8d41f95310b#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=415e69ad-c665-4165-9d2b-b8d41f95310b#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a group account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the folder that contains the group that you want to delete.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>folder that contains the group</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the group, and then click <maml:ui>Delete</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Deleting a group is a permanent operation.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138381</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138381"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a group account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsrm <GroupDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><GroupDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the group object to be deleted. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsrm /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Deleting a group is a permanent operation.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138381</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138381"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Member to a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding a member to a group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=434206e1-4520-483f-bfc2-2b9033767d7b#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=434206e1-4520-483f-bfc2-2b9033767d7b#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a member to a group using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the folder that contains the group to which you want to add a member.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\folder that contains the group</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the group, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Members</maml:ui> tab, click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Enter the object names to select</maml:ui>, type the name of the user, group, or computer that you want to add to the group, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In addition to users and computers, group members can include contacts and other groups.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to add members to a group is to select the desired object and then click the <maml:ui>Adds the selected objects to a group you specify</maml:ui> toolbar icon. You can also drag a member object to a group, or right-click the object, and then click <maml:ui>Add to a group</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you administer a domain, security principals in the parent domain or other trusted domains are not visible on the <maml:ui>Member Of</maml:ui> tab in a domain user's properties. The only domain accounts that you can add or view are the present domain groups. Only domain groups in the present domain are shown, even if the member belongs to other trusted domain groups.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add a Member to a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138378</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138378"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a member to a group using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsmod group <GroupDN> -addmbr <MemberDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><GroupDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the group object to which you want to add the object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-addmbr</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets <MemberDN> value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><MemberDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the object that you want to add to the group.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod group /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In addition to users and computers, group members can include contacts and other groups.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add a Member to a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138378</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138378"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Reset a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Resetting a computer account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=44b0a830-3f34-486e-bb63-a6d8c743159c#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=44b0a830-3f34-486e-bb63-a6d8c743159c#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To reset a computer account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the computer that you want to reset.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the computer, and then click <maml:ui>Reset Account</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Reset a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138388</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138388"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To reset a computer account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod computer <ComputerDN> -reset</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><ComputerDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of one or more computer objects that you want to reset.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-reset</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Resets the specified computer object.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod computer /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Reset a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138388</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138388"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Deleting a user account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=553bfdb0-153a-43af-b161-93bfac2ff131#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=553bfdb0-153a-43af-b161-93bfac2ff131#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a user account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the user account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the user account, and then click <maml:ui>Delete</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After a user account has been deleted, all permissions and memberships that are associated with that user account are permanently deleted. Because the security identifier (SID) for each account is unique, a new user account with the same name as a previously deleted user account does not automatically assume the permissions and memberships of the previously deleted account. If you want to duplicate a deleted user account, you must recreate all permissions and memberships manually.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138376</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138376"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a user account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsrm <ObjectDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><ObjectDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the user object to be deleted. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsrm /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After a user account has been deleted, all permissions and memberships that are associated with that user account are permanently deleted. Because the SID for each account is unique, a new user account with the same name as a previously deleted user account does not automatically assume the permissions and memberships of the previously deleted account. If you want to duplicate a deleted user account, you must recreate all permissions and memberships manually.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138376</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138376"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Domains</maml:title><maml:introduction>
<maml:para>Domains are units of replication. All the domain controllers in a particular domain can receive changes and replicate those changes to all the other domain controllers in the domain. Each domain in Active Directory Domain Services (AD DS) is identified by a Domain Name System (DNS) domain name. Each domain requires one or more domain controllers. If your network requires more than one domain, you can easily create multiple domains.</maml:para>
<maml:para>One or more domains that share a common schema and global catalog are referred to as a forest. The first domain in a forest is referred to as the forest root domain. If multiple domains in the forest have contiguous DNS domain names, the structure is referred to as a domain tree.</maml:para>
<maml:para>A single domain can span multiple physical locations or sites and contain millions of objects. Site structure and domain structure are separate and flexible. A single domain can span multiple geographical sites, and a single site can include users and computers that belong to multiple domains. </maml:para>
<maml:para>A domain provides several benefits:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You can organize objects.</maml:para>
<maml:para>You do not have to create separate domains merely to reflect your company's organization of divisions and departments. Within a domain, you can use organizational units (OUs) for this purpose. Using OUs helps you manage the accounts and resources in the domain. You can then assign Group Policy settings and place users, groups, and computers into the OUs. Using a single domain greatly simplifies administrative overhead. For more information, see <maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can publish resources and information about domain objects. </maml:para>
<maml:para>A domain stores information only for objects that are located in that domain. Therefore, by creating multiple domains you are partitioning or segmenting the directory to better serve a disparate user base. When you use multiple domains, you can scale AD DS to accommodate your administrative and directory publishing requirements.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Delegating authority eliminates the need for a number of administrators with broad administrative authority. </maml:para>
<maml:para>By using delegated authority in conjunction with Group Policy objects and group memberships, you can assign an administrator rights and permissions to manage objects in an entire domain or in one or more OUs within the domain. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Security policies and settings (such as user rights and password policies) do not cross from one domain to another. </maml:para>
<maml:para>Each domain has its own security policies and trust relationships with other domains. However, the forest is the final security boundary.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Each domain stores only the information about the objects that are located in that domain. </maml:para>
<maml:para>By partitioning the directory this way, AD DS can scale to very large numbers of objects.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains</maml:linkText><maml:uri href="mshelp://windows/?id=85e93458-3b02-4613-86f1-b82784910775"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Assign User Rights to a Group in AD DS</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To assign user rights to a group in Active Directory Domain Services</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Group Policy Management, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>gpmc.msc</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click <maml:ui>Default Domain Controllers Policy</maml:ui>, and then click <maml:ui>Edit</maml:ui>. </maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Domains\<maml:replaceable>Current Domain Name</maml:replaceable>\Group Policy objects\Default Domain Controllers Policy</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>User Rights Assignment</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Windows Settings\Security Settings\Local Policies\User Rights Assignment</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, double-click the user right that you want to assign.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Add User or Group</maml:ui>.</maml:para>
<maml:para>If the button appears dimmed, select the <maml:ui>Define these policy settings</maml:ui> check box.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the name of the group to which you want to assign this right.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To perform this procedure, you must first install Group Policy Management as a feature in Server Manager.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Assign User Rights to a Group in AD DS (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138383</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138383"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Tasks to Delegate</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Delegate the following common tasks</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The following are common tasks that you can select to delegate control of them:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Create, delete, and manage user accounts</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Reset user passwords and force password change at next logon</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Read all user information</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Modify the membership of a group</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Join a computer to a domain</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Manage Group Policy links</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Generate Resultant Set of Policy (Planning)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Generate Resultant Set of Policy (Logging)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Create, delete, and manage inetOrgPerson accounts</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Reset inetOrgPerson passwords and force password change at next logon</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Read all inetOrgPerson information</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Create a custom task to delegate</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to create a custom task if the task that you want to delegate does not appear in the list of common tasks.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Active Directory Users and Computers</maml:title><maml:introduction>
<maml:para>Active Directory® Users and Computers is a Microsoft Management Console (MMC) snap-in that you can use to administer and publish information in the directory.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains</maml:linkText><maml:uri href="mshelp://windows/?id=85e93458-3b02-4613-86f1-b82784910775"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Troubleshooting Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Resources for Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=e344ce02-305d-442f-8b08-bc97009a9152"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting Active Directory Users and Computers</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>What problem are you having?</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Cannot add or remove a domain</maml:linkText><maml:uri href="mshelp://windows/?id=61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34#BKMK_1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Changes to group memberships are not taking effect</maml:linkText><maml:uri href="mshelp://windows/?id=61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34#BKMK_2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Receiving "Domain not found," "Server not available," or "RPC server is unavailable" error messages</maml:linkText><maml:uri href="mshelp://windows/?id=61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34#BKMK_3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_1">
<maml:title>Cannot add or remove a domain.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The domain naming master is not available. This may be caused by a network connectivity problem or an Active Directory Installation Wizard failure. It may also be caused by a failure of the computer holding the domain naming operations master role (also known as flexible single master operations or FSMO). Or, the user who is attempting to add or remove the domain does not have the necessary administrative credentials.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Identify the computer holding the domain naming master role by using the command <maml:computerOutputInline>netdom query fsmo</maml:computerOutputInline>, and then repair or replace the domain naming master computer. It may be necessary to seize the domain naming master role. Or, resolve the network connectivity problem. If this does not help solve the issue, see article Q223787 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=4441</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=4441"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_2">
<maml:title>Changes to group memberships are not taking effect.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The infrastructure operations master is not available. This may be caused by a network connectivity problem. It may also be caused by a failure of the computer holding the infrastructure master role. Or, the user who is attempting to change group membership does not have the necessary administrative credentials.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Identify the computer holding the infrastructure master role by using the command <maml:computerOutputInline>netdom query fsmo</maml:computerOutputInline>, and then repair or replace the computer holding the infrastructure master role. It may be necessary to seize the infrastructure master role. Or, resolve the network connectivity problem. If this does not help solve the issue, see article Q223787 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=4441</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=4441"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_3">
<maml:title>Receiving "Domain not found," "Server not available," or "RPC server is unavailable" error messages.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> Name registration or name resolution problem.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that Domain Name System (DNS) is available and functioning correctly. Run the <maml:computerOutputInline>Netdiag /debug</maml:computerOutputInline> command on the server in question. This will evaluate the registration of NetBIOS, DNS, and services. If this does not help solve the issue, see article Q265706 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=4441</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=4441"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move a User Account</maml:title><maml:introduction><maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para></maml:introduction><maml:content><maml:sections><maml:section><maml:title>Moving a user account</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=672be588-abcc-47fc-ac73-d05628639d4c#BKMK_winui"></maml:uri></maml:navigationLink></maml:para></maml:listItem><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=672be588-abcc-47fc-ac73-d05628639d4c#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction><maml:sections><maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction><maml:procedure><maml:title>To move a user account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para><maml:para><maml:phrase>Where? </maml:phrase></maml:para><maml:list class="unordered"><maml:listItem><maml:para>Active Directory Users and Computers\domain node\Users</maml:para></maml:listItem></maml:list><maml:para>Or, click the folder that contains the user account.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the details pane, right-click the user that you want to move, and then click <maml:ui>Move</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>In the <maml:ui>Move</maml:ui> dialog box, click the folder to which you want to move the user account.</maml:para></maml:section></maml:sections></maml:step></maml:procedure></maml:introduction></maml:section><maml:section><maml:title>Additional considerations</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para></maml:listItem><maml:listItem><maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para></maml:listItem><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138372"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem></maml:list><maml:para>You cannot use Active Directory Users and Computers to move user accounts between domains. To move a user account between domains, use the Active Directory Migration Tool (ADMT), one of the Active Directory support tools. For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para></maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section><maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction><maml:procedure><maml:title>To move a user account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para></maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title><maml:para>Type the following command, and then press ENTER: </maml:para><dev:code>dsmove <UserDN> [-newparent<ParentDN>]</dev:code></maml:section></maml:sections></maml:step></maml:procedure><maml:table>
<maml:tableHeader><maml:row><maml:entry><maml:para>Parameter</maml:para></maml:entry><maml:entry><maml:para>Description</maml:para></maml:entry></maml:row></maml:tableHeader><maml:row><maml:entry><maml:para><UserDN></maml:para></maml:entry><maml:entry><maml:para>Specifies the distinguished name of the user object to be added. </maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para>-newparent</maml:para></maml:entry><maml:entry><maml:para>Sets the <ParentDN> value.</maml:para></maml:entry></maml:row><maml:row><maml:entry><maml:para><ParentDN></maml:para></maml:entry><maml:entry><maml:para>Specifies the new location to which you want to move the user object. The new location is specified as the distinguished name of the new parent node.</maml:para></maml:entry></maml:row></maml:table><maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following, and then press ENTER:</maml:para><dev:code>dsmove /? </dev:code></maml:introduction></maml:section><maml:section><maml:title>Additional considerations</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para></maml:listItem><maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Move a User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138372"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem></maml:list></maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:section></maml:sections></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Creating a new computer account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=6810ead7-8293-433d-b79c-2fb3c56a9167#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=6810ead7-8293-433d-b79c-2fb3c56a9167#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new computer account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, right-click the folder in which you want to add the computer.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Point to <maml:ui>New</maml:ui>, and then click <maml:ui>Computer</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the computer name.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, members of the Account Operators group can create computer accounts in the <maml:ui>Computers</maml:ui> container and in new organizational units (OUs). </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, Authenticated Users in a domain are assigned the <maml:phrase>Add workstations to a domain user right,</maml:phrase> and they can create up to 10 computer accounts in the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>There are two additional ways to give a user or group permission to add a computer to the domain: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Use a Group Policy object to assign the <maml:phrase>Add Computer User</maml:phrase> permission</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>On the OU, assign the user or group the <maml:phrase>Create Computer Objects</maml:phrase> permission</maml:para>
</maml:listItem>
</maml:list>
</maml:listItem>
<maml:listItem>
<maml:para>If the computer using the account that you are creating is a pre–Windows 2000 computer, select the <maml:ui>Assign this computer account as a pre–Windows 2000 computer</maml:ui> check box.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138384</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138384"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new computer account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsadd computer <ComputerDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><ComputerDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the computer that you want to add. The distinguished name specifies the directory location.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsadd computer /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, members of the Account Operators group can create computer accounts in the <maml:ui>Computers</maml:ui> container and in new OUs. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, Authenticated Users in a domain are assigned the <maml:phrase>Add workstations to a domain user right</maml:phrase>, and they can create up to 10 computer accounts in the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>There are two additional ways to give a user or group permission to add a computer to the domain: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Use a Group Policy object to assign the <maml:phrase>Add Computer User</maml:phrase> permission.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>On the OU, assign the user or group the <maml:phrase>Create Computer Objects</maml:phrase> permission.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138384</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138384"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Reset a User Password</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Resetting a user password</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=6b069902-87f7-4779-928b-2da7db495088#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=6b069902-87f7-4779-928b-2da7db495088#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To reset a user password using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the user account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the user whose password you want to reset, and then click <maml:ui>Reset Password</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type and then confirm the password.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If you want to require the user to change this password at the next logon process, select the <maml:ui>User must change password at next logon</maml:ui> check box.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Services that are authenticated with a user account must be reset if the password for the service's user account is changed. </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Reset a User Password (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138370</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138370"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To reset a user password by using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsmod user <UserDN> -pwd <NewPassword> -mustchpwd {yes|no}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><UserDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the user for which the password will be reset.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-pwd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the <NewPassword>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><NewPassword></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the password that will replace the current user password.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-mustchpwd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the pwdExpired flag.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{yes|no}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the value of the pwdExpired flag.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod user /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If a password is not assigned, the first time that the user tries to log on (using a blank password), a logon message appears that says "You are required to change your password at first logon." After the user changes the password, the logon process continues. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Services that are authenticated with a user account must be reset if the password for the service's user account is changed. </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Reset a User Password (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138370</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138370"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change a User's Primary Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To change a user's primary group </maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the user account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the user that you want to change, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Member Of</maml:ui> tab, click the group that you want to set as the user's primary group, and then click <maml:ui>Set Primary Group</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of either the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The user's primary group applies only to users who log on to the network through Services for Macintosh or who run Portable Operating System Interface for UNIX (POSIX)–compliant applications. Unless you are using these services, there is no need to change the primary group from Domain Users, which is the default value.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Setting the user's primary group membership to a value other than Domain Users may adversely affect performance because all users in the domain are members of Domain Users. If the user's primary group is set to another group, it may cause the group membership to exceed the supported maximum number of members.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Change a User's Primary Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138375</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138375"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Convert a Group to Another Type</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Converting a group to another group type</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=72701088-d288-418f-802c-2c6371d8e471#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=72701088-d288-418f-802c-2c6371d8e471#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To convert a group to another group type using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the folder that contains the group that you want to convert to another group type.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>folder that contains the group</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the group, and then click <maml:ui>Properties</maml:ui>. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, under <maml:ui>Group</maml:ui> <maml:ui>type</maml:ui>, click the group type.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To convert a group, the domain functional level must be set to Windows 2000 native or higher. Groups cannot be converted when the domain functional level is set to Windows 2000 mixed.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Convert a Group to Another Type (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138379</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138379"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To convert a group to another group type using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsmod group <GroupDN> -secgrp {yes|no}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><GroupDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the group object for which you want to change the group type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-secgrp</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the group type value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{yes|no}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the group type is set to security group (<maml:computerOutputInline>yes</maml:computerOutputInline>) or distribution group (<maml:computerOutputInline>no</maml:computerOutputInline>).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod group /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To convert a group, the domain functional level must be set to Windows 2000 native or higher. Groups cannot be converted when the domain functional level is set to Windows 2000 mixed.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Convert a Group to Another Type (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138379</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138379"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Creating a new organizational unit</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=7bfa448a-ebe0-4bd3-a60a-4728a2143f57#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=7bfa448a-ebe0-4bd3-a60a-4728a2143f57#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new organizational unit using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the domain name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Point to <maml:ui>New</maml:ui>, and then click <maml:ui>Organizational Unit</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the name of the organizational unit (OU).</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To add an OU, you can also click the domain or folder in which you want to add the OU, and then click the <maml:ui>Create a new organizational unit in the current container</maml:ui> icon on the toolbar.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138390</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138390"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new organizational unit using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dsadd ou <OrganizationalUnitDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><OrganizationalUnitDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the OU to be added. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsadd ou /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Organizational Unit (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138390</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138390"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Computers</maml:title><maml:introduction>
<maml:para>You can use Active Directory Users and Computers to create new computer accounts or manage existing computer accounts. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Computer Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=a4b1413f-8027-4d81-b198-4810ed44c06d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a New Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=6810ead7-8293-433d-b79c-2fb3c56a9167"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Computer Account to a Group</maml:linkText><maml:uri href="mshelp://windows/?id=de3c0c98-53a7-49dc-b3a4-32967cc9c1ec"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Delete a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=82790c5d-203b-4e44-8f3f-8e04b1a7c69f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Manage a Remote Computer</maml:linkText><maml:uri href="mshelp://windows/?id=1c4dcbb0-f996-4166-81a7-c23eb3560b6b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Move a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=b701ce63-d235-46d0-86ba-426ad9761a40"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Reset a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=44b0a830-3f34-486e-bb63-a6d8c743159c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Disable or Enable a Computer Account</maml:linkText><maml:uri href="mshelp://windows/?id=da2654f8-4279-496a-bead-fba880a69c43"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Manage the Domain Using a Different Domain Controller</maml:title><maml:introduction>
<maml:para>There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To manage the domain using a different domain controller</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click <maml:ui>Active Directory Users and Computers</maml:ui>, and then click <maml:ui>Change Domain Controller</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click a domain controller in the list.</maml:para>
<maml:para>Or, click the <maml:ui><Type a Domain Controller name or an IP Address here></maml:ui> field, and then type the name of a domain controller.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Performing this task does not require you to have administrative credentials. Therefore, as a security best practice, consider performing this task as a user without administrative credentials. However, you must have the appropriate administrative credentials to manage the domain that you select.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, domain controllers are configured in the Domain Controllers organizational unit (OU) when they are first created.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you select the <maml:ui>Save this setting for the current console</maml:ui> check box, Active Directory Users and Computers attempts to connect to the domain controller that you specify each time that you open Active Directory Users and Computers.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains</maml:linkText><maml:uri href="mshelp://windows/?id=85e93458-3b02-4613-86f1-b82784910775"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Computer Properties - Delegation tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Do not trust this computer for delegation</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that no delegation of any services is allowed on this computer.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Trust this computer for delegation to any service (Kerberos only)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the delegation of services on this computer is allowed only with the Kerberos protocol.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>The Kerberos version 5 (V5) authentication protocol is the primary security protocol for authentication in a domain. It verifies the identity of the user and the system.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Trust this computer for delegation to specified services only</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that only certain selected services are allowed to be delegated on this computer. If the <maml:ui>Use Kerberos only</maml:ui> option is selected, delegation is allowed only with the Kerberos protocol. If <maml:ui>Use any authentication protocol</maml:ui> option is selected, delegation is allowed with any available authentication protocol.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Expanded </maml:ui>check box</maml:para>
</maml:entry>
<maml:entry>
<maml:para>When option is selected, it lists all service principle names (SPN) that are associated with the service that is selected for delegation.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Add</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to select services to which delegated credentials can be presented.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Remove</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to remove services from the list of services to which delegated credentials can be presented.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Users</maml:title><maml:introduction>
<maml:para>You can use Active Directory Users and Computers to create new user accounts or manage existing user accounts. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding User Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a New User Account</maml:linkText><maml:uri href="mshelp://windows/?id=c12616cc-b6bb-4a0e-83f0-dee3ca58896e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Reset a User Password</maml:linkText><maml:uri href="mshelp://windows/?id=6b069902-87f7-4779-928b-2da7db495088"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Copy a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=379993bd-2380-4f6b-b4e0-7ed38e606485"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Move a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=672be588-abcc-47fc-ac73-d05628639d4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Set Logon Hours</maml:linkText><maml:uri href="mshelp://windows/?id=dce5a1c3-3e98-46ab-ae10-1304712b0c85"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Disable or Enable a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=1be639a1-e774-4b48-af43-d13a893765c3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Map a Certificate to a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=e20a5fc2-cd8b-4ede-bbfc-3470d56f4997"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change a User's Primary Group</maml:linkText><maml:uri href="mshelp://windows/?id=7155834b-a660-4bd2-a1ae-878d07d62600"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Delete a User Account</maml:linkText><maml:uri href="mshelp://windows/?id=553bfdb0-153a-43af-b161-93bfac2ff131"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delete a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Deleting a computer account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=82790c5d-203b-4e44-8f3f-8e04b1a7c69f#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=82790c5d-203b-4e44-8f3f-8e04b1a7c69f#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a computer account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder in which the computer is located.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the computer, and then click <maml:ui>Delete</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc.</maml:userInput></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can also delete a computer account by disjoining the computer from the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After a computer account is deleted, all permissions and memberships that are associated with that computer account are permanently deleted. Because the security identifier (SID) for each account is unique, a new computer account with the same name as a previously deleted computer account does not inherit the permissions and memberships of the previously deleted account. To duplicate a deleted computer account, you must recreate all permissions and memberships manually.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138386</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138386"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To delete a computer account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dsrm computer <ComputerDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><ComputerDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the computer that you want to delete. The distinguished name specifies the directory location.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsrm computer /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can also delete a computer account by disjoining the computer from the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After a computer account is deleted, all permissions and memberships that are associated with that computer account are permanently deleted. Because the SID for each account is unique, a new computer account with the same name as a previously deleted computer account does not inherit the permissions and memberships of the previously deleted account. To duplicate a deleted computer account, you must recreate all permissions and memberships manually.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Delete a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138386</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138386"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Domains</maml:title><maml:introduction>
<maml:para>You can use Active Directory Users and Computers to connect to a specific domain or domain controller and view or manage the directory information for that domain or domain controller.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Domains</maml:linkText><maml:uri href="mshelp://windows/?id=58ac6e0a-33ef-4330-bc8e-cf62978f7f54"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Manage a Different Domain</maml:linkText><maml:uri href="mshelp://windows/?id=aeeee0c0-9294-4060-af36-dd98f183a150"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Manage the Domain Using a Different Domain Controller</maml:linkText><maml:uri href="mshelp://windows/?id=7fd8bd79-4974-42e0-a80f-25e00c7a5481"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Organizational Units</maml:title><maml:introduction>
<maml:para>A particularly useful type of directory object that is contained within domains is the organizational unit (OU). OUs are Active Directory containers into which you can place users, groups, computers, and other OUs. An OU cannot contain objects from other domains.</maml:para>
<maml:para>An OU is the smallest scope or unit to which you can assign Group Policy settings or delegate administrative authority. Using OUs, you can create containers within a domain that represent the hierarchical, logical structures in your organization. You can then manage the configuration and use of accounts and resources based on your organizational model.</maml:para>
<maml:para>OUs can contain other OUs. You can extend a hierarchy of OUs as necessary to model your organization's hierarchy within a domain. Using OUs helps you minimize the number of domains that are required for your network.</maml:para>
<maml:para>You can use OUs to create an administrative model that you can scale to any size. A user can have administrative authority for all OUs in a domain or for a single OU. An administrator of an OU does not have to have administrative authority for any other OUs in the domain.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Prepopulating Passwords</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Credential Cashing</maml:title><maml:introduction>
<maml:para>Credential caching is the storage of user or computer credentials. By default, a read-only domain controller (RODC) does not store user credentials or computer credentials except for its own computer account and a special krbtgt account for that RODC. You must explicitly allow any other credentials to be cached on that RODC. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Password Replication Policy</maml:title><maml:introduction>
<maml:para>When you initially deploy an RODC, you must configure the Password Replication Policy (PRP) on the writable domain controller that will be its replication partner. The PRP acts as an access control list (ACL). It determines whether an RODC should be permitted to cache credentials for an account. After the RODC receives a user or computer logon request, it attempts to replicate the credentials for that account from a writable Windows Server 2008 or Windows Server 2008 R2 domain controller. The writable domain controller refers to the PRP to determine if the credentials for the account should be cached. If the PRP allows the account to be cached, the writable Windows Server 2008 domain controller replicates the credentials for that account to the RODC and the RODC caches the credentials. During subsequent logons for that account, the RODC can authenticate the account by referring to the credentials that it has cached. The RODC does not have to contact the writable domain controller. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>PRP Allowed and Denied Lists</maml:title><maml:introduction>
<maml:para>Two built-in groups are present in Windows Server 2008 and Windows Server 2008 R2 Active Directory domains to support RODC operations. These built-in groups are the Domain RODC Password Replication Allowed Group and the Domain RODC Password Replication Denied Group. These groups help implement a default Allowed List and a Denied List for the RODC Password Replication Policy.</maml:para>
<maml:para>By default, the Domain RODC Password Replication Denied Group contains the following members:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Enterprise Domain Controllers</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Enterprise Read-Only Domain Controllers</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Group Policy Creator Owners</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Domain Admins</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Cert Publishers</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Enterprise Admins</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Schema Admins</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Domain-wide krbtgt account</maml:para>
</maml:listItem>
</maml:list>
<maml:para>By default, the <maml:phrase>Denied List</maml:phrase> attribute contains the following security principals, all of which are built-in groups:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Domain RODC Password Replication Denied Group</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Account Operators</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Server Operators</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Backup Operators</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Administrators</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section>
<maml:title>Clearing cached passwords</maml:title><maml:introduction>
<maml:para>There is no mechanism to clear the cached password for a given user on an RODC. If you want to clear a password that is stored on an RODC, an administrator should reset the password in the hub site. This way, the password that is cached in the branch will no longer be valid for accessing any resources in the hub site or other branches. If an RODC is compromised, reset the passwords that are currently cached and then rebuild the RODC.</maml:para>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Computer Accounts</maml:title><maml:introduction>
<maml:para>Every computer running Windows NT, Windows 2000, Windows XP, or Windows Vista or server running Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2 that joins a domain has a computer account. Like user accounts, computer accounts provide a means for authenticating and auditing access to the network and to domain resources. Each computer account must be unique.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Computers running Windows 95 and Windows 98 do not have advanced security features. Therefore, they are not assigned computer accounts.</maml:para>
</maml:alertSet>
<maml:para>You can add, disable, reset, and delete user and computer accounts with the Active Directory Users and Computers snap-in. You can also create a computer account when you join a computer to a domain. </maml:para>
<maml:para>When the domain functional level is set to Windows Server 2008 or Windows Server 2008 R2, a <maml:phrase>lastLogonTimestamp</maml:phrase> attribute is used to track the last logon time of a user or computer account. This attribute is replicated within the domain, and it can provide you with important information regarding the history of a user or computer.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Understanding computer names</maml:title><maml:introduction>
<maml:para>Each computer account that is created in Active Directory Domain Services (AD DS) has a relative distinguished name, a pre–Windows 2000 computer name (Security Accounts Manager (SAM) account name), a primary Domain Name System (DNS) suffix, a DNS host name, and a service principal name (SPN). The administrator enters the computer name when he or she creates the computer account. This computer name is used as the Lightweight Directory Access Protocol (LDAP) relative distinguished name.</maml:para>
<maml:para>AD DS suggests the pre–Windows 2000 name using the first 15 bytes of the relative distinguished name. The administrator can change the pre–Windows 2000 name at any time.</maml:para>
<maml:para>The DNS name for a host is called a full computer name. This is a DNS fully qualified domain name (FQDN). The full computer name is a concatenation of the computer name (the first 15 bytes of the SAM account name of the computer account without the "$" character) and the primary DNS suffix (the DNS domain name of the domain in which the computer account exists).</maml:para>
<maml:para>By default, the primary DNS suffix portion of the FQDN for a computer must be the same as the name of the Active Directory domain where the computer is located. To allow different primary DNS suffixes, a domain administrator may build a restricted list of allowed suffixes by creating the <maml:phrase>msDS-AllowedDNSSuffixes</maml:phrase> attribute in the domain object container. The domain administrator creates and manages this attribute with Active Directory Service Interfaces (ADSI) or LDAP.</maml:para>
<maml:para>The SPN is a multivalue attribute. It is usually built from the DNS name of the host. The SPN is used in the process of mutual authentication between the client and the server hosting a particular service. The client finds a computer account based on the SPN of the service to which it is trying to connect. Members of the Domain Admins group can modify the SPN.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Properties - Account Tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Control</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>User logon name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The text box on the left provides a space for you to type the account name for this user. This is the name that the user will use to log on to an Active Directory domain.</maml:para>
<maml:para>The drop-down list on the right lists the available user principal name (UPN) suffixes that may be used to create the user logon name. The list contains the full Domain Name System (DNS) name of the current domain, the full DNS name of the root domain of the current forest, and any alternative UPN suffixes that are created with Active Directory Domains and Trusts.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>User logon name (pre–Windows 2000)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The read-only text box on the left displays the domain name that is used by computers running pre–Windows 2000 operating systems. This name will also be used in the pre–Windows 2000 syntax for <maml:replaceable>domainname</maml:replaceable>\<maml:replaceable>username</maml:replaceable> user logon.</maml:para>
<maml:para>The text box on the right provides a space for you to type the user's pre–Windows 2000 logon name. This user name is in the pre–Windows 2000 format, which is <maml:replaceable>domainname</maml:replaceable>\<maml:replaceable>username</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Logon Hours</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to change the hours that this selected object can log on to the domain. By default, domain logon is allowed 24 hours a day, 7 days a week. Note that this control does not affect the user's ability to log on locally to a computer using a local computer account instead of a domain account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Log On To</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to specify workstation logon restrictions that will allow this user to log on only to specified computers in the domain. By default, a user is able to log on at any workstation computer that is joined to the domain. Note that this control does not affect the user's ability to log on locally to a computer using a local computer account instead of a domain account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Unlock account</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allows you to unlock user accounts that become locked because of too many failed logon attempts.</maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>When the current domain controller indicates the selected user account as "not locked," this control is enabled only if the domain functional level is set to Windows Server 2008 or Windows Server 2008 R2. In other words, only Windows Server 2008 and Windows Server 2008 R2 domain controllers allow you to "force unlock" user accounts. This feature is particularly useful when user accounts get locked on Read Only Domain Controllers (RODCs) and the lockout information is not replicating to other domain controllers. Note, however, that the unlock operation can be performed only on a writable domain controller. </maml:alert><maml:alert>When the current domain controller indicates the selected user account as "locked," the check box text reads <maml:ui>Unlock account. This account is currently locked out on this Active Directory Domain Controller</maml:ui>. </maml:alert></maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Account options</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The following are the Active Directory user account options:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:ui>User must change password at next logon </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>User cannot change password </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Password never expires </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Store password using reversible encryption </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Account is disabled </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Smart card is required for interactive logon </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Account is sensitive and cannot be delegated </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>User Kerberos DES encryption types for this account </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>This account supports Kerberos AES 128 bit encryption </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>This account supports Kerberos AES 256 bit encryption </maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Do not require Kerberos preauthentication </maml:ui></maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>The Kerberos AES encryption options (both the 128-bit option and the 256-bit option) are available only when the domain functional level is set to Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003. Advanced Encryption Standard (AES) is a new encryption algorithm that has been standardized by the National Institute of Standards and Technology (NIST). It is expected to be widely used in the next several years. For more information about Kerberos authentication, see Kerberos Explained (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=85494</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=85494"></maml:uri></maml:navigationLink>).</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Account expires</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the account expiration policy for this user. You can select between the following options:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Use <maml:ui>Never</maml:ui> to specify that the selected account will never expire. This option is the default for new users.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Select <maml:ui>End of</maml:ui>, and then select a date if you want to have the user's account expire on a specified date.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Raise Domain Functional Level Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Domain name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the selected domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Current domain functional level</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the current setting of the domain functional level. </maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>After you set this option to a certain value, you cannot roll back or lower the domain functional level, with one exception: when you raise the domain functional level to Windows Server 2008 R2 and if the forest functional level is Windows Server 2008 or lower, you have the option of rolling the domain functional level back to Windows Server 2008. You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.</maml:para>
</maml:alertSet>
<maml:para>The functional level of a domain or forest defines only the set of Windows operating systems that can run on domain controllers and the set of available features. It does not define the client operating systems that are supported in the forest.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Manage a Different Domain</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To manage a different domain</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click <maml:ui>Active Directory Users and Computers</maml:ui>, and then click <maml:ui>Change Domain</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the domain name.</maml:para>
<maml:para>Or, click <maml:ui>Browse</maml:ui>, and then select a domain from the list.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you select the <maml:ui>Save this domain setting for the current console</maml:ui> check box, Active Directory Users and Computers attempts to connect to the domain that you specify in the <maml:ui>Domain</maml:ui> field each time that you open Active Directory Users and Computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The domain name includes the names of all the domain's parent domains. For example, the domain "sales" can have the full name sales.contoso.com.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Domains</maml:linkText><maml:uri href="mshelp://windows/?id=85e93458-3b02-4613-86f1-b82784910775"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Advanced Password Replication Policy Dialog Box - Policy Usage Tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Display users and computers that meet the following criteria </maml:ui>pull-down menu</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The following are the criteria that accounts on this read-only domain controller (RODC) can meet:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:ui>Accounts whose passwords are stored on this Read-only Domain Controller</maml:ui></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Accounts that have been authenticated to this Read-only Domain Controller</maml:ui></maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Periodically, you should review whose accounts have been authenticated to an RODC. This information can help you plan updates that you intend to make to the existing Password Replication Policy. For example, look at which user and computer accounts have authenticated to an RODC so that you can add those accounts to the Allowed List.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Users and computers</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays the list of accounts that meet the criteria selected in the previous pull-down menu. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Objects retrieved</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays the number of listed accounts that meet the criteria selected in the previous pull-down menu. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Export</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to export the generated account list to another location.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Prepopulate Passwords</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to prepopulate the password of any account for which password caching is allowed on this RODC.</maml:para><maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Prepopulating Passwords</maml:linkText><maml:uri href="mshelp://windows/?id=8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Move a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To move a computer account</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the computer that you want to move.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the computer, and then click <maml:ui>Move</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Move</maml:ui> dialog box, click the domain node.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the folder to which you want to move the computer, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You cannot use Active Directory Users and Computers to move computer accounts between domains. To move a computer account between domains, use the Active Directory Migration Tool (ADMT), one of the Active Directory support tools. For more information, see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Members of the Account Operators group can move computer accounts to organizational units (OUs) but not to default containers, such as the Builtin or Computers containers. However, Account Operators cannot move computer accounts into the Domain Controllers OU, but they can move computer accounts from the Domain Controllers OU.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a Move a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138387</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138387"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Properties - Profile Tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Profile path</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the profile path, for example, \\servername\sharefolder\user name.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Logon script</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the location of the logon script.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Local path</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the home folder is located on a local path. In the space provided, type the path location.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Connect</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to choose a network path to connect to a home folder. You can select and configure the network path as follows:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Click the arrow in the drop-down list, and then select a drive letter.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In the <maml:ui>To</maml:ui> box, you can specify that the home folder is located on a network. To specify a network path for the home folder, you must first create the shared resource and set permissions that allow the user access. You can do this using shared folders on another computer.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New User Account</maml:title><maml:introduction>
<maml:para>To manage domain users, create user accounts in Active Directory Domain Services (AD DS). In contrast, to manage users that are specific to one computer, create local user accounts. For more information, see Create a local user account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138393</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138393"></maml:uri></maml:navigationLink>).</maml:para>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Creating a new user account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=c12616cc-b6bb-4a0e-83f0-dee3ca58896e#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=c12616cc-b6bb-4a0e-83f0-dee3ca58896e#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new user account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the folder in which you want to add a user account.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>folder</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Point to <maml:ui>New</maml:ui>, and then click <maml:ui>User</maml:ui>.</maml:para>
<maml:para>For interoperability with other directory services, you can click <maml:ui>InetOrgPerson</maml:ui> instead. For more information about <maml:phrase>InetOrgPerson</maml:phrase>, see <maml:navigationLink><maml:linkText>Understanding User Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>First name</maml:ui>, type the user's first name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Initials</maml:ui>, type the user's initials.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Last name</maml:ui>, type the user's last name. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Modify <maml:ui>Full name</maml:ui> to add initials or reverse the order of first and last names.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>User logon name</maml:ui>, type the user logon name, click the user principal name (UPN) suffix in the drop-down list, and then click <maml:ui>Next</maml:ui>.</maml:para>
<maml:para>If the user will use a different name to log on to computers running Microsoft® Windows® 95, Windows 98, or Windows NT® operating systems, you can change the user logon name as it appears in <maml:ui>User logon name (pre-Windows 2000)</maml:ui> to the different name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Password</maml:ui> and <maml:ui>Confirm password</maml:ui>, type the user's password, and then select the appropriate password options.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:ui>dsa.msc</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A new user account with the same name as a previously deleted user account does not automatically assume the permissions and group memberships of the previously deleted account because the security identifier (SID) for each account is unique. If you want to duplicate a deleted user account, you must recreate all permissions and memberships manually.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you create a new user account, the <maml:phrase>full name</maml:phrase> attribute is created in the <maml:phrase>FirstNameLastName</maml:phrase> format by default. The <maml:phrase>full name</maml:phrase> attribute also governs the display name format that is shown in the global address list. You can change the display name format by using ADSI Edit. If you change the display name format, the full name format will also change. For more information, see article 250455 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=131264</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=131264"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell™. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138369</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138369"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new user account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsadd user <UserDN> [-samid<SAMName>] -pwd {<Password>|*}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><UserDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the user object to be added. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-samid</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets <SAMName> value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><SAMName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Security Accounts Manager (SAM) name as the unique SAM account name for this user (for example, Linda). If the SAM name is not specified, <maml:computerOutputInline>dsadd</maml:computerOutputInline> attempts to create the SAM account name using up to the first 20 characters from the common name (CN) value of <maml:replaceable>UserDN</maml:replaceable>. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-pwd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets <Password> value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Password></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the password to be used for the user account. If this parameter is set to <maml:computerOutputInline>*</maml:computerOutputInline>, you are prompted for a user password. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsadd user /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A new user account with the same name as a previously deleted user account does not automatically assume the permissions and group memberships of the previously deleted account because the security SID for each account is unique. If you want to duplicate a deleted user account, you must recreate all permissions and memberships manually.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New User Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138369</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138369"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Permissions</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Control</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Show these permissions</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select among the following check boxes:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:ui>General</maml:ui>. This is the default view. When you select this check box, the list of permissions displays only the core permissions that are common to all the selected objects on the previous wizard page. These permissions include Full Control, Read, Write, Read All Properties, and Write All Properties. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Property-specific</maml:ui>. Select this check box to update the listed permissions to include properties that are specific to the types of objects that you selected on the previous wizard page. For example, if you selected account objects, any properties that are specific to the account object type, such as <maml:ui>Read adminDescription</maml:ui> and <maml:ui>Write adminDescription</maml:ui>, appear in the permissions list. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>Creation/deletion of specific child objects</maml:ui>. Select this check box to update the listed permissions to include properties that are specific to the creation and deletion of child objects for the object types that you selected on the previous wizard page.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Permissions</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>You can delegate control by using the check boxes that correspond to each of the available permissions. For example, to delegate full control over the object types that you selected previously in the wizard, select the <maml:ui>Full Control</maml:ui> check box. For more information, see Best practices for assigning permissions on Active Directory objects (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=63971</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=63971"></maml:uri></maml:navigationLink>).</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Delegate Control of an Organizational Unit</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To delegate control of an organizational unit</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the organizational unit (OU) for which you want to delegate control.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>organizational unit</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Delegate Control</maml:ui> to start the Delegation of Control Wizard, and then follow the instructions in the wizard.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Organizational Units</maml:linkText><maml:uri href="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change <Domain> or <Forest> Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Control</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Domain</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays the fully qualified domain name (FQDN) of the domain that is the current focus of the selected snap-in. To change the focus of the Active Directory snap-in to another domain, type the full Domain Name System (DNS) name of the domain here.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>In Active Directory Sites and Services and Active Directory Domains and Trusts, this control is called <maml:ui>Root Domain</maml:ui>.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Browse</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays a list of domains that are contained in the domain tree or forest. You can change the focus of the Active Directory snap-in to the selected domain.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>This button is available only in the <maml:ui>Active Directory Users and Computers Change Domain</maml:ui> dialog box. </maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Save this domain setting for the current console</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether to save the current domain focus for the selected Active Directory snap-in. If you select this option, the next time that you open the console, the console will focus on the domain that is listed here.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Disable or Enable a Computer Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Disabling or enabling a computer account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=da2654f8-4279-496a-bead-fba880a69c43#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=da2654f8-4279-496a-bead-fba880a69c43#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable or enable a computer account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the computer account that you want to enable or disable.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the desired computer account, and then do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To disable the account, click <maml:ui>Disable Account</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To enable the account, click <maml:ui>Enable Account</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you disable a computer account, the computer cannot authenticate to the domain until it has been enabled.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138389</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138389"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable or enable a computer account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod computer <ComputerDN> -disabled {yes|no}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><ComputerDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished names of the computer account that you want to disable or enable.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-disabled</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the disabled (<maml:computerOutputInline>yes</maml:computerOutputInline>) or the enabled (<maml:computerOutputInline>no</maml:computerOutputInline>) value for the specified computer account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{yes|no}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether the computer account is disabled for log on (<maml:computerOutputInline>yes</maml:computerOutputInline>) or not (<maml:computerOutputInline>no</maml:computerOutputInline>).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following, and then press ENTER:</maml:para>
<dev:code>dsmod computer /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you disable a computer account, the computer account cannot authenticate to the domain until it has been enabled.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable a Computer Account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138389</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138389"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Group Accounts</maml:title><maml:introduction>
<maml:para>A group is a collection of user and computer accounts, contacts, and other groups that can be managed as a single unit. Users and computers that belong to a particular group are referred to as group members. </maml:para>
<maml:para>Groups in Active Directory Domain Services (AD DS) are directory objects that reside in a domain and in organizational unit (OU) container objects. AD DS provides a set of default groups at installation. It also provides an option to create groups.</maml:para>
<maml:para>You can use groups in AD DS to:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Simplify administration by assigning permissions on a shared resource to a group, rather than to individual users. Assigning permissions to a group assigns the same access to the resource to all members of that group.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Delegate administration by assigning user rights once to a group through Group Policy. You can then add members to the group that you want to have the same rights as the group.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Create e-mail distribution lists.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Groups are characterized by their scope and their type. The scope of a group determines the extent to which the group is applied within a domain or forest. The group type determines whether you can use a group to assign permissions from a shared resource (for security groups) or use a group for e-mail distribution lists only (for distribution groups). </maml:para>
<maml:para>There are also groups for which you cannot modify or view the memberships. These groups are referred to as special identities. They represent different users at different times, depending on the circumstances. For example, the Everyone group is a special identity that represents all current network users, including guests and users from other domains.</maml:para>
<maml:para>The following sections provide additional information about group accounts in AD DS.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Understanding default groups</maml:title><maml:introduction>
<maml:para>Default groups, such as the Domain Admins group, are security groups that are created automatically when you create an Active Directory domain. You can use these predefined groups to help control access to shared resources and delegate specific domain-wide administrative roles.</maml:para>
<maml:para>Many default groups are automatically assigned a set of user rights that authorize members of the group to perform specific actions in a domain, such as logging on to a local system or backing up files and folders. For example, a member of the Backup Operators group has the right to perform backup operations for all domain controllers in the domain.</maml:para>
<maml:para>When you add a user to a group, the user receives the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>All the user rights that are assigned to the group</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All the permissions that are assigned to the group on any shared resources</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Default groups are located in the Builtin container and the Users container. The default groups in the Builtin container have a group scope of Builtin Local. Their group scope and group type cannot be changed. The Users container contains groups that are defined with global scope and groups that are defined with domain local scope. You can move groups that are located in these containers to other groups or OUs within the domain, but you cannot move them to other domains.</maml:para>
<maml:para>For more information about default groups, see Default Groups (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=131422</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=131422"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Understanding group scope</maml:title><maml:introduction>
<maml:para>Groups are characterized by a scope that identifies the extent to which the group is applied in the domain tree or forest. There are three group scopes: domain local, global, and universal.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Understanding domain local groups</maml:title><maml:introduction>
<maml:para>Members of domain local groups can include other groups and accounts from Windows Server 2003, Windows 2000, Windows NT, Windows Server 2008, and Windows Server 2008 R2 domains. Members of these groups can be assigned permissions only within a domain.</maml:para>
<maml:para>Groups with domain local scope help you define and manage access to resources within a single domain. These groups can have the following as their members: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Groups with global scope</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Groups with universal scope</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Accounts</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Other groups with domain local scope</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A mixture of any of the above</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For example, to give five users access to a particular printer, you can add all five user accounts in the printer permissions list. If, however, you later want to give the five users access to a new printer, you again have to specify all five accounts in the permissions list for the new printer.</maml:para>
<maml:para>With a little planning, you can simplify this routine administrative task by creating a group with domain local scope and assigning it permission to access the printer. Put the five user accounts in a group with global scope and add this group to the group that has domain local scope. When you want to give the five users access to a new printer, assign the group with domain local scope permission to access the new printer. All members of the group with global scope automatically receive access to the new printer.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Understanding global groups</maml:title><maml:introduction>
<maml:para>Members of global groups can include other groups and accounts only from the domain in which the group is defined. Members of these groups can be assigned permissions in any domain in the forest.</maml:para>
<maml:para>Use groups with global scope to manage directory objects that require daily maintenance, such as user and computer accounts. Because groups with global scope are not replicated outside their own domain, you can change accounts in a group having global scope frequently without generating replication traffic to the global catalog.</maml:para>
<maml:para>Although rights and permissions assignments are valid only within the domain in which they are assigned, by applying groups with global scope uniformly across the appropriate domains, you can consolidate references to accounts with similar purposes. This simplifies and rationalizes group management across domains. For example, in a network with two domains, Europe and UnitedStates, if there is a group with global scope called GLAccounting in the UnitedStates domain, there should also be a group called GLAccounting in the Europe domain (unless the accounting function does not exist in the Europe domain).</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>We strongly recommend that you use global groups or universal groups instead of domain local groups when you specify permissions on domain directory objects that are replicated to the global catalog. </maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Understanding universal groups</maml:title><maml:introduction>
<maml:para>Members of universal groups can include other groups and accounts from any domain in the domain tree or forest. Members of these groups can be assigned permissions in any domain in the domain tree or forest.</maml:para>
<maml:para>Use groups with universal scope to consolidate groups that span domains. To do this, add the accounts to groups with global scope and nest these groups within groups having universal scope. When you use this strategy, any membership changes in the groups that have global scope do not affect the groups with universal scope.</maml:para>
<maml:para>For example, in a network with two domains, Europe and UnitedStates, and a group that has global scope called GLAccounting in each domain, create a group with universal scope called UAccounting that has as its members the two GLAccounting groups, UnitedStates\GLAccounting and Europe\GLAccounting. You can then use the UAccounting group anywhere in the enterprise. Any changes in the membership of the individual GLAccounting groups will not cause replication of the UAccounting group.</maml:para>
<maml:para>Do not change the membership of a group with universal scope frequently. Any changes to the membership of this type of group cause the entire membership of the group to be replicated to every global catalog in the forest. </maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Understanding group types</maml:title><maml:introduction>
<maml:para>There are two types of groups in AD DS: distribution groups and security groups. You can use distribution groups to create e-mail distribution lists and security groups to assign permissions to shared resources.</maml:para>
<maml:para>You can use distribution groups only with e-mail applications (such as Microsoft Exchange Server 2007) to send e-mail to collections of users. Distribution groups are not security enabled, which means that they cannot be listed in discretionary access control lists (DACLs). If you need a group for controlling access to shared resources, create a security group.</maml:para>
<maml:para>When they are used with care, security groups provide an efficient way to assign access to resources on your network. By using security groups, you can: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Assign user rights to security groups in AD DS. </maml:para>
<maml:para>User rights are assigned to a security group to determine what members of that group can do within the scope of a domain (or forest). User rights are automatically assigned to some security groups at the time that AD DS is installed to help administrators define a person's administrative role in the domain. For example, a user who is added to the Backup Operators group in Active Directory has the ability to back up and restore files and directories on each domain controller in the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Assign permissions to security groups on resources. </maml:para>
<maml:para>Permissions are different from user rights. Permissions determine who can access a shared resource, and they determine the level of access, such as Full Control. You can use security groups to manage access and permissions to a shared resource. Some permissions that are set on domain objects are automatically assigned to allow various levels of access to default security groups, such as the Account Operators group or the Domain Admins group. </maml:para>
</maml:listItem>
</maml:list>
<maml:para>Like distribution groups, security groups can also be used as e-mail entities. Sending an e-mail message to the group sends the message to all the members of the group.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Special identities</maml:title><maml:introduction>
<maml:para>In addition to the groups in the Users container and Builtin container, servers running Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 include several special identities. For convenience, these identities are generally referred to as groups. These special groups do not have specific memberships that can be modified. However, they can represent different users at different times, depending on the circumstances. The following groups represent special identities:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Anonymous Logon </maml:para>
<maml:para>This group represents users and services that access a computer and its resources through the network without using an account name, password, or domain name. On computers running Windows NT and earlier, the Anonymous Logon group is a default member of the Everyone group. On computers running Windows Server 2008 R2, Windows Server 2008 or Windows Server 2003, the Anonymous Logon group is not a member of the Everyone group by default.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Everyone </maml:para>
<maml:para>This group represents all current network users, including guests and users from other domains. Whenever a user logs on to the network, the user is added automatically to the Everyone group. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Network </maml:para>
<maml:para>This group represents users who are currently accessing a given resource over the network, as opposed to users who access a resource by logging on locally at the computer where the resource is located. Whenever a user accesses a given resource over the network, the user is added automatically to the Network group. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Interactive </maml:para>
<maml:para>This group represents all users who are currently logged on to a particular computer and who are accessing a given resource that is located on that computer, as opposed to users who access the resource over the network. Whenever a user accesses a given resource on the computer to which they are currently logged on, the user is added automatically to the Interactive group. </maml:para>
</maml:listItem>
</maml:list>
<maml:para>Although the special identities can be assigned rights and permissions to resources, the memberships cannot be modified or viewed. Group scopes do not apply to special identities. Users are assigned automatically to these special identities whenever they log on or access a particular resource. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Understanding where groups can be created</maml:title><maml:introduction>
<maml:para>In AD DS, groups are created in domains. You use Active Directory Users and Computers to create groups. With the necessary permissions, you can create groups in the root domain of the forest, in any other domain in the forest, or in an OU.</maml:para>
<maml:para>Besides the domain in which it is created, a group is also characterized by its scope. The scope of a group determines the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The domain from which members can be added</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The domain in which the rights and permissions that are assigned to the group are valid</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Choose the particular domain or OU where you create a group based on the administration that is required for the group. For example, if your directory has multiple OUs, each of which has a different administrator, you may want to create groups with global scope within those OUs so that the administrators can manage group membership for users in their respective OUs. If groups are required for access control outside the OU, you can nest the groups in the OU into groups with universal scope (or other groups with global scope) that you can use elsewhere in the forest.</maml:para>
<maml:para>If the domain functional level is set to Windows 2000 native or higher, the domain contains a hierarchy of OUs, and administration is delegated to administrators at each OU, it may be more efficient to nest groups with global scope. For example, if OU1 contains OU2 and OU3, a group with global scope in OU1 can have as its members groups with global scope in OU2 and OU3. In OU1, the administrator can add or remove group members from OU1, and the administrators of OU2 and OU3 can add or remove group members for accounts from their own OUs without having administrative rights for the group with global scope in OU1.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You can move groups within a domain. However, only groups with universal scope can be moved from one domain to another. The rights and permissions that are assigned to a group with universal scope are lost when the group is moved to another domain, and new assignments must be made.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Set Logon Hours</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To set logon hours using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Users</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click the user account, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Account</maml:ui> tab, click <maml:ui>Logon Hours</maml:ui>, and then set the permitted or denied logon hours for the user.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To modify the logon hours for multiple users, press and hold down CTRL, and then click each user. Right-click the selected users, and then click <maml:ui>Properties</maml:ui>. On the <maml:ui>Account</maml:ui> tab, click <maml:ui>Logon Hours</maml:ui>, and then set the permitted or denied logon hours for the user.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Set Logon Hours (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138373</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138373"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Computer Account to a Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding a computer account to a group</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=de3c0c98-53a7-49dc-b3a4-32967cc9c1ec#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=de3c0c98-53a7-49dc-b3a4-32967cc9c1ec#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a computer account to a group using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Computers</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\Computers</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder in which the computer is located.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the computer, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Member Of</maml:ui> tab, click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Enter the object names to select</maml:ui>, type the name of a group that you want this computer to be a member of, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you view users, computers, and groups as containers, you can add a computer to a group by dragging it onto the desired group.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By adding a computer to a group, you can assign permissions to all the computer accounts in that group and you can filter Group Policy settings on all the accounts in that group.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add a Computer Account to a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138385</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138385"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a computer account to a group using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsmod group <GroupDN> -addmbr <ComputerDN></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><GroupDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished names of the group object to which you want to add the computer object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-addmbr</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the <ComputerDN> value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ComputerDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the computer to be added to the group. The distinguished name specifies the directory location.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsmod group /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By adding a computer to a group, you can assign permissions to all of the computer accounts in that group and filter Group Policy settings on all accounts in that group.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add a Computer Account to a Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138385</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138385"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Computers</maml:linkText><maml:uri href="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New Group</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Creating a new group account</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=df4fe212-1b7e-4ba7-bf4b-2ea273fce40c#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=df4fe212-1b7e-4ba7-bf4b-2ea273fce40c#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new group account using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the folder under which you want to create a new group.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers\<maml:replaceable>domain node</maml:replaceable>\<maml:replaceable>folder</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Point to <maml:ui>New</maml:ui>, and then click <maml:ui>Group</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the name of the new group.</maml:para>
<maml:para>By default, the name that you type is also entered as the pre–Windows 2000 name of the new group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Group scope</maml:ui>, click one of the options.</maml:para>
<maml:para>For more information, see the section "Understanding group scope" in <maml:navigationLink><maml:linkText>Understanding Group Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=db8d1c77-d61b-45af-b3c9-8019bab5358f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Group type</maml:ui>, click one of the options.</maml:para>
<maml:para>For more information, see the section "Understanding group types" in <maml:navigationLink><maml:linkText>Understanding Group Accounts</maml:linkText><maml:uri href="mshelp://windows/?id=db8d1c77-d61b-45af-b3c9-8019bab5358f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To add a group, you can also click the folder in which you want to add the group, and then click the new group icon on the toolbar.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the domain in which you are creating the group is set to the domain functional level of Windows 2000 mixed, you can select only the <maml:ui>Security</maml:ui> group type with <maml:ui>Domain local</maml:ui> or <maml:ui>Global scopes</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138377</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138377"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a new group account using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>cmd</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dsadd group <GroupDN> -samid<SAMName> -secgrp {yes|no} -scope {l|g|u}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><GroupDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the distinguished name of the group object to be added. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-samid</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the <SAMName> value.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><SAMName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Security Accounts Manager (SAM) name as the unique SAM account name for the group (for example, Operators). </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-secgrp</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the value for the group type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{yes|no}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether the group that you want to add is a security group (<maml:computerOutputInline>yes</maml:computerOutputInline>) or a distribution group (<maml:computerOutputInline>no</maml:computerOutputInline>).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-scope</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the value for the group scope.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{l|g|u}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether the scope of the group that you want to add is domain local (<maml:computerOutputInline>l</maml:computerOutputInline>), global (<maml:computerOutputInline>g</maml:computerOutputInline>), or universal (<maml:computerOutputInline>u</maml:computerOutputInline>).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dsadd group /? </dev:code>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in AD DS, or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the domain in which you are creating the group is set to the domain functional level of Windows 2000 mixed, you can select only the <maml:ui>Security</maml:ui> group type with <maml:ui>Domain local</maml:ui> or <maml:ui>Global </maml:ui>scopes.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Create a New Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=138377</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=138377"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Groups</maml:linkText><maml:uri href="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Map a Certificate to a User Account</maml:title><maml:introduction>
<maml:para>Membership in <maml:phrase>Account Operators</maml:phrase>, <maml:phrase>Domain Admins</maml:phrase>, or <maml:phrase>Enterprise Admins</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To map a certificate to a user account </maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To open Active Directory Users and Computers, click <maml:ui>Start</maml:ui>, click <maml:ui>Control Panel</maml:ui>, double-click <maml:ui>Administrative Tools</maml:ui>, and then double-click <maml:ui>Active Directory Users and Computers</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>View</maml:ui> menu, select <maml:ui>Advanced Features</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>Users</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where? </maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Active Directory Users and Computers/<maml:replaceable>domain node</maml:replaceable>/Users</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Or, click the folder that contains the user account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, right-click the user to which you want to map a certificate, and then click <maml:ui>Name Mappings</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Security Identity Mapping</maml:ui> dialog box, on the <maml:ui>X.509 Certificates</maml:ui> tab, click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the name and path of the .cer file that contains the certificate that you want to map to this user account, and then click <maml:ui>Open</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To map the certificate to one account (one-to-one mapping), confirm that both the <maml:ui>Use Issuer for alternate security identity</maml:ui> check box and the <maml:ui>Use Subject for alternate security identity</maml:ui> check box are selected.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To map any certificate that has the same subject to the user account, regardless of the issuer of the certificate (many-to-one mapping), clear the <maml:ui>Use Issuer for alternate security identity</maml:ui> check box, and confirm that the <maml:ui>Use Subject for alternate security identity</maml:ui> check box is selected.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To map any certificate that has the same issuer to the user account, regardless of the subject of the certificate (many-to-one mapping), clear the <maml:ui>Use Subject for alternate security identity</maml:ui> check box, and confirm that the <maml:ui>Use Issuer for alternate security identity</maml:ui> check box is selected.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To perform this procedure, you must be a member of either the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using <maml:ui>Run as</maml:ui> to perform this procedure. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to open Active Directory Users and Computers is to click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, and then type <maml:userInput>dsa.msc</maml:userInput>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The certificate that you are mapping to a user account must be in Distinguished Encoding Rules (DER) or Base64 encoded binary format.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Another way to bring up <maml:ui>Security Identity Mapping</maml:ui> dialog box is to right-click a user account, and then click <maml:ui>Name Mappings</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Resources for Active Directory Users and Computers</maml:title><maml:introduction>
<maml:para>The following links provide more information related to Active Directory Users and Computers:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>For information about creating a local user account, see Create a local user account (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=58123</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=58123"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For information about the Active Directory Migration Tool (ADMT), see ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=82740</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=82740"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For information about default groups, see the Active Directory Domain Services Technical Reference (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=88626</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=88626"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change Domain Controllers Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Any writable Domain Controller</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to find any available domain controller that is writable in the currently selected domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>This Domain Controller or AD LDS instance</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this option to either type the computer name or IP address for a domain controller or an Active Directory Lightweight Directory Services (AD LDS) instance or select a domain controller from the list of domain controllers that are registered in the currently selected domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Look in this domain</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Lists all available domains in the given forest.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>This pull-down menu is not visible in Active Directory Users and Computers.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui><Type a Directory Server name[:port] here></maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>To connect to a domain controller, type in the computer name or IP address of a server that hosts this domain controller.</maml:para>
<maml:para>To connect to an AD LDS instance, type the computer name and the port number of a server that hosts this AD LDS instance.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Save this setting for the current console</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether to save the current domain controller focus for the given console. If you select this option, the next time that you open this console it will focus on the domain that is listed here.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding User Accounts</maml:title><maml:introduction>
<maml:para>Active Directory user accounts represent physical entities, such as people. You can also use user accounts as dedicated service accounts for some applications.</maml:para>
<maml:para>User accounts are also referred to as security principals. Security principals are directory objects that are automatically assigned security identifiers (SIDs), which can be used to access domain resources. A user account primarily:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Authenticates the identity of a user.</maml:para>
<maml:para>A user account enables a user to log on to computers and domains with an identity that the domain can authenticate. Each user who logs on to the network should have his or her own unique user account and password. To maximize security, avoid having multiple users sharing one account.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Authorizes or denies access to domain resources.</maml:para>
<maml:para>After a user is authenticated, the user is authorized or denied access to domain resources based on the explicit permissions that are assigned to that user on the resource.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>User accounts</maml:title><maml:introduction>
<maml:para>The Users container in the Active Directory Users and Computers snap-in displays the three built-in user accounts: Administrator, Guest, and HelpAssistant. These built-in user accounts are created automatically when you create the domain.</maml:para>
<maml:para>Each built-in account has a different combination of rights and permissions. The Administrator account has the most extensive rights and permissions over the domain, while the Guest account has limited rights and permissions. The following table describes each default user account on domain controllers running the Windows Server® 2008 R2 operating system.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Default user account</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Administrator </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The Administrator account has full control of the domain. It can assign user rights and access control permissions to domain users as necessary. Use this account only for tasks that require administrative credentials. We recommend that you set up this account with a strong password. </maml:para>
<maml:para>The Administrator account is a default member of the following Active Directory groups: Administrators, Domain Admins, Enterprise Admins, Group Policy Creator Owners, and Schema Admins. The Administrator account can never be deleted or removed from the Administrators group, but it can be renamed or disabled. Because the Administrator account is known to exist on many versions of Windows, renaming or disabling this account will make it more difficult for malicious users to try to gain access to it. </maml:para>
<maml:para>The Administrator account is the first account that is created when you set up a new domain with the Active Directory Domain Services Installation Wizard.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>When the Administrator account is disabled, it can still be used to gain access to a domain controller with Safe Mode.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Guest </maml:para>
</maml:entry>
<maml:entry>
<maml:para>People who do not have an actual account in the domain can use the Guest account. A user whose account is disabled (but not deleted) can also use the Guest account. The Guest account does not require a password.</maml:para>
<maml:para>You can set rights and permissions for the Guest account just like any user account. By default, the Guest account is a member of the built-in Guests group and the Domain Guests global group, which allows a user to log on to a domain. The Guest account is disabled by default, and we recommend that it stay disabled.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>HelpAssistant (installed with a Remote Assistance session)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The primary account for establishing a Remote Assistance session. This account is created automatically when you request a Remote Assistance session. It has limited access to the computer. The HelpAssistant account is managed by the Remote Desktop Help Session Manager service. This account is automatically deleted if no Remote Assistance requests are pending.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Securing user accounts</maml:title><maml:introduction>
<maml:para>If built-in account rights and permissions are not modified or disabled by a network administrator, they can be used by a malicious user (or service) to illegally log on to a domain using the Administrator account or Guest account. A good security practice for protecting these accounts is to rename or disable them. Because it retains its SID, a renamed user account retains all its other properties, such as its description, password, group memberships, user profile, account information, and any assigned permissions and user rights.</maml:para>
<maml:para>To obtain the security advantages of user authentication and authorization, use Active Directory Users and Computers to create an individual user account for each user who will participate in your network. You can then add each user account (including the Administrator account and Guest account) to a group to control the rights and permissions that are assigned to the account. When you have accounts and groups that are appropriate for your network, you ensure that you can identify users that log on to your network and that they have access only to the permitted resources.</maml:para>
<maml:para>You can help defend your domain from attackers by requiring strong passwords and implementing an account lockout policy. Strong passwords reduce the risk of intelligent password guessing and dictionary attacks on passwords. An account lockout policy decreases the possibility of an attacker compromising your domain through repeated logon attempts. An account lockout policy determines how many failed logon attempts a user account can have before it is disabled.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Account options</maml:title><maml:introduction>
<maml:para>Each Active Directory user account has a number of account options that determine how someone logging on with that particular user account is authenticated on the network. You can use the options in the following table to configure password settings and security-specific information for user accounts.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Account option </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>User must change password at next logon</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Forces a user to change his or her password the next time that the user logs on to the network. Enable this option when you want to ensure that the user will be the only person that knows the password.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>User cannot change password</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Prevents a user from changing his or her password. Enable this option when you want to maintain control over a user account, such as a Guest account or temporary account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Password never expires</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Prevents a user password from expiring. We recommend that service accounts have this option enabled and use strong passwords. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Store passwords using reversible encryption</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allows a user to log on to a Windows network from Apple computers. If a user is not logging on from an Apple computer, do not enable this option. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Account is disabled</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Prevents a user from logging on with the selected account. Many administrators use disabled accounts as templates for common user accounts. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Smart card is required for interactive logon</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Requires that a user possess a smart card to log on to the network interactively. The user must also have a smart card reader attached to their computer and a valid personal identification number (PIN) for the smart card. When this option is enabled, the password for the user account is automatically set to a random and complex value and the <maml:ui>Password never expires</maml:ui> account option is set.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Account is trusted for delegation</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allows a service running under this account to perform operations on behalf of other user accounts on the network. A service running under a user account (otherwise known as a service account) that is trusted for delegation can impersonate a client to gain access to resources on the computer where the service is running or to resources on other computers. In a forest that is set to the Windows Server 2008 R2 functional level, this option is on the <maml:ui>Delegation</maml:ui> tab. It is available only for accounts that have been assigned service principal names (SPNs), as set with the <maml:computerOutputInline>setspn</maml:computerOutputInline> command in Windows Server 2008 R2. (Open a command window, and then type <maml:computerOutputInline>setspn</maml:computerOutputInline>.) This is a security-sensitive capability; assign it cautiously. </maml:para>
<maml:para>This option is available only on domain controllers running Windows Server 2008 R2 where the domain functionality is set to Windows® 2000 mixed or Windows 2000 native. On domain controllers running Windows Server 2008 and Windows Server 2008 R2 where the domain functional level is set to the Windows Server 2008 or Windows Server 2008 R2 forest functional Level, use the <maml:ui>Delegation</maml:ui> tab in the user properties dialog box to configure delegation settings. The <maml:ui>Delegation</maml:ui> tab appears only for accounts that have an assigned SPN. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Account is sensitive and cannot be delegated</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>You can use this option if the account, for example a Guest or temporary account, cannot be assigned for delegation by another account.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Use DES encryption types for this account</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides support for the Data Encryption Standard (DES). DES supports multiple levels of encryption, including Microsoft Point-to-Point Encryption (MPPE) Standard (40-bit), MPPE Standard (56-bit), MPPE Strong (128-bit), Internet Protocol security (IPsec) DES (40-bit), IPsec 56-bit DES, and IPsec Triple DES (3DES</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Do not require Kerberos preauthentication</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides support for alternative implementations of the Kerberos protocol. However, use caution when you enable this option, because Kerberos preauthentication provides additional security and requires time synchronization between the client and the server. </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>InetOrgPerson accounts</maml:title><maml:introduction>
<maml:para>Active Directory Domain Services (AD DS) provides support for the <maml:phrase>InetOrgPerson</maml:phrase> object class and its associated attributes as defined in Request for Comments (RFC) 2798. The <maml:phrase>InetOrgPerson</maml:phrase> object class is used in several non-Microsoft, Lightweight Directory Access Protocol (LDAP) and X.500 directory services to represent people in an organization.</maml:para>
<maml:para>Support for <maml:phrase>InetOrgPerson</maml:phrase> makes migration from other LDAP directories to AD DSmore efficient. The InetOrgPerson object is derived from the <maml:phrase>user</maml:phrase> class. It can function as a security principal just like the <maml:phrase>user</maml:phrase> class. For information about creating an inetOrgPerson user account, see <maml:navigationLink><maml:linkText>Create a New User Account</maml:linkText><maml:uri href="mshelp://windows/?id=c12616cc-b6bb-4a0e-83f0-dee3ca58896e"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>When the domain functional level is set to Windows Server 2008 or Windows Server 2008 R2, you can set the <maml:phrase>userPassword</maml:phrase> attribute on <maml:phrase>InetOrgPerson</maml:phrase> and user objects as being the effective password, just as you can with the <maml:phrase>unicodePwd</maml:phrase> attribute.</maml:para>
</maml:introduction></maml:section><maml:section><maml:title>Additional references</maml:title>
<maml:introduction><maml:para><maml:navigationLink><maml:linkText>Managing Users</maml:linkText><maml:uri href="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9"></maml:uri></maml:navigationLink></maml:para></maml:introduction>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Read-only Domain Controller Properties - Password Replication Policy Tab</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Groups, users and computers</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays all account names in the Password Replication Policy account list of this read-only domain controller (RODC). Password Replication Policy is a mechanism that is designed to improve the efficiency of subsequent domain logons by the same account. The Password Replication Policy setting indicates whether the password caching for a given account is allowed or explicitly denied.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Advanced</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to view the advanced Password Replication Policy settings on this RODC.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Add</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to add account names to the Password Replication Policy account list for this RODC.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Remove </maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click to remove account names from the Password Replication Policy account list for this RODC.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Users and Computers</maml:linkText><maml:uri href="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><?xml version="1.0" encoding="utf-8"?>
<HelpCollection Id="dsadmin" DTDVersion="1.0" FileVersion="" LangId="1033" Copyright="© 2005 Microsoft Corporation. All rights reserved." Title="Active Directory Users and Computers" xmlns="http://schemas.microsoft.com/help/collection/2004/11">
<CompilerOptions CompileResult="H1S" CreateFullTextIndex="Yes" BreakerId="Microsoft.NLG.en.WordBreaker">
<IncludeFile File="dsadmin.H1F" />
</CompilerOptions>
<TOCDef File="dsadmin.H1T" Id="dsadmin_TOC" />
<VTopicDef File="dsadmin.H1V" />
<KeywordIndexDef File="dsadmin_AssetId.H1K" />
<KeywordIndexDef File="dsadmin_BestBet.H1K" />
<KeywordIndexDef File="dsadmin_LinkTerm.H1K" />
<KeywordIndexDef File="dsadmin_SubjectTerm.H1K" />
<ItemMoniker Name="!DefaultTOC" ProgId="HxDs.HxHierarchy" InitData="AnyString" />
<ItemMoniker Name="!DefaultFullTextSearch" ProgId="HxDs.HxFullTextSearch" InitData="AnyString" />
<ItemMoniker Name="!DefaultAssetIdIndex" ProgId="HxDs.HxIndex" InitData="AssetId" />
<ItemMoniker Name="!DefaultBestBetIndex" ProgId="HxDs.HxIndex" InitData="BestBet" />
<ItemMoniker Name="!DefaultAssociativeIndex" ProgId="HxDs.HxIndex" InitData="LinkTerm" />
<ItemMoniker Name="!DefaultKeywordIndex" ProgId="HxDs.HxIndex" InitData="SubjectTerm" />
</HelpCollection><?xml version="1.0" encoding="utf-8"?>
<HelpFileList xmlns="http://schemas.microsoft.com/help/filelist/2004/11">
<File Url="assets\062ec262-0571-493d-9c7c-3515425cc7cf.xml" />
<File Url="assets\078499ae-fba6-4a2c-9e90-1f06c118972b.xml" />
<File Url="assets\14b544e2-9535-4079-ba47-774073dbb988.xml" />
<File Url="assets\1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb.xml" />
<File Url="assets\1be639a1-e774-4b48-af43-d13a893765c3.xml" />
<File Url="assets\1c4dcbb0-f996-4166-81a7-c23eb3560b6b.xml" />
<File Url="assets\1d88c151-33eb-4b49-8343-cedb1a7c8acd.xml" />
<File Url="assets\20cee0f3-3cb8-48e8-8c03-a8be94e8f708.xml" />
<File Url="assets\2cafa789-a640-488a-89ff-8ed398d78385.xml" />
<File Url="assets\2d02574b-94ed-4b9b-bd4a-5a5f91030d84.xml" />
<File Url="assets\300bd71e-5ab4-40c2-9e43-8cfea26941d0.xml" />
<File Url="assets\32fd0ba0-fb10-4b24-be43-b87bcaa9253f.xml" />
<File Url="assets\379993bd-2380-4f6b-b4e0-7ed38e606485.xml" />
<File Url="assets\3c461cb2-9565-4fc2-a280-421b6e88741c.xml" />
<File Url="assets\3f8518bf-0b30-484b-9018-accc769cf3a3.xml" />
<File Url="assets\415e69ad-c665-4165-9d2b-b8d41f95310b.xml" />
<File Url="assets\434206e1-4520-483f-bfc2-2b9033767d7b.xml" />
<File Url="assets\44b0a830-3f34-486e-bb63-a6d8c743159c.xml" />
<File Url="assets\553bfdb0-153a-43af-b161-93bfac2ff131.xml" />
<File Url="assets\58ac6e0a-33ef-4330-bc8e-cf62978f7f54.xml" />
<File Url="assets\5d793e70-e0f9-424f-869b-cbbe52d75fd4.xml" />
<File Url="assets\5de13a27-6ca4-442e-9995-e5eae2a0d072.xml" />
<File Url="assets\5f29b1fa-f94d-483e-9e3b-531d20757f73.xml" />
<File Url="assets\61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34.xml" />
<File Url="assets\672be588-abcc-47fc-ac73-d05628639d4c.xml" />
<File Url="assets\6810ead7-8293-433d-b79c-2fb3c56a9167.xml" />
<File Url="assets\6b069902-87f7-4779-928b-2da7db495088.xml" />
<File Url="assets\7155834b-a660-4bd2-a1ae-878d07d62600.xml" />
<File Url="assets\72701088-d288-418f-802c-2c6371d8e471.xml" />
<File Url="assets\7bfa448a-ebe0-4bd3-a60a-4728a2143f57.xml" />
<File Url="assets\7dabf986-cead-4d5e-968a-564d0c5bdec0.xml" />
<File Url="assets\7fd8bd79-4974-42e0-a80f-25e00c7a5481.xml" />
<File Url="assets\8008691d-1730-4e38-bed0-0138a99c0a9b.xml" />
<File Url="assets\8157d7f8-5977-4590-9643-8e0f5525f3e9.xml" />
<File Url="assets\82790c5d-203b-4e44-8f3f-8e04b1a7c69f.xml" />
<File Url="assets\85e93458-3b02-4613-86f1-b82784910775.xml" />
<File Url="assets\881864ff-6346-4047-a264-0c153823e8a6.xml" />
<File Url="assets\8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0.xml" />
<File Url="assets\a4b1413f-8027-4d81-b198-4810ed44c06d.xml" />
<File Url="assets\a909b74f-4d83-4366-8937-cfb3b8261f3a.xml" />
<File Url="assets\ae799df1-b28d-49b5-a575-8dd6d5a5e4fd.xml" />
<File Url="assets\aeeee0c0-9294-4060-af36-dd98f183a150.xml" />
<File Url="assets\b2e6531e-a311-4e44-b6fd-ab22c499d65c.xml" />
<File Url="assets\b701ce63-d235-46d0-86ba-426ad9761a40.xml" />
<File Url="assets\b9468599-b1a4-43e7-976f-934d432a5aac.xml" />
<File Url="assets\c12616cc-b6bb-4a0e-83f0-dee3ca58896e.xml" />
<File Url="assets\c27b8ce6-573b-44d6-a247-29b43e298ec9.xml" />
<File Url="assets\c6e98d67-ec0c-4342-b6ee-cee48f37060b.xml" />
<File Url="assets\da258507-809b-4e7b-8a2a-ead7e03beca5.xml" />
<File Url="assets\da2654f8-4279-496a-bead-fba880a69c43.xml" />
<File Url="assets\db8d1c77-d61b-45af-b3c9-8019bab5358f.xml" />
<File Url="assets\dce5a1c3-3e98-46ab-ae10-1304712b0c85.xml" />
<File Url="assets\de3c0c98-53a7-49dc-b3a4-32967cc9c1ec.xml" />
<File Url="assets\df4fe212-1b7e-4ba7-bf4b-2ea273fce40c.xml" />
<File Url="assets\e20a5fc2-cd8b-4ede-bbfc-3470d56f4997.xml" />
<File Url="assets\e344ce02-305d-442f-8b08-bc97009a9152.xml" />
<File Url="assets\e609485d-96ce-471a-a46b-8547ca64cf87.xml" />
<File Url="assets\ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e.xml" />
<File Url="assets\fd89523a-c431-43b4-884f-08e728ad7c92.xml" />
</HelpFileList><?xml version="1.0" encoding="utf-8"?>
<VTopicSet DTDVersion="1.0" xmlns="http://schemas.microsoft.com/help/vtopic/2004/11">
<Vtopic Url="assets\062ec262-0571-493d-9c7c-3515425cc7cf.xml" RLTitle="Advanced Password Replication Policy Dialog Box - Resultant Policy Tab">
<Attr Name="assetid" Value="062ec262-0571-493d-9c7c-3515425cc7cf" />
<Keyword Index="AssetId" Term="062ec262-0571-493d-9c7c-3515425cc7cf" />
<Keyword Index="AssetId" Term="062ec262-0571-493d-9c7c-3515425cc7cf1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="062ec262-0571-493d-9c7c-3515425cc7cf" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\078499ae-fba6-4a2c-9e90-1f06c118972b.xml" RLTitle="Managing Organizational Units">
<Attr Name="assetid" Value="078499ae-fba6-4a2c-9e90-1f06c118972b" />
<Keyword Index="AssetId" Term="078499ae-fba6-4a2c-9e90-1f06c118972b" />
<Keyword Index="AssetId" Term="078499ae-fba6-4a2c-9e90-1f06c118972b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="078499ae-fba6-4a2c-9e90-1f06c118972b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\14b544e2-9535-4079-ba47-774073dbb988.xml" RLTitle="Active Directory Object Type">
<Attr Name="assetid" Value="14b544e2-9535-4079-ba47-774073dbb988" />
<Keyword Index="AssetId" Term="14b544e2-9535-4079-ba47-774073dbb988" />
<Keyword Index="AssetId" Term="14b544e2-9535-4079-ba47-774073dbb9881033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="14b544e2-9535-4079-ba47-774073dbb988" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb.xml" RLTitle="Delegation of Control Wizard">
<Attr Name="assetid" Value="1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb" />
<Keyword Index="AssetId" Term="1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb" />
<Keyword Index="AssetId" Term="1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1be639a1-e774-4b48-af43-d13a893765c3.xml" RLTitle="Disable or Enable a User Account">
<Attr Name="assetid" Value="1be639a1-e774-4b48-af43-d13a893765c3" />
<Keyword Index="AssetId" Term="1be639a1-e774-4b48-af43-d13a893765c3" />
<Keyword Index="AssetId" Term="1be639a1-e774-4b48-af43-d13a893765c31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1be639a1-e774-4b48-af43-d13a893765c3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1c4dcbb0-f996-4166-81a7-c23eb3560b6b.xml" RLTitle="Manage a Remote Computer">
<Attr Name="assetid" Value="1c4dcbb0-f996-4166-81a7-c23eb3560b6b" />
<Keyword Index="AssetId" Term="1c4dcbb0-f996-4166-81a7-c23eb3560b6b" />
<Keyword Index="AssetId" Term="1c4dcbb0-f996-4166-81a7-c23eb3560b6b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1c4dcbb0-f996-4166-81a7-c23eb3560b6b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1d88c151-33eb-4b49-8343-cedb1a7c8acd.xml" RLTitle="User Interface: Active Directory Users and Computers">
<Attr Name="assetid" Value="1d88c151-33eb-4b49-8343-cedb1a7c8acd" />
<Keyword Index="AssetId" Term="1d88c151-33eb-4b49-8343-cedb1a7c8acd" />
<Keyword Index="AssetId" Term="1d88c151-33eb-4b49-8343-cedb1a7c8acd1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1d88c151-33eb-4b49-8343-cedb1a7c8acd" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\20cee0f3-3cb8-48e8-8c03-a8be94e8f708.xml" RLTitle="Change Group Scope">
<Attr Name="assetid" Value="20cee0f3-3cb8-48e8-8c03-a8be94e8f708" />
<Keyword Index="AssetId" Term="20cee0f3-3cb8-48e8-8c03-a8be94e8f708" />
<Keyword Index="AssetId" Term="20cee0f3-3cb8-48e8-8c03-a8be94e8f7081033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="20cee0f3-3cb8-48e8-8c03-a8be94e8f708" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2cafa789-a640-488a-89ff-8ed398d78385.xml" RLTitle="Move an Organizational Unit">
<Attr Name="assetid" Value="2cafa789-a640-488a-89ff-8ed398d78385" />
<Keyword Index="AssetId" Term="2cafa789-a640-488a-89ff-8ed398d78385" />
<Keyword Index="AssetId" Term="2cafa789-a640-488a-89ff-8ed398d783851033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2cafa789-a640-488a-89ff-8ed398d78385" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2d02574b-94ed-4b9b-bd4a-5a5f91030d84.xml" RLTitle="Find Groups in Which a User is a Member">
<Attr Name="assetid" Value="2d02574b-94ed-4b9b-bd4a-5a5f91030d84" />
<Keyword Index="AssetId" Term="2d02574b-94ed-4b9b-bd4a-5a5f91030d84" />
<Keyword Index="AssetId" Term="2d02574b-94ed-4b9b-bd4a-5a5f91030d841033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2d02574b-94ed-4b9b-bd4a-5a5f91030d84" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\300bd71e-5ab4-40c2-9e43-8cfea26941d0.xml" RLTitle="Delete an Organizational Unit">
<Attr Name="assetid" Value="300bd71e-5ab4-40c2-9e43-8cfea26941d0" />
<Keyword Index="AssetId" Term="300bd71e-5ab4-40c2-9e43-8cfea26941d0" />
<Keyword Index="AssetId" Term="300bd71e-5ab4-40c2-9e43-8cfea26941d01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="300bd71e-5ab4-40c2-9e43-8cfea26941d0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\32fd0ba0-fb10-4b24-be43-b87bcaa9253f.xml" RLTitle="Managing Groups">
<Attr Name="assetid" Value="32fd0ba0-fb10-4b24-be43-b87bcaa9253f" />
<Keyword Index="AssetId" Term="32fd0ba0-fb10-4b24-be43-b87bcaa9253f" />
<Keyword Index="AssetId" Term="32fd0ba0-fb10-4b24-be43-b87bcaa9253f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="32fd0ba0-fb10-4b24-be43-b87bcaa9253f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\379993bd-2380-4f6b-b4e0-7ed38e606485.xml" RLTitle="Copy a User Account">
<Attr Name="assetid" Value="379993bd-2380-4f6b-b4e0-7ed38e606485" />
<Keyword Index="AssetId" Term="379993bd-2380-4f6b-b4e0-7ed38e606485" />
<Keyword Index="AssetId" Term="379993bd-2380-4f6b-b4e0-7ed38e6064851033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="379993bd-2380-4f6b-b4e0-7ed38e606485" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3c461cb2-9565-4fc2-a280-421b6e88741c.xml" RLTitle="<Object> Properties - Object tab">
<Attr Name="assetid" Value="3c461cb2-9565-4fc2-a280-421b6e88741c" />
<Keyword Index="AssetId" Term="3c461cb2-9565-4fc2-a280-421b6e88741c" />
<Keyword Index="AssetId" Term="3c461cb2-9565-4fc2-a280-421b6e88741c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3c461cb2-9565-4fc2-a280-421b6e88741c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3f8518bf-0b30-484b-9018-accc769cf3a3.xml" RLTitle="New Object - Organizational Unit Dialog Box">
<Attr Name="assetid" Value="3f8518bf-0b30-484b-9018-accc769cf3a3" />
<Keyword Index="AssetId" Term="3f8518bf-0b30-484b-9018-accc769cf3a3" />
<Keyword Index="AssetId" Term="3f8518bf-0b30-484b-9018-accc769cf3a31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3f8518bf-0b30-484b-9018-accc769cf3a3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\415e69ad-c665-4165-9d2b-b8d41f95310b.xml" RLTitle="Delete a Group">
<Attr Name="assetid" Value="415e69ad-c665-4165-9d2b-b8d41f95310b" />
<Keyword Index="AssetId" Term="415e69ad-c665-4165-9d2b-b8d41f95310b" />
<Keyword Index="AssetId" Term="415e69ad-c665-4165-9d2b-b8d41f95310b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="415e69ad-c665-4165-9d2b-b8d41f95310b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\434206e1-4520-483f-bfc2-2b9033767d7b.xml" RLTitle="Add a Member to a Group">
<Attr Name="assetid" Value="434206e1-4520-483f-bfc2-2b9033767d7b" />
<Keyword Index="AssetId" Term="434206e1-4520-483f-bfc2-2b9033767d7b" />
<Keyword Index="AssetId" Term="434206e1-4520-483f-bfc2-2b9033767d7b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="434206e1-4520-483f-bfc2-2b9033767d7b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\44b0a830-3f34-486e-bb63-a6d8c743159c.xml" RLTitle="Reset a Computer Account">
<Attr Name="assetid" Value="44b0a830-3f34-486e-bb63-a6d8c743159c" />
<Keyword Index="AssetId" Term="44b0a830-3f34-486e-bb63-a6d8c743159c" />
<Keyword Index="AssetId" Term="44b0a830-3f34-486e-bb63-a6d8c743159c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="44b0a830-3f34-486e-bb63-a6d8c743159c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\553bfdb0-153a-43af-b161-93bfac2ff131.xml" RLTitle="Delete a User Account">
<Attr Name="assetid" Value="553bfdb0-153a-43af-b161-93bfac2ff131" />
<Keyword Index="AssetId" Term="553bfdb0-153a-43af-b161-93bfac2ff131" />
<Keyword Index="AssetId" Term="553bfdb0-153a-43af-b161-93bfac2ff1311033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="553bfdb0-153a-43af-b161-93bfac2ff131" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\58ac6e0a-33ef-4330-bc8e-cf62978f7f54.xml" RLTitle="Understanding Domains">
<Attr Name="assetid" Value="58ac6e0a-33ef-4330-bc8e-cf62978f7f54" />
<Keyword Index="AssetId" Term="58ac6e0a-33ef-4330-bc8e-cf62978f7f54" />
<Keyword Index="AssetId" Term="58ac6e0a-33ef-4330-bc8e-cf62978f7f541033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="58ac6e0a-33ef-4330-bc8e-cf62978f7f54" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5d793e70-e0f9-424f-869b-cbbe52d75fd4.xml" RLTitle="Assign User Rights to a Group in AD DS">
<Attr Name="assetid" Value="5d793e70-e0f9-424f-869b-cbbe52d75fd4" />
<Keyword Index="AssetId" Term="5d793e70-e0f9-424f-869b-cbbe52d75fd4" />
<Keyword Index="AssetId" Term="5d793e70-e0f9-424f-869b-cbbe52d75fd41033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5d793e70-e0f9-424f-869b-cbbe52d75fd4" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5de13a27-6ca4-442e-9995-e5eae2a0d072.xml" RLTitle="Tasks to Delegate">
<Attr Name="assetid" Value="5de13a27-6ca4-442e-9995-e5eae2a0d072" />
<Keyword Index="AssetId" Term="5de13a27-6ca4-442e-9995-e5eae2a0d072" />
<Keyword Index="AssetId" Term="5de13a27-6ca4-442e-9995-e5eae2a0d0721033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5de13a27-6ca4-442e-9995-e5eae2a0d072" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5f29b1fa-f94d-483e-9e3b-531d20757f73.xml" RLTitle="Active Directory Users and Computers">
<Attr Name="assetid" Value="5f29b1fa-f94d-483e-9e3b-531d20757f73" />
<Keyword Index="AssetId" Term="5f29b1fa-f94d-483e-9e3b-531d20757f73" />
<Keyword Index="AssetId" Term="5f29b1fa-f94d-483e-9e3b-531d20757f731033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="General" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5f29b1fa-f94d-483e-9e3b-531d20757f73" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34.xml" RLTitle="Troubleshooting Active Directory Users and Computers">
<Attr Name="assetid" Value="61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34" />
<Keyword Index="AssetId" Term="61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34" />
<Keyword Index="AssetId" Term="61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b341033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\672be588-abcc-47fc-ac73-d05628639d4c.xml" RLTitle="Move a User Account">
<Attr Name="assetid" Value="672be588-abcc-47fc-ac73-d05628639d4c" />
<Keyword Index="AssetId" Term="672be588-abcc-47fc-ac73-d05628639d4c" />
<Keyword Index="AssetId" Term="672be588-abcc-47fc-ac73-d05628639d4c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="672be588-abcc-47fc-ac73-d05628639d4c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6810ead7-8293-433d-b79c-2fb3c56a9167.xml" RLTitle="Create a New Computer Account">
<Attr Name="assetid" Value="6810ead7-8293-433d-b79c-2fb3c56a9167" />
<Keyword Index="AssetId" Term="6810ead7-8293-433d-b79c-2fb3c56a9167" />
<Keyword Index="AssetId" Term="6810ead7-8293-433d-b79c-2fb3c56a91671033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6810ead7-8293-433d-b79c-2fb3c56a9167" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6b069902-87f7-4779-928b-2da7db495088.xml" RLTitle="Reset a User Password">
<Attr Name="assetid" Value="6b069902-87f7-4779-928b-2da7db495088" />
<Keyword Index="AssetId" Term="6b069902-87f7-4779-928b-2da7db495088" />
<Keyword Index="AssetId" Term="6b069902-87f7-4779-928b-2da7db4950881033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6b069902-87f7-4779-928b-2da7db495088" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7155834b-a660-4bd2-a1ae-878d07d62600.xml" RLTitle="Change a User's Primary Group">
<Attr Name="assetid" Value="7155834b-a660-4bd2-a1ae-878d07d62600" />
<Keyword Index="AssetId" Term="7155834b-a660-4bd2-a1ae-878d07d62600" />
<Keyword Index="AssetId" Term="7155834b-a660-4bd2-a1ae-878d07d626001033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7155834b-a660-4bd2-a1ae-878d07d62600" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\72701088-d288-418f-802c-2c6371d8e471.xml" RLTitle="Convert a Group to Another Type">
<Attr Name="assetid" Value="72701088-d288-418f-802c-2c6371d8e471" />
<Keyword Index="AssetId" Term="72701088-d288-418f-802c-2c6371d8e471" />
<Keyword Index="AssetId" Term="72701088-d288-418f-802c-2c6371d8e4711033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="72701088-d288-418f-802c-2c6371d8e471" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7bfa448a-ebe0-4bd3-a60a-4728a2143f57.xml" RLTitle="Create a New Organizational Unit">
<Attr Name="assetid" Value="7bfa448a-ebe0-4bd3-a60a-4728a2143f57" />
<Keyword Index="AssetId" Term="7bfa448a-ebe0-4bd3-a60a-4728a2143f57" />
<Keyword Index="AssetId" Term="7bfa448a-ebe0-4bd3-a60a-4728a2143f571033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7bfa448a-ebe0-4bd3-a60a-4728a2143f57" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7dabf986-cead-4d5e-968a-564d0c5bdec0.xml" RLTitle="Managing Computers">
<Attr Name="assetid" Value="7dabf986-cead-4d5e-968a-564d0c5bdec0" />
<Keyword Index="AssetId" Term="7dabf986-cead-4d5e-968a-564d0c5bdec0" />
<Keyword Index="AssetId" Term="7dabf986-cead-4d5e-968a-564d0c5bdec01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7dabf986-cead-4d5e-968a-564d0c5bdec0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7fd8bd79-4974-42e0-a80f-25e00c7a5481.xml" RLTitle="Manage the Domain Using a Different Domain Controller">
<Attr Name="assetid" Value="7fd8bd79-4974-42e0-a80f-25e00c7a5481" />
<Keyword Index="AssetId" Term="7fd8bd79-4974-42e0-a80f-25e00c7a5481" />
<Keyword Index="AssetId" Term="7fd8bd79-4974-42e0-a80f-25e00c7a54811033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7fd8bd79-4974-42e0-a80f-25e00c7a5481" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8008691d-1730-4e38-bed0-0138a99c0a9b.xml" RLTitle="Computer Properties - Delegation tab">
<Attr Name="assetid" Value="8008691d-1730-4e38-bed0-0138a99c0a9b" />
<Keyword Index="AssetId" Term="8008691d-1730-4e38-bed0-0138a99c0a9b" />
<Keyword Index="AssetId" Term="8008691d-1730-4e38-bed0-0138a99c0a9b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8008691d-1730-4e38-bed0-0138a99c0a9b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8157d7f8-5977-4590-9643-8e0f5525f3e9.xml" RLTitle="Managing Users">
<Attr Name="assetid" Value="8157d7f8-5977-4590-9643-8e0f5525f3e9" />
<Keyword Index="AssetId" Term="8157d7f8-5977-4590-9643-8e0f5525f3e9" />
<Keyword Index="AssetId" Term="8157d7f8-5977-4590-9643-8e0f5525f3e91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8157d7f8-5977-4590-9643-8e0f5525f3e9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\82790c5d-203b-4e44-8f3f-8e04b1a7c69f.xml" RLTitle="Delete a Computer Account">
<Attr Name="assetid" Value="82790c5d-203b-4e44-8f3f-8e04b1a7c69f" />
<Keyword Index="AssetId" Term="82790c5d-203b-4e44-8f3f-8e04b1a7c69f" />
<Keyword Index="AssetId" Term="82790c5d-203b-4e44-8f3f-8e04b1a7c69f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="82790c5d-203b-4e44-8f3f-8e04b1a7c69f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\85e93458-3b02-4613-86f1-b82784910775.xml" RLTitle="Managing Domains">
<Attr Name="assetid" Value="85e93458-3b02-4613-86f1-b82784910775" />
<Keyword Index="AssetId" Term="85e93458-3b02-4613-86f1-b82784910775" />
<Keyword Index="AssetId" Term="85e93458-3b02-4613-86f1-b827849107751033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="85e93458-3b02-4613-86f1-b82784910775" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\881864ff-6346-4047-a264-0c153823e8a6.xml" RLTitle="Understanding Organizational Units">
<Attr Name="assetid" Value="881864ff-6346-4047-a264-0c153823e8a6" />
<Keyword Index="AssetId" Term="881864ff-6346-4047-a264-0c153823e8a6" />
<Keyword Index="AssetId" Term="881864ff-6346-4047-a264-0c153823e8a61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="881864ff-6346-4047-a264-0c153823e8a6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0.xml" RLTitle="Prepopulating Passwords">
<Attr Name="assetid" Value="8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0" />
<Keyword Index="AssetId" Term="8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0" />
<Keyword Index="AssetId" Term="8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a4b1413f-8027-4d81-b198-4810ed44c06d.xml" RLTitle="Understanding Computer Accounts">
<Attr Name="assetid" Value="a4b1413f-8027-4d81-b198-4810ed44c06d" />
<Keyword Index="AssetId" Term="a4b1413f-8027-4d81-b198-4810ed44c06d" />
<Keyword Index="AssetId" Term="a4b1413f-8027-4d81-b198-4810ed44c06d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a4b1413f-8027-4d81-b198-4810ed44c06d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a909b74f-4d83-4366-8937-cfb3b8261f3a.xml" RLTitle="User Properties - Account Tab">
<Attr Name="assetid" Value="a909b74f-4d83-4366-8937-cfb3b8261f3a" />
<Keyword Index="AssetId" Term="a909b74f-4d83-4366-8937-cfb3b8261f3a" />
<Keyword Index="AssetId" Term="a909b74f-4d83-4366-8937-cfb3b8261f3a1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a909b74f-4d83-4366-8937-cfb3b8261f3a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ae799df1-b28d-49b5-a575-8dd6d5a5e4fd.xml" RLTitle="Raise Domain Functional Level Dialog Box">
<Attr Name="assetid" Value="ae799df1-b28d-49b5-a575-8dd6d5a5e4fd" />
<Keyword Index="AssetId" Term="ae799df1-b28d-49b5-a575-8dd6d5a5e4fd" />
<Keyword Index="AssetId" Term="ae799df1-b28d-49b5-a575-8dd6d5a5e4fd1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ae799df1-b28d-49b5-a575-8dd6d5a5e4fd" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\aeeee0c0-9294-4060-af36-dd98f183a150.xml" RLTitle="Manage a Different Domain">
<Attr Name="assetid" Value="aeeee0c0-9294-4060-af36-dd98f183a150" />
<Keyword Index="AssetId" Term="aeeee0c0-9294-4060-af36-dd98f183a150" />
<Keyword Index="AssetId" Term="aeeee0c0-9294-4060-af36-dd98f183a1501033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="aeeee0c0-9294-4060-af36-dd98f183a150" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b2e6531e-a311-4e44-b6fd-ab22c499d65c.xml" RLTitle="Advanced Password Replication Policy Dialog Box - Policy Usage Tab">
<Attr Name="assetid" Value="b2e6531e-a311-4e44-b6fd-ab22c499d65c" />
<Keyword Index="AssetId" Term="b2e6531e-a311-4e44-b6fd-ab22c499d65c" />
<Keyword Index="AssetId" Term="b2e6531e-a311-4e44-b6fd-ab22c499d65c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b2e6531e-a311-4e44-b6fd-ab22c499d65c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b701ce63-d235-46d0-86ba-426ad9761a40.xml" RLTitle="Move a Computer Account">
<Attr Name="assetid" Value="b701ce63-d235-46d0-86ba-426ad9761a40" />
<Keyword Index="AssetId" Term="b701ce63-d235-46d0-86ba-426ad9761a40" />
<Keyword Index="AssetId" Term="b701ce63-d235-46d0-86ba-426ad9761a401033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b701ce63-d235-46d0-86ba-426ad9761a40" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b9468599-b1a4-43e7-976f-934d432a5aac.xml" RLTitle="User Properties - Profile Tab">
<Attr Name="assetid" Value="b9468599-b1a4-43e7-976f-934d432a5aac" />
<Keyword Index="AssetId" Term="b9468599-b1a4-43e7-976f-934d432a5aac" />
<Keyword Index="AssetId" Term="b9468599-b1a4-43e7-976f-934d432a5aac1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b9468599-b1a4-43e7-976f-934d432a5aac" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c12616cc-b6bb-4a0e-83f0-dee3ca58896e.xml" RLTitle="Create a New User Account">
<Attr Name="assetid" Value="c12616cc-b6bb-4a0e-83f0-dee3ca58896e" />
<Keyword Index="AssetId" Term="c12616cc-b6bb-4a0e-83f0-dee3ca58896e" />
<Keyword Index="AssetId" Term="c12616cc-b6bb-4a0e-83f0-dee3ca58896e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c12616cc-b6bb-4a0e-83f0-dee3ca58896e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c27b8ce6-573b-44d6-a247-29b43e298ec9.xml" RLTitle="Permissions">
<Attr Name="assetid" Value="c27b8ce6-573b-44d6-a247-29b43e298ec9" />
<Keyword Index="AssetId" Term="c27b8ce6-573b-44d6-a247-29b43e298ec9" />
<Keyword Index="AssetId" Term="c27b8ce6-573b-44d6-a247-29b43e298ec91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c27b8ce6-573b-44d6-a247-29b43e298ec9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c6e98d67-ec0c-4342-b6ee-cee48f37060b.xml" RLTitle="Delegate Control of an Organizational Unit">
<Attr Name="assetid" Value="c6e98d67-ec0c-4342-b6ee-cee48f37060b" />
<Keyword Index="AssetId" Term="c6e98d67-ec0c-4342-b6ee-cee48f37060b" />
<Keyword Index="AssetId" Term="c6e98d67-ec0c-4342-b6ee-cee48f37060b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c6e98d67-ec0c-4342-b6ee-cee48f37060b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\da258507-809b-4e7b-8a2a-ead7e03beca5.xml" RLTitle="Change <Domain> or <Forest> Dialog Box">
<Attr Name="assetid" Value="da258507-809b-4e7b-8a2a-ead7e03beca5" />
<Keyword Index="AssetId" Term="da258507-809b-4e7b-8a2a-ead7e03beca5" />
<Keyword Index="AssetId" Term="da258507-809b-4e7b-8a2a-ead7e03beca51033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="da258507-809b-4e7b-8a2a-ead7e03beca5" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\da2654f8-4279-496a-bead-fba880a69c43.xml" RLTitle="Disable or Enable a Computer Account">
<Attr Name="assetid" Value="da2654f8-4279-496a-bead-fba880a69c43" />
<Keyword Index="AssetId" Term="da2654f8-4279-496a-bead-fba880a69c43" />
<Keyword Index="AssetId" Term="da2654f8-4279-496a-bead-fba880a69c431033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="da2654f8-4279-496a-bead-fba880a69c43" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\db8d1c77-d61b-45af-b3c9-8019bab5358f.xml" RLTitle="Understanding Group Accounts">
<Attr Name="assetid" Value="db8d1c77-d61b-45af-b3c9-8019bab5358f" />
<Keyword Index="AssetId" Term="db8d1c77-d61b-45af-b3c9-8019bab5358f" />
<Keyword Index="AssetId" Term="db8d1c77-d61b-45af-b3c9-8019bab5358f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="db8d1c77-d61b-45af-b3c9-8019bab5358f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\dce5a1c3-3e98-46ab-ae10-1304712b0c85.xml" RLTitle="Set Logon Hours">
<Attr Name="assetid" Value="dce5a1c3-3e98-46ab-ae10-1304712b0c85" />
<Keyword Index="AssetId" Term="dce5a1c3-3e98-46ab-ae10-1304712b0c85" />
<Keyword Index="AssetId" Term="dce5a1c3-3e98-46ab-ae10-1304712b0c851033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="dce5a1c3-3e98-46ab-ae10-1304712b0c85" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\de3c0c98-53a7-49dc-b3a4-32967cc9c1ec.xml" RLTitle="Add a Computer Account to a Group">
<Attr Name="assetid" Value="de3c0c98-53a7-49dc-b3a4-32967cc9c1ec" />
<Keyword Index="AssetId" Term="de3c0c98-53a7-49dc-b3a4-32967cc9c1ec" />
<Keyword Index="AssetId" Term="de3c0c98-53a7-49dc-b3a4-32967cc9c1ec1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="de3c0c98-53a7-49dc-b3a4-32967cc9c1ec" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\df4fe212-1b7e-4ba7-bf4b-2ea273fce40c.xml" RLTitle="Create a New Group">
<Attr Name="assetid" Value="df4fe212-1b7e-4ba7-bf4b-2ea273fce40c" />
<Keyword Index="AssetId" Term="df4fe212-1b7e-4ba7-bf4b-2ea273fce40c" />
<Keyword Index="AssetId" Term="df4fe212-1b7e-4ba7-bf4b-2ea273fce40c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="df4fe212-1b7e-4ba7-bf4b-2ea273fce40c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e20a5fc2-cd8b-4ede-bbfc-3470d56f4997.xml" RLTitle="Map a Certificate to a User Account">
<Attr Name="assetid" Value="e20a5fc2-cd8b-4ede-bbfc-3470d56f4997" />
<Keyword Index="AssetId" Term="e20a5fc2-cd8b-4ede-bbfc-3470d56f4997" />
<Keyword Index="AssetId" Term="e20a5fc2-cd8b-4ede-bbfc-3470d56f49971033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e20a5fc2-cd8b-4ede-bbfc-3470d56f4997" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e344ce02-305d-442f-8b08-bc97009a9152.xml" RLTitle="Resources for Active Directory Users and Computers">
<Attr Name="assetid" Value="e344ce02-305d-442f-8b08-bc97009a9152" />
<Keyword Index="AssetId" Term="e344ce02-305d-442f-8b08-bc97009a9152" />
<Keyword Index="AssetId" Term="e344ce02-305d-442f-8b08-bc97009a91521033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e344ce02-305d-442f-8b08-bc97009a9152" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e609485d-96ce-471a-a46b-8547ca64cf87.xml" RLTitle="Change Domain Controllers Dialog Box">
<Attr Name="assetid" Value="e609485d-96ce-471a-a46b-8547ca64cf87" />
<Keyword Index="AssetId" Term="e609485d-96ce-471a-a46b-8547ca64cf87" />
<Keyword Index="AssetId" Term="e609485d-96ce-471a-a46b-8547ca64cf871033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e609485d-96ce-471a-a46b-8547ca64cf87" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e.xml" RLTitle="Understanding User Accounts">
<Attr Name="assetid" Value="ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e" />
<Keyword Index="AssetId" Term="ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e" />
<Keyword Index="AssetId" Term="ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\fd89523a-c431-43b4-884f-08e728ad7c92.xml" RLTitle="Read-only Domain Controller Properties - Password Replication Policy Tab">
<Attr Name="assetid" Value="fd89523a-c431-43b4-884f-08e728ad7c92" />
<Keyword Index="AssetId" Term="fd89523a-c431-43b4-884f-08e728ad7c92" />
<Keyword Index="AssetId" Term="fd89523a-c431-43b4-884f-08e728ad7c921033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="GettingStarted" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_AD" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1788" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="fd89523a-c431-43b4-884f-08e728ad7c92" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
</VTopicSet><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpTOC>
<HelpTOC xmlns="http://schemas.microsoft.com/help/toc/2004/11" DTDVersion="1.0" Id="dsadmin_TOC" FileVersion="" LangId="1033" ParentNodeIcon="Book" PluginStyle="Hierarchical">
<HelpTOCNode Url="mshelp://windows/?tocid=e5b08be9-02b4-425b-b7ea-cbe6e4d5ce42" Title="">
<HelpTOCNode Url="mshelp://windows/?id=5f29b1fa-f94d-483e-9e3b-531d20757f73" Title="Active Directory Users and Computers">
<HelpTOCNode Url="mshelp://windows/?id=8157d7f8-5977-4590-9643-8e0f5525f3e9" Title="Managing Users">
<HelpTOCNode Url="mshelp://windows/?id=ef9fd6f4-5a9a-4e98-bbdc-552c6427bd5e" Title="Understanding User Accounts" />
<HelpTOCNode Url="mshelp://windows/?id=c12616cc-b6bb-4a0e-83f0-dee3ca58896e" Title="Create a New User Account" />
<HelpTOCNode Url="mshelp://windows/?id=6b069902-87f7-4779-928b-2da7db495088" Title="Reset a User Password" />
<HelpTOCNode Url="mshelp://windows/?id=379993bd-2380-4f6b-b4e0-7ed38e606485" Title="Copy a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=672be588-abcc-47fc-ac73-d05628639d4c" Title="Move a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=dce5a1c3-3e98-46ab-ae10-1304712b0c85" Title="Set Logon Hours" />
<HelpTOCNode Url="mshelp://windows/?id=1be639a1-e774-4b48-af43-d13a893765c3" Title="Disable or Enable a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=e20a5fc2-cd8b-4ede-bbfc-3470d56f4997" Title="Map a Certificate to a User Account" />
<HelpTOCNode Url="mshelp://windows/?id=7155834b-a660-4bd2-a1ae-878d07d62600" Title="Change a User's Primary Group" />
<HelpTOCNode Url="mshelp://windows/?id=553bfdb0-153a-43af-b161-93bfac2ff131" Title="Delete a User Account" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=32fd0ba0-fb10-4b24-be43-b87bcaa9253f" Title="Managing Groups">
<HelpTOCNode Url="mshelp://windows/?id=db8d1c77-d61b-45af-b3c9-8019bab5358f" Title="Understanding Group Accounts" />
<HelpTOCNode Url="mshelp://windows/?id=df4fe212-1b7e-4ba7-bf4b-2ea273fce40c" Title="Create a New Group" />
<HelpTOCNode Url="mshelp://windows/?id=434206e1-4520-483f-bfc2-2b9033767d7b" Title="Add a Member to a Group" />
<HelpTOCNode Url="mshelp://windows/?id=72701088-d288-418f-802c-2c6371d8e471" Title="Convert a Group to Another Type" />
<HelpTOCNode Url="mshelp://windows/?id=20cee0f3-3cb8-48e8-8c03-a8be94e8f708" Title="Change Group Scope" />
<HelpTOCNode Url="mshelp://windows/?id=415e69ad-c665-4165-9d2b-b8d41f95310b" Title="Delete a Group" />
<HelpTOCNode Url="mshelp://windows/?id=2d02574b-94ed-4b9b-bd4a-5a5f91030d84" Title="Find Groups in Which a User is a Member" />
<HelpTOCNode Url="mshelp://windows/?id=5d793e70-e0f9-424f-869b-cbbe52d75fd4" Title="Assign User Rights to a Group in AD DS" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=7dabf986-cead-4d5e-968a-564d0c5bdec0" Title="Managing Computers">
<HelpTOCNode Url="mshelp://windows/?id=a4b1413f-8027-4d81-b198-4810ed44c06d" Title="Understanding Computer Accounts" />
<HelpTOCNode Url="mshelp://windows/?id=6810ead7-8293-433d-b79c-2fb3c56a9167" Title="Create a New Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=de3c0c98-53a7-49dc-b3a4-32967cc9c1ec" Title="Add a Computer Account to a Group" />
<HelpTOCNode Url="mshelp://windows/?id=82790c5d-203b-4e44-8f3f-8e04b1a7c69f" Title="Delete a Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=1c4dcbb0-f996-4166-81a7-c23eb3560b6b" Title="Manage a Remote Computer" />
<HelpTOCNode Url="mshelp://windows/?id=b701ce63-d235-46d0-86ba-426ad9761a40" Title="Move a Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=44b0a830-3f34-486e-bb63-a6d8c743159c" Title="Reset a Computer Account" />
<HelpTOCNode Url="mshelp://windows/?id=da2654f8-4279-496a-bead-fba880a69c43" Title="Disable or Enable a Computer Account" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=85e93458-3b02-4613-86f1-b82784910775" Title="Managing Domains">
<HelpTOCNode Url="mshelp://windows/?id=58ac6e0a-33ef-4330-bc8e-cf62978f7f54" Title="Understanding Domains" />
<HelpTOCNode Url="mshelp://windows/?id=aeeee0c0-9294-4060-af36-dd98f183a150" Title="Manage a Different Domain" />
<HelpTOCNode Url="mshelp://windows/?id=7fd8bd79-4974-42e0-a80f-25e00c7a5481" Title="Manage the Domain Using a Different Domain Controller" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=078499ae-fba6-4a2c-9e90-1f06c118972b" Title="Managing Organizational Units">
<HelpTOCNode Url="mshelp://windows/?id=881864ff-6346-4047-a264-0c153823e8a6" Title="Understanding Organizational Units" />
<HelpTOCNode Url="mshelp://windows/?id=7bfa448a-ebe0-4bd3-a60a-4728a2143f57" Title="Create a New Organizational Unit" />
<HelpTOCNode Url="mshelp://windows/?id=300bd71e-5ab4-40c2-9e43-8cfea26941d0" Title="Delete an Organizational Unit" />
<HelpTOCNode Url="mshelp://windows/?id=2cafa789-a640-488a-89ff-8ed398d78385" Title="Move an Organizational Unit" />
<HelpTOCNode Url="mshelp://windows/?id=c6e98d67-ec0c-4342-b6ee-cee48f37060b" Title="Delegate Control of an Organizational Unit" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=61e0ce4b-bcd4-43a5-8ea1-aadfec6b4b34" Title="Troubleshooting Active Directory Users and Computers" />
<HelpTOCNode Url="mshelp://windows/?id=e344ce02-305d-442f-8b08-bc97009a9152" Title="Resources for Active Directory Users and Computers" />
<HelpTOCNode Url="mshelp://windows/?id=1d88c151-33eb-4b49-8343-cedb1a7c8acd" Title="User Interface: Active Directory Users and Computers">
<HelpTOCNode Url="mshelp://windows/?id=3c461cb2-9565-4fc2-a280-421b6e88741c" Title="<Object> Properties - Object tab" />
<HelpTOCNode Url="mshelp://windows/?id=b9468599-b1a4-43e7-976f-934d432a5aac" Title="User Properties - Profile Tab" />
<HelpTOCNode Url="mshelp://windows/?id=a909b74f-4d83-4366-8937-cfb3b8261f3a" Title="User Properties - Account Tab" />
<HelpTOCNode Url="mshelp://windows/?id=8008691d-1730-4e38-bed0-0138a99c0a9b" Title="Computer Properties - Delegation tab" />
<HelpTOCNode Url="mshelp://windows/?id=fd89523a-c431-43b4-884f-08e728ad7c92" Title="Read-only Domain Controller Properties - Password Replication Policy Tab" />
<HelpTOCNode Url="mshelp://windows/?id=b2e6531e-a311-4e44-b6fd-ab22c499d65c" Title="Advanced Password Replication Policy Dialog Box - Policy Usage Tab" />
<HelpTOCNode Url="mshelp://windows/?id=062ec262-0571-493d-9c7c-3515425cc7cf" Title="Advanced Password Replication Policy Dialog Box - Resultant Policy Tab" />
<HelpTOCNode Url="mshelp://windows/?id=8fd15f44-31f3-4ef9-a3f9-66eba9bd9ea0" Title="Prepopulating Passwords" />
<HelpTOCNode Url="mshelp://windows/?id=3f8518bf-0b30-484b-9018-accc769cf3a3" Title="New Object - Organizational Unit Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=da258507-809b-4e7b-8a2a-ead7e03beca5" Title="Change <Domain> or <Forest> Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=e609485d-96ce-471a-a46b-8547ca64cf87" Title="Change Domain Controllers Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=ae799df1-b28d-49b5-a575-8dd6d5a5e4fd" Title="Raise Domain Functional Level Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=1ae39f7c-7414-4a7f-9b1e-9b0647bda0cb" Title="Delegation of Control Wizard">
<HelpTOCNode Url="mshelp://windows/?id=5de13a27-6ca4-442e-9995-e5eae2a0d072" Title="Tasks to Delegate" />
<HelpTOCNode Url="mshelp://windows/?id=14b544e2-9535-4079-ba47-774073dbb988" Title="Active Directory Object Type" />
<HelpTOCNode Url="mshelp://windows/?id=c27b8ce6-573b-44d6-a247-29b43e298ec9" Title="Permissions" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
</HelpTOC><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="AssetId" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="BestBet" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="LinkTerm" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="SubjectTerm" /> Q P$ : ]T¥Њ ZK(ZkZZ$фVզ*iFf w һO{~̨5fAYMMvҷԂǖA0tt+$ڱ%Ԗ+7N
A*JL2B1u۲qqB$̭_܈ UՁC9| W>t$$XCo9: SD $)r 6F[KWӝbEn{#&O gAn'7 "7."7>5#7N"tsxJB?U-쟁[[ Y 7n=&щ 'nA3nrC`:yG<^ T{ -[ qQ 6in|aBO^ iKgڑl~#717:L=)D<Jr$MgѤ\87qˍG_'G
[(&r Mg1\z8Urr7!r70!::' t)W#+7. (l_ M}'a+uAMq^Mܸ&xdO.iQړi]75r76r9=ܸϊ&nSFxN2:"^lBe /JWz.'W>d
m"(9uX誎ޝVgKTAԆ穧K V=_NA9Sh'5רގXq9<ы+#~؝aeX9xF.'Q]08Uh} *|>L{ Q4g{hμyev-?}t#a@}w< uQ 99Bn3/|^,";r#W/HQ~ r<$ȃ_G$s".\ G/!HBN0g/r0$\,oZM"+&%
~eȶwzOEv'~qȁEyxѪ:!w;*{E?-sUdEo {LA:\P 1Jv3 ]lbMڽ&xޔR^K!ϋ t`๘
lω,HX"_uw ;:Uy' yīxO8ȅ l2E"fǃDD/P(ԊE`+rE+XľbW(||zE"nǯ+{c/BJ6 ǗDbX)y lj]"ܭE1DSB ݈dq$|՜/Cg[E"~P_:zE肺/,F0U5@"ֻ:X̢Z ,nuױb^~ v,ůl,c1Űv,(űǎ;X$";X,v ^<whnzZ-FZt.8 mZt:kw;Et O }]s]b }t=m'wG;zE=A#Ӿw v,n#ћ tIfr3"`b,@ M\;6\Z[ v
o,v\<X!t1bbN;Z6p-Xud"b'ْf;.Nv&qw3bebE1;/fv,8^YھؑsygbbEp;[lؙz7E ؿ . h:CGNʿ,)rZ< MVm5`liNmQ6I
6[<Nsڲ U=}t'noп 8 @8lj QBɊ $
A =ANJ1C6ŝzLlѪ&~2?s;$7'nJGQ$zaB9=|cň<F 5ai4$IL&qXMD4h,ӣIXVFѬ&D35gj4h$ѓxF&QZMh4jh$tIVF&b\MD5sj4h$֫IM&1]MDy54jh$䫣IWFѯ&_MD5k4hITX8FMD54
kh $DIXFQ&bMD5k4 h$>IYF&QdMl4)khV$IxYF&bfMD5k49h$vIYFMbD4h$FQ&D84hIZ8F&9ĥ54Mkh$HF&bjMui4$ڭITZF&kMbD54akh$I8[F&bmMD5k4qh$ѓxFM"y4i$F"M}i4$I[F&oMbD54i$IP&@5hI \F&QpMD 5h,ԣIX\FD4ILFMb4k4y;(_*********************************************************^GS?G"P3"TDPC"@h(E$
4"BX8C8C"Fq(" ("r"DPIC4"PDd
E0("Br""%r("bPDEDPPE$TPDdEDXPE\PD ̡yC5"2("$jEDfPEjPD
EH͡ 5"B9("jEDtP ϡ С ѡ :ACQ:C:aCq:C5"P("u""Ru("2PD
Eh:C:\C("u"DPE$x
lסt |ءU @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ 썋gz["",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,oyŬ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ʡ@zOߵGmIO!~'Iڲu&zpN#C_kvLI] IMΡI:>OX5$1Ɇ* ^C=X/:Þa2_I@b H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ @ H $H@ $ S> `C0! C`!0 `C0! C`!0 `C0! C`!0 `C0! C`!0 `C0! C`!0 `C0! C`!0 `C0! C`!0 `C0! C`!0 `C0! C`CYQbwc15z,gj?ّ@r P PP PP PP PP PP PP P
@@@@@@@@@@@@@@@
}
8=(@@@@@@@|r (bP PP PP PP 1
@,
֔E@@@@@@@@@@@@@@@@
h"tsi`@
5u5@Xh
5a (@
h6Iy Py'noп 8 @8@xB$ C˗ʠ
h
:1PC 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C @>f`l8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Άgt
,]J !b!bȇ@EC1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C >~ll8Ά8ll8Ά8ll8Ά8lpF:#l8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8lt
g>C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C?L.y3c䡇(((lؿ?PDl0Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8ll8Ά8lׁKb!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!}' C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 13!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!b!c@C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C1C 1C>)C1C 1(c 5'=:Koy2?;L>tEԟ_rskXy! y''( 7~իpFoWAGc}Guc=Z;{ uլo<:\oK;OH͏?Oi{ 7@?8>PVs֠}OIL }ӳx9]Eт+9̺z@J ;J_tf _1YNo wnϼ^蝙PgB :gv?J*kQnӌ%UvIO- vƊQ j%qG>SZgU SY!㗽'BM3}"p+g X4 ?R/G`k{axGYቓlݦf0w_\!fsm{ݴ K{&ur3ufhO Pa{n2>SkIǾ3,f .hnd0iH&N뉪2Ē9`FlPSWgR6gr}u(J٩pFpfL]2m #? (A& l(%- y7CL^8-]61# IJӴb =MТ>{)tfBu aʘg~uuHB[k_[1D%?t'MyijP5~E) xE]:DzuYI9I?
S
wNd؏zWL.iJeڞԌ,* nXua9_a\bp)ي }.J\=Fy%b,$.ofyy]
\z툁]4W? In!jS>#DĮhU ; g%h^<Z͞.ؿJ
%Ҡ$ [$cJ,=< n*)KV77)T_S^ufX d^q`s^V}zHm$Rۇ ^bjm$ٯe*oR[-Oɱl0Pri.v-fb #mv&X,57cIJSʔS0XnOt9ﯞCEkK
nDa;2Yvuvf7_zM1 busv{?, ϖn<5vx[Ʈ}Ol27þ{q3Ex|1:^cO>ۯT#[d懷Q v
ά˃.?Vr[ k$PlH?˝uH=V:{hIzD fϲͲK (!%{lF3&Su &F9:ĉ?fmU$;lK} N ekͬȷ4jv[ydl֭Avٳ"*;mө5M)f{نϨH:2)NQA2fmUp{6-&h.(7%Q sg<zdz9=l _D`*V/ӎwEe g2H)Oƶv{/;s>0$7UIT
d,`Y, Ek{R}ޥ曨vLTjx;8q)eۚ6%L^J`J ,
_C?LGj DϷXM*Lw3W0: bO +QR̕er6JGv;PCX"ӌh.Xw\;Mx&J$Uy'\;>%-wi?
\rE($'5?%
+Aw?`㯩Cov۞FuYQak_ 7y2G=wzJoN'Os&\E0pzEV=6v^,t] rɝQ[:ƺK^:X
(w 6UJv#dG9 =)G>`pi^.G8==u֜U{%l*H-S zr:f4YN=
Kk轅429gi qggp7Pi-N@In D\c?Xȍ8sKVwR,okO$9B4Ӻ= hUXU/M;HYG/S] fOU)0vErʥܙWGP[ JUUrlR3Սݪ1L,J҄Du23%vEC\]7w VW
p~/].FSz[m飺 ݡEQo[mh;1;GͥQ*
@`v/n{7=N|<Lq
J vN(F~|R[顏D:]J_skfa6J^ lzX-Ҍ a 5]_,
w睬㳕2HTc)0.h!⻪V5Ѕ7^*.VE{-y-vrZo;nOyp\Hv P|k,PQ?1AWFׯk%Izfd;O(3keAEOpXLAul|U {yI6ao;m_8ʱTi =θ|Xrէ2ͺl7v7\UٱЮ"?X[I־R !FdE Vr{ȱC`'7.lNW՜jZw2Xѭ?vw ) ڸLZ%rzt}Rx
qα_5vd߉itO8-rMvQgxg 7Vmq$[Ov+`?ץx!*\X02`*~{_9'kҟCpKTUwtgh=$` w3'7ҢYejX7WLMjkyÀ@LqJUW9k*ӹ,xk=D/֧to]ޖIǘ73t#4P!J "Z tyMb|ظaݵRyiok4 dhvqd3㫛"ʞ8nbZ;LPZQ6LIͫme,Q
v,Oe-2%{vܱcb|fQjU\ UfjQ ;gzp J\>
=%˷]'_}zG +AzsbNʥD%FZ}~8r^ys_h8TGu!#_*m=W1Ud~X
>.A:no~_[O/">Si\<ecL pmlS}f;u}tNd.6's !o y@&KWd6Jepӕ/KJn " i_=\ij7L DzJ cvH;ǵZ qfϚ
[:6%S:̹#
nOυX C/. _ 7W7k"Cnαo{7H}LVclj *"$R8i,⬊=(3_fl?bLs ^eսKbm =km˰vۑ Jf TsƶIPﱬzbIȚtSAoܗzRQYGAgI2vu14 sKKٽUpM3+5e6['-mlzѱ{H'1q'ߛA/n&</gM
(>u:[d}m+Q`4zeW29-J'phXu|+Lh !G{ѾV*T&(zlT'{TF Sڗ^3ZOj >~Ju+)+1'Z-,Vl*rD|֤)V-Vywip cln49J 1j^ ^f') ] yqC,<.tFq~p 9o vDY'i6iJU Nm7/V
^29f(ZNkCb!pg-^QP/ h6,)&?V'iFwpY^`J{2v,BZ5R<JP ̄{ cZ3Iflv%" j>/fb kDٲ 9hSm2? Qn/Z'JM*/O|@VM~
.=R97/P mm]S*\a?L|PSOq_q<2A+wS
z.'>@ {ޘ53^kTŗ C첹jbt,];U*mq{*@w%d?kdD
eIR AM㼺#5ϧ=p g] =Y(/$fmBwsemm&~shSpsj$SDo1TNt88Y8Je N| sj&Y2=%K.6'^[27M%UKh4l-vW2an9xv$ ABXdv} /GN;MGPMФ:j(3mׂg46<y xTG!/fSVԻS˟qս[&͑-^mK 'f嘪>ϳZSX:7 L=I+N k* R:?47f (zOE))E}AOM72ڈUAAmLSW_k?dzE< XX;L܃.qd@`O1 Si1#woQ|6K혇E,%>4LC bir=v[=$q2JYURo}!q :87kTi{rw2 8vJ.46.E.J!} G f譽_x".F|֍dw(A6@WZ4wQ]ﶺ8Иbĺ CvhL[|g@JѥkxFB FC8Y Zҭ\xJ6%Uzm \$_=XIh{hů? m#|H HN&0.\&zf=`~= ܳ#P8, _?ڏ xiL.oD1w5'c)!6KEH8f4}Ōaatp
o,z91mv1!74 eI 2z9B!
*k,l>Z2? |_.?GdGPO2^}(g:~)QXY 4x1Klo ݯ haZ'9@~gΫuD&[Y6
uez3i#IȝimVr@EI0;dAFǮ1ݏr "o*Qh,:@?j>`UخTXz{x<M(QΥ wN:P *0rPS P>̚|㟢~?%'{pcS?'cz{6o*|ip+ e6al6
aذ6l
Æal6
aذ6l rH9 VۇzUyN ]v\Ga5lMibݻZ nr״T}gS36L^:hBo0M*nyUo'7i!aER*J$жTy s{n}chεo9̂Tɹ~4Ta7\ u0nzιn{bo:P wĕ qWH]Y8U C+KsDG)1D^5e0=X`Q?vݺa҇,~F:T v$۳Ǯ.\yν=3L4R8=@Tw ZNw%|yJReCZuTlpoz]W8ϡ3;ۙ=:Zo?qM&YN.
HrIv7绎&5*-Nlh!2fH٬t݀Nk'L8&~ ޔcQjdW\!4EZsh+ԫ{-O>SI #ur8Ay"Q61٦eٛ%3ozY/ؾ/?(, 2縆lK,PXy剆u^(LN|/MKw+O [3&[jለo rAk2lI"O9gr{+XUs@(6&.zYyqe!LqtVJ7ڃ.;E<B
o ,h^=HU*jQ9v}|Mifxn9,;ؐ["-v@/yFawQ?_ʮaFL>xӏhOk-SUF,Y^(*4c\&MN~LdRr ƾρS%2:~هs1Lh^y|cRI9Må(LrK4 clF۴?V akLPO(+F3ƪ~۾ %ٟSK;ͻ ԥ9ٞz,cgC/` `]nX6%_zjg#<,>/=ʆZW4=alhqsfxnL1_\,\V|MokSTjTA_|ìwȪW]{!ώRoLgÀlAW_%ﰥlcMs#peZsE8@CP?f z
LH7^NVw6eߨ{ Ao7 w)߹."իbhv.mt]APQ!$*+J_p5:vFa5ԴOYm9_KЄ/H'{zc:?%oSmy,Sq$K!eՎs}&gh-
mr45jwlv!c]=_]m?Nf"<s xSrV;&W \),J_0Y<* oEkG&goUs:S.:0cޔ.0^Ӵ/wD ' ՑN{~{1ۮ%OOI˾?IvK7T^5ԯ`!#it ;
?4yvkmFiWH{k\cP]ϭYU~LoS([ f?jJ 3biO
mux2z=*Udr|vakbIF!+%/O'q!C&k=$eJ"qMME7Tv%\mrbL=N!g1L/lk$ִ;k{G1j=ysS=3]"d\*"k{5Vn82le MɄVǞhț=nb _pL}ow·"٩X9)M?Kŗ57źEU߿1TT;24O BnܱțJ@@J5J/bw ЬPjp
5* /sOq-Wǐ-eբ[I.ʥ,)`e?^ߪrEZ V:ywRtzuk%*ˀ0^]-3=Y&Q9Nb}5; vΎ/kmӨ,^ڋ
dSGX8<x6ݞřWMf
]Ѭ\m,6mYYץ*}'mi
fo.Sf[ruU
*
JN=fFbi<LW~>xɭN
R c0Ξm5d @ҌHorU$f1or3E)<%ͫ;*\,Ƿ^<FA{7?#"06LC/
UM.NZY=~xWTԑu*/K8wX *:F" yb5EC!n)n
S+Rm DRU> ;3_g$%U 3a]Whk9ү&:0\omzO &֓cnx.h^Em PU{2;{{b(@umol1>
%0o۔P{?g~*8L)ڂA'" !ߴMXցϳuF&kjX!j3ԉdT*;~-oSG r3 i,i/f&v G߮*S7=n[gt2kaۓR4>kDO#Oc#s"ٰ<ch~KPF2{BƘt_G|nGFw;{KFGғ4ե\{<o96u% k~7O
9뿽%Yhی5LXn^9c̲\oSGSVhl~M }D3.LLgd2l#xVu]]|[oCI GdVM4{ȒCYh{༆rQ N%&)E{/{![[U)[kݙmm +p"^5HkÞBC /YQq~Iʻ4nRfarc|?@ļFh )l
߫ceg*Kep
|2 vĩ =(V;i>S]t
36cS 6LPq7<Ԏ骤 k;Oc_;6.Ǹwi3ΩHJ8@
O,^7eG#ъU UףVEZ}z>PE
=
>_U8o9kRh߉r ֗#+[-ቯ[#'=e|1V[lW{c/O߷ )8xJ㛴*jE, "boJ>گ̅];b
=(kW ɷ\*yr wnk?iƜFȂnGW )u i !럋>U;ۯGe1MVH=n|*.} 0t͗јLD+oJ/=|kI-^ UXeԧY; L4 SC#kz=Mwh*
jmӞ o9o/pj.`NE+ԣpwP:RkW m4GF%ZL1c>٣xdNI~ɒ&7mrO1jqj U
rd_^<>"ju _z9Y?VxRȆw cj^ُƎ&詸M+埰-PZ8;$UH*z徛>MRU Ҧ=T׃߽VTƻ;ԓRr_j
۫Uo܂W7ޘC>2G r$P Q{AMy fڅ;.r{V Sͮ(~zL&=j>/}\"Lxap~NsJa4tn??JM-wOv M{O1iz SEMdVU 톝|c 2b
hfhTT0#lpn_8sTLKBD 'xy]ߎ y^șӝ?(=ʇJIJAwp_'ݟfVn8[Wߦwd~J͗n.Kk Ue-JK2vAh ?ϺʿBhq>&kξ L x)WN˥&1*2& Fxeٲ:Pm$rUŚ6QȤHZ vJNPtv\
/<\WuIx]/ٗҽڝMb|6 l oJk :ho <j[[,#ЈD_'a5 l2~՛K%hzjyYYzTltR{j fʷj Q$lRd`݊2_{M<c k~' <5 T&v(^q"<qG.ѠO$Ip#AKD"jInf %luQJ]fP<`B .
v~4RKTi{:aWN0%jVYߒ@^ |b Hjܩː|}t*+<d/ʫ< 2?3m}Ku=nG17gy1wosQ:u.
"ߏ|yA66>xN=7A,I.aݸt8yY4lB. ) {*E
Eڳ+W~DGbRw?Di=0#t?dɐV'۰Amߏm,
^|#Id$0(YNR~}LQȠn>$8*2ں,zpU[RD-d(iGퟟpJwL_WO*iv_7:-lG۪I 6uVN"Q͊J
/RK)$g "h-^yn^>a&8$SWJ}h# YlXl
v]xS1;KuL6yHT_t!] `V/
dȡ$顚w%me&]@ādu Ԅ7=L5ZdҋNEEM(ztt5~H6s$T["ߤ;Ү& AVcq6=َƱUV4"LZ:D ! SC,% i~\"J"Dćt> -xE+hT/yN&O {Ě^W#?t =wpg'1i̞!Ypt{bm]dX䫾EZ&|feLĖ0w := =Cg *OHR勨qXu \DaWs~ZG,䩝bO[Krlw]]wK:9+
9*ljN%} \GqЊ
RKܶM6WEw4M p'n35MYcĻ6j1_ҬT$hd
*ſ*Eۋd?vR?)rPS ՎwD떆A|Jk/L{=Zrot.C
HUs?KT96Of9? O=W ذ(4|]Xp^{K'!qpB[wި@ P-os'LW QV ^Uȭe:\Z74&.l-GZx< I|m=
2̋=ea:寧?,?h~9$-qfĉٙC[5VQ n{P'-Iٲ)*QCI Y;#g&
?Y(K`\o}=w,ܗ8Ut^~S_>= Ǿ,e%ehIZy7Vmй":3;T xp̤;&z/mpR ,}irMr.)Vx;+fAXTf/*(uWY%Yko5ʮ˔6U
+P
eܸo.ggo&Z|muHݘ[@> p
nw *kYy
a~XpLb%aq Қ
l}j{ԞtEfJ;~3zu,9`Hv7dƳNI[ >V˛>%j &}}N;'5Y fuv՝m^]%^ ?_Q/ w7R6{~)cc |J+gDqMTt:&mZA:= Aݫ s ZdO&w()h?ԅERc32b-ҬٰӏIbİ=yṢV;Kߩ|UA AƑ 6cU)d+$e%¬-OR7 9 dG_Y֣dFzqƤPOt]?I_$W+<K86ˈ?)4FZ4z#b'1aw&xMm7[a '_Q57%8#BhD&|03s C f{۽=h C@{eaxc s?m~Y3RM^'~^%ĪG?.A/v6Jyn 83( T(f']d;ySbTi2l;|2ҳ3ZXCSYE7y^1y`2#urҟmǮ fpզegmQ}U3G*~dW>#wu麇C\P<=*~!~mX[N[dƎ_% rӗnc$P6Os6$P%B/-9:ً`7s
mWRYʑ*$>DҢ
YbeEmatbֿKiɯ[,j
I7@jN w+LV+9WIǧdk7E͎T\/q }
lRנrpQ$lCY]/^T>,[O#[/eO.FaWf,sGq\l"߽ ߢ9OFxۇ3Cs-.|?XrGayM6zA*]YխvZz_.@DKȦ/v"$' +M0MI v<o}̇O7$?Ch7u!j ҇E|_۞>8;ǠN6ioU==uebR;'UkiPA =w 7{"ٔn _;,ʯ}23
UkIzdr[`M=Xg|WJZz=H~tHzt%\.qiU Ts㞣%STny rVnN10>j'BUvdG/ 䨖8. 'ZR ĠnE5"2uX8ގ>+z י XǗqz\P/ 1l9I
^&G0Ѯ;s鲃9#.7M]=FwNa7
!(c (Z
ߗg o>3,=@Zoۃ>/XNG;Ca0[\hT>>#|5o 0wp7^yq }F (gZ61Ww&mhhGtT~edK&uLo땽G#L}v옷}r5ܶeL>[>.湳e5kNv|:LkPnq\{ ipuEۨtW:Pbٺ3՟CQثun%: ʰt K
[&xKx?.}tힷ#{،p we#W"O:RL hRIs D<2BWGTͻ}ꁕGZu
vc[JkRZ#b`3 zIc~ﮌ+V[:thF(_؏ˈN I+dOɃ+J/I)6D Ld;Z~OlSSɯgxR~:d e: CyCTS )EmIЍᅬ Ш[̻j?_ӟD\ k |?5҅m, N
iCQJ:.mRQ塳|9GG b㪆h*ل*7}T8[g}9k\| Q4zhK!jSob͇E{T) Y[7hA*Y\+vNێLbT,
{ƒ+~?0SbQx!M{KƉ (KJ~prNj[Ov b3m/uϚW5^u3 sL iV!g$'fG]#P~t:C_p6z^>ٹ J@]DU7}OEf Z{;7՛K)RS*wCwز{F؉O ʻ^s"C]g?e418=Jj督FZAlIٜEߕoS} I6 JRlLn6~Yh5<N%ǯk/q<{M C5\ ~t:P|z8XٲIե n;TT7;_ 0w{{l9< o졿`
H!֨ͩy[]ޝU,\e%=Om MLc)`GP2eC~~~>7Uy4?9[<R S
qZw>~8t~x?S_i~ 4E#ϘnJ_Px _?G8 v_>?2{?cRC)- 9w_#[!
č4M~sڊXM
A O 3G# BG+eMgd 1'%Vb47"=<<:"v`6(|q~:I3'c'"~| s k> l1}u?C@:^ tS_W?4&~!o(ȵ$my\ZŕȐu ?y`aDr?PC/2g=A}0p983M> ?
Xo&1Hqђ+,x>mrQ-BIRC*1*nCX}};ܴC6#
l/-07.UuOim?3Եå7ks86EK'm 6nϫ6Ԭ~E^@kSkCn[DB<Ji9j NLK` ˥pWdn<~~ReHke_D"r"|vY {ywFEo]6 Rf<l0ll;3(El!\ XHQZMn9Houc@[s> Ez{bM~"㧯 :7Z~|~mycclb&Q<;; Gi-{x+
]=f۹Oо0*|j{ʣ4MkXT5OWgtM I x_?[RjL4XWh7k?ÄJg5*8\-̺.ZG۪1_\B +ͣ2z;N h@l&}؎6UV 3%IXbL-9i`/5;,'H,wZ~DEE_eI2˗[J'ۅ&3`kYZo>W$~v5[S>I
η_ҽs7Úh37VI
{]F8c3~1/8̓ͅ@'G&nV'8?kؙ䛹3[.|/fOY0I~]?`j ~~}gEvg뷟k}}/1?#8;OYa7:qlQ;q$7>v$@Yq@(31ULT++9?K$6\
@T6][byŔ0 T-0c 5)Y
jo# dQ;ƴw ^)9"e{.5c/^hتڪKl|;ا?M+/6]_6f|BK<"U_ff|W9G
Tڮu-1Nr a$w ίS*55u2*ON%&{jJ}M再
|?OY5饫O:n1ӥ*gOctjy#OJ>1ZTSS0,$ʦ D Ъ{!]~GK'<C!;|sW'$0'_ I/G>LATuU
Ɵr!x%O3 |GߧUAï o}"3ƪCUYQG=3dcK79~q=zNy!bݽ]N8k_>K>Puvgy<*MfʨϓH'ߞ'o W\dpc,{/=S 9pdSf{i\䐌ܯq!~ Wzn(UwG *͈]4GxQ};x?Eyc=ND( W)f}Je[͗R1+_"0[( 9u}l fɰDqXo z ~=_8^:B] Q=#J]c:*zbe㨼̯pa~o<1;JhDvjCptm&$~Tkea(\ ڸ3`?6iW'4V]3ٶSSqvZ/d&NYqߵ_7;N^u/k{.@/Pvd!_u[7릸(V:5[c'dҽw["[H>E%~ zE14:,Q+ASBQ
sTK";tDSG=uR"\mGT I<$P6yTeڽvH2 *aqפ[v! BeR}
@
J%AVط9Ot%9u I0x:0ek͉Bc&*V6͆k:3/1h}7 T1+SXk g <E^ )pqm;MSknFoWz)<w%mJOfE (>3\LZ |֗BP8^\_cG=WoH+a|ͼ" G+/29As>;84N_$ QU#*zěH$P4w9N?a8.}~uŎ.sOVmAOsI}|s֥j GmJs)X{# F:}VC/i2×baM%UBmxv`dI5ɿ@'9\#Tw2˜ge$>ȽeWdd5E.ų]N* }u {A*Jx}zʋUnY_طZKU5hjD֟ LT TjFZ+Q-|9w|M/XT;y+Ax xzt٣XL;l
IO9I nL'_X6 b <5iz-䓬@ >gWeŋnz8>6l.WT R8$HPg.},XaNs+/`%^
Ojnd=Ne t6!e v׳e=Do/7↤Z[4=K2
I}Bٓ6xڑk:>k-JÎh2*Oq
ц&pF.
mU7-L@ Hh>ckdT9J ^($cdtjr\X"Of0 :r^Zfe J" V+gY, <ꊒ#JfNhPHh"!sUUvZLku\עؔHy.[? fIjf0v5zu=le)D[,42FJ"v}v}tQL ndj-P!
IGÁ~nRڌ˿q]6WW`ָ5qC{ bp(i Yګ/ qf AQ0gDe OUBoSiϔj^{IΤXYYҬ/huwmj=ڗz;yk}djNNb$Gvw7 -WCtB>Zˍ8a[d2cu~i ̸;ߜ!PBLur ).--qn -^/ 8t#oK=B-ȟ)rɠrwSv킅 E<oz>>m&
XMFO2W=x5CXZ2=r@*|6J3cͧWȼK~&)ز)Ԁ$;lr`gyn>&yCag2*]cO[V| OfC^vW.Qݞϔ~ OCGtB Ɂ ЭC$QMl˸ʞ\ɮ=qOOj@wMFŋ=5UY eɛ j[j~O[ v'T'
\`r1*7 C؆24q hֻُ<
X4TIyaWu/˾鷧: r1Z<@Hmgk;7mRJ̵)Mg8|d+}c(Z#K;k{D}Q06_I2Hsͷwsޭ *
{%<W ^哱!|jYhX[Gv6jmk\/͗ Zy1`uk#2<}]*"*(R\ 7H-r4e tGɱs4E9,JCCG!A p Tʞ;} "d"'R[Q֒Ws|A[(^O RvNjdw]NZm*I~`nnB,mˍh48UvR#eO[{Zݼ[*
6)p^Ts{oUZ.2MtNTEA&6'NVkZaz,,dׅ9[Tm,9Vۆ-!vs]}>/V"(UM9EH\=ͳFڿfz
gPbCV-Mz
,Ls]^Jq giX}lώ~]@:= #2[Idfg1m]~=:ug.^|QC<`߉0J~Ư ).a7љKKfm{ l#蛯˳Qi_W.[y;f *}9Fڸ-h"r,mU-sը{n zyΨ~ I
%'
Ƶ 0jC)RM ^XE|qSCt/Dg { S1dG%Go ?CnA8'?: {4Y7X;|kzf=SLvW}\Z[HV
=ܾ99;1.>m{X
+F!,N~FբuZ,5α6fIwf}fN>k;n_'پZy[$;e(QfSlt <ё+:KRjLsE4Bm_c5*zW:ܬN B&jT{IGaQ>3d\b5aY 2:#jWODBDfjHX$䜕:oHӁh.1:
=! FR|_1'C! eKQRU oRwUq=N,2,XF*OBD>njU4
ͧЛ{ %ZuODh}TFV#a4 , bX7O1C"DО& SD"z<y !Qe$xvuLÅUݳVxGW< }DQC(c%&ZSY"I$y9IG _uX#8 "^$1ʉlT?>2j)V$Q |qQTًl
I_AV.w$= aFjJ(MK7V]F`8a$
TjWIv[%|I&, svy[XסKdM@,MYnp, ^SjksNR= 3u d
-W۽L/@iJPRm4,O%*09Bpyw
}z>ܚ:Ǥw^:i(l>
.CAfJO & }dU <"CKdٳ[i#!}OγٟMxi iB s5:u.%-)Kn^`GVk&U-\̄O6
Gr -
$B`Icz[qUw~ ^3;jeOB{ͪ$FbUM0J LU\u5G.;b\>*,)CU*L}rMPpL ,3^Sg/#
TxU! DHd~ҕא4(8[V[*u1eͨ7}3+%so0f<nM!C6V 9YɆ`edgz~Ll6&-!hԬjW^HڵJmaլeop-iމ$
ABOxT}^Z~єl^qϴlXԳ*)"Iqy]ۮYvA4Z9(9N^Q#KL'6 Lžp::
5IwU.eC>1MIb- B4[H=5p/Q"}˂cCpITuOHwUkݖŝqɛߗ4Q m{k. ̩p۬ﱝ֮;&+l)v6
fGTiO~B$sKsgj6S97;rkqe)cFe4\TզkS0ͣ3j ї.3: }:fxwAT-p\v]Ӝ[gj4 ;E[[K##-vU|Eڥr3uHzr}claъ`vE&j'+Yf K5Ql Jg"Yhi,;JuflT
VB+ZxN< nnkj31`wVJK ;qeۡ}Iuj#ki)&&V}2e̪fG~*K@X=&3VW=0 e %<vv Wܔ%>Z$]vuW@$N5i9#0OjRO?ATK_9a52zWs($6ʨt-CHԴES>W/j1Qa-G~31 sp=[cavj*L&kh)!N-p{dܿs
?{֏>5t Uows'zsY a4QZJhCP$V .&{}6,
ogTYֻ0ftR
x@RO"-c)$"d1a&l2۱0+Y'p~ ޗK*$5[z
'[@ UvNL< PiWep.;2Ȗ(II ]wZ<:}X1*.jZx-* {A8~mg>W#,% }E-mzKFm8ujG<9EFtyacI\K }μN3^Z郩CQ/0F(MUu |KO2Ϧo;eQ})ާgh*;q`_7~K|BԽyy6%7=ۄG:Qy3\ P։z@$ox5b%0 [f-'d %Fʌܤ-aU)m7Kl G|##NfB7(m[o*+"{~~˅+<47lҵTPb,V\2o|1eyn]^@Pn|C>]ᖖj*'Kr^; 5+ ^]]qʼnTv YM^H9'V)axȀEѴp*]te&i QWJfPR_k5H(Hj@|1UziM+,D4,$wc ך5\p*gɪ8 Ⱦ9BI<r0kŖ^o|q;L>9XߜotqzhN甝:dG\i7 f <k/`3PY|[{dX l{[,Yʏim* #akyoc%>cB`ٖ5\3M2>ŸC!-)QV $N ͨW6ߧ tRSUv[TL*m/530F ^ILݝ3'5njˇj?~E$J=|>ȣP/f݀Wj}yl k>?¬^l/(O7Ѡ(g 8Q,-^܋o-Z}L21响5v&O}d=HR"^sHud?'.3G*~0ʣ1
홓jF<ry2O!+0^_k0m
* б2 qy&\{OCoy:kf*W;N _}ThXŘ `r랬$$[CR;/vWsjZV}uy
n@Eh:/-ec:)B>vRMN+ ugt z>I<^}Oձ<}k EۗSEPpbF(0< ɻ'*J<) a}>Y*;nH%;5ξVx&'K֎&Bcqh4Gj,lCrٴ q~יg.MBu 'd*8zﰪ
}E$_(~՟!&ENsGU 7ݾPJS2)-ǫ}ϔhzzu\">K GGoY&J?o *]NCS2"Z/tx=#v8C6% #8⺦ V>ܸȭ(mÉR @.Vy[k9wY1eWvl98>
fwŜ@;3 GiyyqA' G_:^yfBwy͟*nH{R%U 18l!s燵bu˭,Ne#>ߙVʺ?ǡl Jީ̣N̵xs[2
J"L;u9݄v=`F m~/.7k]{UXeʏU2|G!S29
L1;^ur o AȞ )m\[M!8eϦ|IReˊ#қ Blr6[FmHWc+| Ԇ#W4NfqP3U۬/k-ɶ=9lN-VT[L+<'{S~z5H?,})cz,̙w͙e#jw%*u\3VZ
f{]~9c;i.nLmsIU?༵66 lie5n5m4ˆTWDŽ' ?7~%d'+?3*. q2M oKmͩҔ7w"hMfi;mAd;ϓ6HFCޟQOr~CWJ;WX/E7E6v`kAk[fmoȤ6uAfQQ \f^t٫l nָDF ?/:R)bk2oYKl&.@Ō>m2Y2nh/hkb*PUwu; (9"Q0NM 5djTG6 <h7_k*˻n]$u[zL,a ~\A{ yE FBmDB|=jpaS85)m_&9f!G*f/<v;4c2gtL b/yLHE)M/I}!GH6T: Sx*. 1JAufO^U2tXySw@:}\#g%փg+"\l_
X,2]x ۩t? [y;> 0 yxcxWi1Ɗ/ B
O +\X}_ohPR k3m!]wiŢcZ v%%E[F `Gt`N:]Ml|;o25OR2|'/Y52I]b}!jUZdUlHo~;
KpƼT}to>}F;ޗ6?:O93;ސUq#_*=_7SN/ J{a,/3@^q }6+{v (LyE3oȪ1ӟ3OmHtnlr:~56MFYΩlxkU^ 47>2\к Ne͇aأ:SnϙMc4uװvk5(
]F±3X8TL#y+ 1 8eWtsT^KT4l>xG.,SO 䎰ECgflq I /;Wwb5{v[c);.tF K+[Ŷ⩹NlֆMn6.#}1 ) f&PX8$GwtaZc2mVķ{f='J,i"i= &l!n;F :ߚg!67wS fdj_=vR%m(\. G;8e H-L|/aҝBKoy=u?Ãl4K}R7C VC.6! >{}- M[jdPF Ϯڋ bz#N¸%E[ǕcYFɷUOl8^~dԢ-nکҫ%ì"}%'v4p~2oG 츿h=b,e{cvC{PJt QJyM'߸%0wC 4=mmƘ{،]cϚevYJw #$ ]|ۯ7oB^G췢'BPc?F
7?{g'SzxPȹ*|*ႶWj*-r]3 dɍ;#g΅q~\></ %']tiW0Wh[n I>= ӎxGͳ|ZCn& ߍ;,QՆtmH(k5 (sd>մ.eR_&D+) Y~"J\Z3
=J`Rl, oip=\
XeG
S'YntP^˧ٛy{`ws?1vSd4 `"9v1
0[c/sOI0N K2}ݗWjFW)n\M=f.[֖f-SMvQ)>fo|Wv֍&qwEyo:mquhwYotHijl_;|óUWJqQQ]hM$\☩-vUtEӳ+Wi^:ӽ2zVBꢓφ_W=s!;0xZq)c{
6p|Is)qE̢/͵8^WQO%){y[~@ޖ!N_S֘Kp B^sLumO
7b`5a)G}꧓0bӱv̗K=R.7faxJe M0}n[W*4'eSHEw'æɖ88L搓-'lo#kޒb>p
{6%]FjH|y7X\EmDM >oۜ3/xrm2ڋR(܁$!ȦZ'FWY2d-={~d5d1wEp
F|rNnK^ڂͅTOٗ.%$Mn֡6hbOoidWlt <*t*ŞHo6jtbK Alc(M83c]Ka\lf
Ư loY-
Azq;Cs7H̕ Me2^U<p[L$0bM,3sTYF-eqzAl /u@Om\9`&݊+!h9âEKic pjK5{-Β+1M?VZ*J6n Jّw.Hs/l KVE)lN 8d3&veGa;"bc T5IjbbZi-Uu*[ShkY14ӊ<Sϙ(] 'ƚ=O D9q gԋmOc3<c<TˊyPK:r~lU}HGEEB)S%{}9^5OvkSР㦰6Oy6GfS
a>W½ܠbh]g 1DF ?e4/% ȞmuJUI}CgeWwdL 9^.MowKz ~.澨`<'[Vۣ4| iGoEbI u
n8,>h}n˂Wؑh( 0ᇎW<VFmM~YXv:Z5ve_46ʅ6A]q5hK*ڷ= WCͩ RRPՒl,M63Sϓ
7ؘk+,`ZV5ݠh2+ yy@6ع7UnuOě-{f˸Yw@ yh_N˽k51oW=bE)wF^u[rF! 9OG=B!x yv efVs'X
٤}Ct쾮4wCdU=W7<k1{OYzSq{E8Wy QLV _Km<
'7 űa4{G?LӭBm5Ƃkܴ4{0k^L.̘2^zKwO5$t"-`O͡ECOٟOFGEŌmG*b{\l&)xnxyԟ]ʿJ*zS3;DzWis爛h?Z_aϐt6}/dvιŎO:?橳B7T8t>
Ph͠F辥=h2".o/HU|"J 4&SG,H 5+.Lײs-j ֙ 粂K"arRKcvhfR+W2N;#!WPM^Otxlލz)m
{o <Cݍ
rUC F+4ݤ<1%*MfOe,XPoWTyΌeC
\zAɩ`9T[;5=E.kde^S iQ69I
zn'ZyIo d&XҘ ww6R;]!ciR2> \Cjme:[e/װwwW׀OK6~Dׄõ*H J,*= ~6u7v≏Q; EzNMl[/69ӑ:bA!
]Oũ#$}4s?)NcCIZnLBe v
u7Z^,dAy^Yar_GgURc =֮?K E"nT`d(hkW@ Qztko?e/Qdgⱦw0.s)MˤtW:~}
607ớZlrS^<iS_Nw $.GHuy[(wgP7V8Ff&vqUUmur
ԺӴv^BRņB %ts35g J;@<FMq/nS!fi:'Gh{MNj[2} nZ76IGrY{I=X+)A9-+BmtB9B {5dP\ <B`vt qiQ@XF-:TwI)iAM646,NVeB[h*%{nGE2`
nrzQ$P(r̽2*іxƮg J !d}A{{gyg4
aRu{ 뾓hlPh,sP En[o
ge#
- /*?2Y]-Gp! U mWnܧ`eIXǫZ,jyUH_qp̪!ls {f&;oFN(cy,O{?nn"^3=!ҒKSԺ8o6?'=少ܓ50ӮW&]Ni͜a X "au)z&&"ZyT
+G"aoiQR ɂL KGQ#Kv, h[BVvP
syY!]xXPƥ윈
ŀ) R|ٴpNb/Kk&
f{J~NȀtp
tթ»- /S_Q UKL!D%1eՎ'_pSWIv滾ֺF p7ǙV<TU, ;r('|)KSmNYs`ϻ>dp
/MU%oL3.j#]4Y =^4<`V e0(&<`[K{XGR//VT .=[D_F`7Tϑ* VBW~^:u}̔LR,ʣ NM\Lv>ris fm;Rfi ^m {nY4 a@v0xqW*g\{$/z(ϯwJ~)ƕ.6Xtn4ߋlh2/ .*EEӃ$؈@^+]9K䭫t9# Woy0#>p:kQ2Jm̒6ƌ9+7Ue ,ժfdiR?h< ΩŌՑk
Dvh VCC-X)Υ$ Yu5Wٳ5Ӧ4+Oհqϙu,\{Bv;ܩw5 G llԋ6FRvzX~zRW;.m:NOjm 2/~ƔU+/LBj!]EnI
|j}oǂ1㖇IYPy3z.v1b~@ˡ +<V*IV_'>IְYr{?%[@ }0{&Y3Uv,y֎ 6[i Nh~m_ 9,-#Cߩ2)9jw#tFeck.4Ts/ M&WrooV'R7$_|wOp>XӞ8oKxu4'Sj &ϕʜjӫѲfK5Uu;-
<K}.8(Zو-0*պ\S%I7| )P6Ȓm!agF+ٚԷX7ҟrx3Tl콸,됭%|G?+0 ȳ'ΣTy&l; JT
'ǭ^$]qYK[_NT*= ltpyid:ͪ.Ov*z DŽKbz> puM!z=!2JG{(;FZ7xa/%ܶ 9P0_6~h,>ܸ[3*$;LhG((ݓE@rO#X@﹦}9 Cـ[Z`̲-82GS[ E[^:>? RV=퓓H MKoj5ʩGdaEe3:Ɂk@BQoߖKv;
7Stj7k~EĿRvƛw0=Qw] ԶfVڹJCm蹽qA,/LoGO]ڙ#ܺ}vfR,%{36E Fhi$&пv8 Jv N\&57SDMi;-rA+Bb{'Zpms/if,!|I -$RΣeXwHElCG`ߊ)vޗ ݝ:H%֫wi0ⲵ<3jPp;ɆVElP{;_<^=##e R<^Kf9deLu({K$Ps[<x{:,nitKzɝB3>nښXݐt?.^䠶&/ئl$,֥{(Lr )Ĭ4-W i=/2ߜI*1;{}ߩr: _鶙%迟@ lKynRxN6
n56A.#=8N-N;ؽ aa= tV'2H"$<kx;:/[,ݺK T>CqmVV*٤^[pn!.n>IK^`JT2U^^bz <Qڇ| "|'PptpK+1>'8'P$ɊNniy:IxcmK JQp<Գ1q= گjX=ʹhQZ 7ȱ9_ڋNRR? U:YpoK3ǹ
~gJi4O y[q%1W+/Xr5Vuj'$NЦߧl: BVZͷ5WrS+l,54'YYmܷ모y xqUHu]Q,hEWU$īb.7_iv
SIl3/NL: 'EkYdݹ$<!Z^sՁF=v6YX'{ʐM^6 YG&o vC.Ra vH`W .* 2v&[yKd0)>3R =XvV%#Yѫo kt/%s1e10a UD3vZz[}3}h{vkq㖴V$p$}Z $k:uma [lE봺kQ ? 4Bn/Ӛ[ՑɴnLmT}KnnӡaOx'ϤsQlpi+! e|x p 4 &E;nդQ7q]6ΗYPi߁y[@xz~0a!+ZgTc?4O8{'刴`R]O~뵗e'2szt UH3ˣ !e~{WTMO۳3REI[x>+>&LNqh3FCyY $Dذ6l
Æal6w
EGmh3itR, ZIy>"XF`Swru: wD v؎ j7=Q2lyZ )۪6[z"~?褐 J|L<$b6lk&:s謓mKToU/Y }mfUYJRߥM¯LV-y|0[qB $R{ڒB7oW&I:Ztn#RI@Z/R 2:cb{;]E5걯RĨ픎 gZg<ۻtΤ)+bT8"[I".ڷ#r&Ƣ!0ħS<cӋ5y[V hC5A/GS
Zqp:2NSo̖KIʽJt?d+ud˅v
?BX;;A5kQ+cJd熢G[:V |WRj*^?po.V+OrNV0ZIgn\
\+%W1&ݫvw N"]k1s)# iG%V3,^Zѷ]餭II|jsjzaHоz}M
c^ެdؕ Q)_ţGs$iBܝV\դ#x{+I+qʯz+oC&59//K;
vŅWqZ!kV}hoJ}5*mݩrԜ P^S-KU(^$Maj&Wk{h}vM$,k73! Iۚa VõIk=,;oiJs{8i#6;h_ L%;a GWЭԽ[^Lj㳤Q})}9:ъ.dlp%홸DH |`Y٨3j,T+rhdbJe3 ;NǠþi P2}g+U)j)MgcM ~K̏Rw\J~O5ڍ
CQd?+ i=#
2Zr
e(Fs(j6Ũ_]
c1ToLc垾lK9q 6~&I5ELӲu Eg^u]⨅o* jo &U-˼ zVoɩʩ+.PۮĤкV+)bI[G _+8uSP6:{W}C#goJp
=pj Z-̻gA<ǀ(pAcVD[ʒxzr_H.}K3l V |" xZA^Lw4]Io%Z0 H>yvHdzq $q1PxMhCw
Oq~͏K i>ѮÇ-f {T=R9ѽɘˢ]u^>Rf&H]Kjk-;IVN #̥\Sj;a3\ r$WfL.II+ʞ<^&',.Qw }mZB-TFuNVp; C*e +iR %O34&qL-iy/ .oҊHKP WPT?egh=2&l@*ҽ+7?1E{ Wh3
~pcͨ+`g{oW ]v8]9/̼02{V1vNnWs5wg(/XyϽ 9Op禩9w[YW͟Kn Vc+KE]eyqOGLkEGhF:PV$RC%[p%v|m=f=$\i\ݩ2ę[wgeic yf9ޒ os)L~b^Y0
~Zcs< %K2?R3 pH#ڨG 8mJuJyXI9\yJ@rMtuJ<v͉XI4f 6:[7uվ3Ih Տͱ,9UK6gg4 rVB=-eԬ\rFHUxMc +P7r͑IB`Qx/ܕꉷ8-6veiVsr@ J{nj֏g~${3\XS suپ!M祳2Ze[Fb!VBGǥ6USLE'mϳtlt"3 "=g3ٶǵǔoYBCcy%uCoVN'Z]Z'vYbim䁌M Gj~R.¬\c(^nzi?)#hGo J, _xSK%5_me S#6bdẙCw#Q3KM^7QR xܥkN0 (
VjRu{cҥpM{yJ 4!jq YOaXsҍWZFUKc~ uO@
G3EY[!7CqfJ|]eD8((ڣ̣y}p6lۍ3^QTq ,-K(w|Jwzʬx |=\,* AK|BmG2-,M+̉>i_V7X4]fHfQvJ7?7؊TW ,{d''RZi~z~ѰWMIwk4o&]Tdlhρ>\ _-/M̦S]/}Y{zÎlkPD[{4SM=FJ1n+i{v*9E' Tbˢ˽mnNQ
کwn&NB)UR Z&j~_ 37:4+\ Oph8Ce1r:2,kɎݝ{`V ֯j?KG˝ ϖ}) 668 Q5 ]ܡX|%*Cdd\N.B.*1lKKm.p
+Z<
l]P.66GWd%E e#QHw>嗢yf
ܺ3ǝVs"xxO
XJX'3ͺԼڧyMrYSP٣y?y#.lω2x7 )w>Ja@&_mdTt5`\84#Pyw*ECpoit=IWZ5: Gtj9sl`кPx 4&gɳc u*&(Pߐ(n_N #F|m ӯZ'j9l-\ maQF=٣Zwy\ڂy^5X7fN z K_9nW)jdȕB!ճZVW[e*yrn~sMuD-aKFZ36:C4xEa9Pd s˚
iJXL&9W
?ֱ%fnZpԋujH3dz
[{K&>l|"2aI{ntlJlA,N;j L*-Y 5(V+.JuH[:dl\pTvkTBex(-u/\,#BT,Jkr1#Wțo^ {*a~W"$KlH,ēV0]wF<;oot:+R TCŚ-Y>-nA9㮮$[$2/l (wۼ+er͟cC `B8h#FtNҭy+|UT݄CiA+U:.f{K
%5g6av[)ez!U2 *sf{gXNV Uiz;۸ 8 R Nf` nMEB\$]
%t.Mt0nAHTB~8 D c[{렾ռS lMk}ޫV/պ"} 6
P F `h̡ + IGDu/ 6fޡA˳EƩ6v4HNn021:{$6'ö92ȽʅAgGtByl\oAj$+b,5Y_690eO-RLA k1^A9, d>y70q *u0f!Elx0 G 9[ xsT .i*H۾w1y=3"3Q+ۖҪERީÑiX$
#)d[jdofٍ7]àPD Wa ). *
t˱t9J }rav:|}_vksn8PMxֆ&ĴŮpRo9և3'5* 3T Zu\l]jJ | )'s#:Ԝ ;uH37P#Yl7-N
8s{^;%m`l(a9EGf +@//Y çGvk9F6
:zDSx0r:'Q{6"k ϰ[Y[;>іJ: ˳* ه)P8L.v,6MW1m )FWT7N2vx"||;Ҕ ڀZ 0\٧|`Զ[vR9(yD:T p\Ŝ7$)jӊURXJ&ue eG~T1OShI ^窓Iu瀽x"N(ɹ %^#XvGۺҴc:pK!;qTw>r7112#p> KHpU_Yi<+c0S7^aM5^_]a+ 6 bYw^z\R)U<]$<էނѣ)/`Rny~9cfU e䛝 *ё]z*9),y%8GXYJer [;?"dPx0 }z+7)'ΗGM0uŔe,)V凳T4ʌВF&L]Vo QږQ~1trTDnVC0a`.+U8^UB ᒊfD65RwZ P<.eN@?-:۔>:u1g=];eQi*k֖r$yY
XUJ%7Tj4g!]-|x.S
̈!{7-568NqKK 18wη=tA w
v lC;Mg>Ab$ Sϐo@/Phbng ;;F`z#NW AS
\'i-To[
ո > b<a{[^ptt]T5:NJA,<{>E\=g>A3b߱R ~o@" /ݭt9r1ǻ0. CF뀽)kMԙօo N,&|4fw5?af0+sfAO֕wnf G;+l;ɠ*#ͥvxQ vpc~EwGs@3I18||ksɕN:Uo͜`7UgbzJ= ۓ=x {g|RNF&PdN_OԐ7_s6o@,+*'
f
żx[ &Eh ,RPh#w-(K WoUu>(ĞA*` Kk> z8S
~,%li(!3 :gqV=ʎ1
y<DC_([:PBsK9M钄8;C50ccdJUVP|rebLU5* 3T /1#i. f_
4foũ V<t,Tq'Ki0Jרg@\B4QZMc,)WG;41lRe[rpZ_
+9}F6d,ְzrE=Y0IV6a ֖",=֍,
"/6"+$_6E ?1wr zW*JCΡ*f5V
#bOP5uW3aH"5cw` g:&Ep5ie+y@MQ FFEf8"4<[!>l2"eE$C P qLef@!`B,@˓E')?",hؔ)tMz#)7%u:!J"b9
n"DmKmZ!aPt4`sSؙ%jhhR v6Kz@r K
paysӓWRl@r*3KtisV1[< ver ,?-2A ̑ĸ
x Lvy YĆm794Ʌ
Vt#/@wT``nCfxiFԝJqb0kP`VwR_ZG4*=b]\cltտBCr/d @*`|WҏTW<(a7LDCZ%fu2m7ƑXUS55L7ALtPiy
Ge)ҘdR4rJ N(ZOmpT2T%C{ScŲbS#9)H I^'I5A%,͑<qܷBQC7&OUмiLFsݸ$G
0#"%1¯nW Úi84Zoc7;]kn8[ĖlpRs q#M堞|^m:Ha;&
yxSkd:90,7: V+xǖUR:vX u$l) FhpۨnQ=Gn=\mEʌo2ȩh=d_gperWPO!Hr:1FӷZz Mlf[+4@9CT'/*:A6̼}/-@[REgYxHo\yy3X&ҽeYĔߍ<Wb ̓ӏ~/<ө0|ݍk H˙N6lr54ǖ,5ٱҢϣ9r81!y&Zp&
;fit=c`4O' 悫nhj ^OA 3Ӡv \R+@3-s0 #|5nm<ɿJP7mR Ǻm1Ył-Ŕ%^ ;[b(JxeLmk IρO;EI[l97tđtr
WvbR#
nUvNHO9u3}4_7ĸQ bqǢ]Cm;< {&CU5 ;p9X|!,Aٯ 7ږ (NӎTmR'-A¾Iw KmaDŽ!LDN|_N(5&#JZEJIE pO4qB՛p ݔjxH5RRYPU`vz. TnC] 8gq~
H]Ƿ}R]^v4̿ȕM "Myxnq6B1 xHqA7٘Im=):(9 q,GM.$ J ]˼u^A<=)P'N.zy=gpݔA9^pǕ4;'F"ZxtgYc ˄|he}*KQF T2x]}-6uXe:S Hm*$*N"CT`܉.^&wrw脜ҥe,&4XܚqhHCM frZPqU)t`2ܹ [>͵m2aNҨw<
zҚB~1KQC/؋vY(m' 6 ZɄ<1m?˓\0Wŵ5 4᧓n{]MKRdMc$
sV!+_;k#)gtOC4;جLUݱn*
x@,,Vjx3L?1Hۡ^W A. b5p]Q=awC9/w~#7P؛X ^mdn#r~^iu8USKCFpa+fPDESyx]!Y]˽? +1wZR ~|Au 6wz^E:4bޝ6Y :0^Xryq[q_=zR)밤.r-5K^mm+^qĞT#?2VfUJ0QL}{(4$[Nd˳4,\ 0tWΊj'c#5X7GZ˟>iuYN `Nz^LH@q +HGi30]r؍R巿N48j8垝yn-<Ξ9=Ijv8,m s
lE W5O' S`~#W`21BZXiJ`2g5+읷
ڎT(#R7
L ~&TM{"pO@\27v z;95E BtG
iyoԕdwwt< PFbslvyL9Zd,7[ش¨>T}iuԌXr=fƼB~͘$ڻ Z[>$Nqt}؈)rj%7u#\"VP 19|t$(2wA8pRDS2iSSѾHt#)%Qm-)wpL/MSz2UG3hYP<w C!{6ß7
wuj6,]xxq& 8j `汰[O6hZ Qimw6:L e]>hhƂ ɡ|T0Ks,-HߋvxZUuЇN@ IP2n6 :DW5E;?Φ+xDZ]hyЂp5x%V*lmU:UgLݸkI1ts10G(BJb /6b]'&|pk hG7v φFX^w/bٗ`GtNRSߍ 䅉'f'(q_7i|Z
_7GUIɾD?V.B!pn}ߏߤY{˲ s _!Y~טݿIAFwBяcE g_n ϳ/զ<\7pX?>~>%_q'Yo,)T ?\N?>LLLMͰ߄dDdy:gfz>9O +? ~o#S~ 9~\'ʄɄGN ř6 QoXMڻFz N;9dmYt/}h6?{y}o]Bj>SnH4 E9 ?wwYVedۭE}=4\DboIݏz6,N7Bs4˽oBo ?V=YN9
yj0I}۾j!ƫzݷ̚3yW~7g>uSoYC8^z +_ Duê϶~@Ry?خKuo=RF/q~[W믿V_?Q.j]9b':L7wfMtْD .$}66M5T#1/~ᯐ^n?
qxG6 w"d eZiZ*EMZfkUk:ֶ4mQM>LС9ANr>*ܯ%A,ҽD-!2!4;0@(~ڱFB GY~ZuQ ZO+7oߒ[bͿjsMə|4\{ }gaw<wj\H@ 53 d4DEpE?gos}kfrC敁
ѷe
vDivCh@NB@ ^Hp0>T -Ē1Dm-!!" ZUxMjc 7fκC|.o2+V3F8zLQ7cc̰jh2VyQ O" A4G3<7c 2_;T4hw^aWaD_2,|z;320{.` jZ ǃU$"3%vƮ
d%'r2!K sH'-Jrz/I3D~˚D%>qq}} tQd #RcEhf 1^(KZ ʤl#c`iSҕ[4wI"G~65vjf&8g`1% ~] a`ICVAMףN3+J~,(@ac,A|q
PH]f7_H+vwt̼ C g bY"m&2[Q ]cYjpf4ł3$Nu[ghcOos5Pm"k${V;tE*>8֦@Tm ŭF3<uNfZLEv(C c8T5zt_ꄪE̲dI}ǧZwj
#`ոtc_O3G K{~c/fAZbY옷EPQEO"w4T+3{ )OAxPTk2O
LqØ :a9c`( O$S7?4rwhgn=-g{ FmM=-y)Mqq SzN7ZevV3^{qp}\W]Jrt0k^,Jf5rƶ?brv8< 0 (6 ArIm5t8?j xi5wEɆohثӿDUq {S'Ù~ٰcɬO2ȵJg bD䄏:4cHdF1PFㄕGlJ0e|Ëf\sUtd\:}GwC7 %
fhTM '?td#9u.ff
(jg /vV%+U/ұ
=tͼZBZKd9NSd{/zNbCūqG@ƫ.Sc "%KL"o}|>"dkcа\imiV Ӣ5HSBԃ{' } ꆻ{ ㆩsM39|4l{31$|ydmv#4jĊ:^n# b|z <.[<&y+0jGOLdcֲD ~S &uw.ma?̣jM<X"ʿ-nUsŒGof IIPG]<;DV<wNY#+<Hib
8G>K>)˝YZ<FBdK2M(Bzd+f 3=Z/d]ٛVc H F'xUm;FM|i+f=Q+kX, T|Qb#vE%) kMX3# H O {-;åuO:ާ
byΟ [Ռ }/
yaMNafmsp`_&EsP*l1z0ʀߔgdcstnZ
$i7q9;1a|7H>*`WwXT#A&Y`]7T 9c}{stO
iQl O2=q:_ ZΙا#bIԮ\h\$kUĒv 8$ /VqgMa?=Jyz 6"I_JVМ~]t1oX wT,?-\Mt>W3̲$ٚIL.8ۚ< {IXfy5 Tl_γ> 0~Klޔ^[V6] *r)DJnK51zHs 1x,k-^L|N*:I֒?}g?S>1QR|oO ?c$:67m^,C4*>yY mb>گU]+<߅_yv,$~s)/u?;CB,U7 pX
t
ƴZu=źj{I(q<mi1pnf` K˾p eP<b^[AWV cf_?ˎt?tk{1
Ќ}GҥQx'[ooV#˓
:˓{n92?W5]+f [{q
.Ԍ mߍf3LF3`qmk] D2miA?/wϠ즸?FJZ䴮g q ?NY~i/n MX oeqF3~2vGkdO0_х}
k @nĸeEtW+p.0]t @q Qto \FO &@9 ~'`(灂 !z/f2l 73s[\{tA":j/0 ٘J4]>JTK،u&8U+*bɢs/ 1 AY@V<I"l KU2P #rO&o`>_V)<HRlEہn(hV^-v q o[Ae2{9QU r&CW0 Hy2LP&&_2*e@ 8 o2|%&
o'Q|N<_U0b?w !A |ODܢНn1DN i ( x4CZ+!? MF`U*"ǞyPMkT2}Y7l<ISMa]Y b29bE rf%M :ÐTF]2S\^<p,#JՇV/:"EœT 3ɂ(Ƒߏlf
:?Y<2lS̮vp+0MNIUF;"+@
Q!]+YV`AZmW
SE6,j7Ϲ|0ޮ`V@BZATV`U**o
BVk]]+
\BV
sc+
akFL7GB)9Bϣe04.Ko=G~ݴq/k]&?{3ǮGM 5jmh y6v4O!mSj3~5?@|~jR4?5?ݟQJtG[o2OsogVYg0C"Q%"7Y,-"Q% 5
g(qqY,- !V3KcKS"W5ʳd4&2)eY["Q%BJXd542^)EV3KcK"c(̒ҭFt2,BY,-fd(̒ҺY$5Jd4/2EKVK3#cH (urY,-CFf_9PTMm=2"Wˌ0BB.PcP[# ڂY,-ꍤEV3KcK#Z5d492FYfG[
d542;Y,-?jfli|d!,Y-|؝V3K_K8(w55
d4-YZ(5ʳd4J d54^5d4jifkDjfkiL(%[5ʳd4J2,Y-ys(̒]On j̀(zO_w5Jd4ˬFf+|(rN4i|(sOnY[ g(̒ҡO_d54KFf}zQ%n]d54[Ff~½)&3K F / ˛r l:эmݼA\z|$<R K֤u] أцv^IT];
a 7Z^aM]|/zG9Mu0#_! |[X rEDnyN4ĎMStddrWH:C&tJISolzº%tIW81eBv{Vc @dyΰW]nî>c8Cpw "wG3:мgN*ɵ e=gsږa_#1/rwW]Ppl74A F @MiԝLڟKn
,SYmYι< d}Cs*ߪ! "Ӈ3u5s1'ٯ,:NVP5ј<BqǺCغwzB7K;9e2Yi;u_2`.UUŚWϣJeb߅\]TP<j-9<q ~U2xfȮ8/jeMBB8]HfRN* &]|=vGqsyͥTɻӶU}6XX^;1=3L3C0%L_πUw1
M1ku
-Tjk˚4.s?7._Bl9rg,?n;Åzd
YB|dYM;-u6V 㠧4;eugjDu <O& aGNa )q.H8Nv8DBRIy'$TN}iM; w!wA4Bds XNHO;;N߰;H;rIA g n4
;yd;D`Wd? Ե@A
c4=5_`_H -<A`ޔttǑ Hw?I9w)N̕~v
T ;x|wSߔ Rq,ಝ-;òNކG i̼swb#!ipIxNR4ÝCZ캽;$!w oڝ`V~Q[Oe:% ;09b>>_q _b 8vJUH7실ao W;|) Gd"JM":շ
ؖH_6|JzDj>t^I_C.>ֵOE&RWkXW K3@
ڳ j Yi٨#{obu\NO|X:7'1hkͣЫiNp"{
l+&g6c f;i!f 56X( s PTIN
2~q, 9T<f7MMgۃ<Vĸ'X=n|W;W
I?Ţ2& q9/h)4=ݦ|OIޚw{=ij}xBfrCׯƧ V=t95ώb߅ 6@W?8`tkAZ G[ wccr؊p#Lng7H?c0.<AC>fEus݊-x x>t; mm ը eͽə=Z=Y:h5=\h<ܥMɱl|:* Ƈ ?imCGXy |8j :~ȃ ō+CH~:ڇơ|h<l]4te;晝M
OC?y x`|g :jȣ <GCA0Д>t" GE:( :ćK?Gȣ$|:~Xэ6"><ڏ Q@?\ldVƇG'CР?2lC #~ -lDwm;
j Ş
&6+uWЬJ+Z ]Z20 |Aj2:Vp?di)Lu Yjzd3?؞L?dDgd laB;מٛv> uQ7]j*2 Ε^ݠonO >a7 ʻKL+4 o.'(i !>;D aT;g)z QRiti9 4^{PPǹra-6X {,u yozH^N0`,ͽ 1>'my:Xb t)9'&Ѻ tfeP 683T 2WY0q^Pdn 8znjYc=HBz4IT0}QR @+I`+Pw zȁgm' `I dUO 'XQU Vh] dKcKR!% ] r?wb P0PyJ#AP0z3m6ɓ@@:Ct.Dg&KfԲ U q =z=%2dW1ӵ;9e: fq6
{bme ab T\&ցP&U 8A.4I
|Ą4U\x Iazaԕ FJ1LI>.,92tqӬe JZC`?PnOnwF Ԉ:`4I@@
AP .s2 9uĜ lagʂAa+W1!(e@7{RȲԀ7y`|F {u# (rF7Q UP fSQvސ\`e oa0fߎBa BN|Lbۍ?L.Š|pg&U| 6l>\}oQ 4s%//d ;,\em0
E6`[Uٛ~o㔿pD=ɉ }QqԮ%#YMKl,)
b6] OT[`ݵмdIsRo~+"4#N\Lutk2 WEU %D V#4W*U&dgjvDF[h VpG%QQ'~Y-HA%L"50*߿* t=b`Eou]mugo nȶ7qzҰW_ax`gߏ=uӑK+&aԟ[UE_ｆaj<E -\>GPݤ&U] 6bs 6#y&n5 %Oӯi2)\xz ~ =M!~wo~|mӢ_L~zg'N/y[m^z OT_/n_xKD)~F^2y smi;<i ?ծ ܛl^&nDdN)rj9}_'sdha_ŵmEA;(/`SZ2MKRZAC?֕clv%W /xmRm2MfY@= X &J vnDEHnM@|X~^OOwF~[A VVyҏ>E~WdxT5&x{~տW|y j4y |>џO;q>|AfwF
ӡu6NX
Ψ{>"f:
Ϣ ״mp!
TA3-zoHg5̲o@[6DdH, 4ogm U6x7@oY6 Rc.q
mm`
@mP@5
l|SnEܼ/[Ȯ[ jve* = K,I-}`N Dö>+9d,!E
=V%~ ƦJ<
j=UK+eɴwB[Oyi×x)`_ۓve">v)'* *
a~dS>i#d0dMB IqVM~K9UXJ^> l 5
hFj%؞u)1f;JG l
' At8 q QoOBɀ3Qh9M'AH?)= w
M??12ٝ V~ Si',bAUޤ%no?.4AJ2¨eSnӛ"{n{f?Eq'62Ⱦߖ QϷ [61Ԩ~\{!W2 ,[g |bD{GJ0KXT40L9 wBF?1́ǵ<)m W9`3J o4&7< bs%u D6b6 }<+xR*q|&yy5U^m4m>}[x
wkSa>U)RW lԎAwՈhc" Qm:D\y o~S=Yid2 "{MeTYVIkaƑ۫[cV,-X,OyhՐ%jnK_E~KW ` &k1 ( 2 , Dc в