Windows Server 2008: redircmp, redirusr (secure Active Directory defaults)

Modify some of the defaults on Active Directory for security's sake. AD will automatically store users and computers in containers and not in Org Units. That means no GPO. I show you how to redirect the default values for for accounts that are not pre-staged. Also there is an option (ms-ds-machineaccountquota) that lets anyone join 10 computers to the domain. I show how to change that to 0.

commands used...
dsadd ou "ou=lockdown,dc=my,dc=domain"

redircmp.exe "ou=lockdown,dc=my,dc=domain"

redirusr.exe "ou=lockdown,dc=my,dc=domain"

Providing training videos since last Tuesday.
http://technoblogical.com
Thanks for watching.

Category:

Science & Technology

Tags:

• active
• directory
• users
• and
• computers
• microsoft
• windows
• server
• 2008
• 2003
• domain
• controller
• redircmp
• redirusr
• dsadd
• training
• technology
• electronics
• hacking
• diy
• software
• tutorial
• educational

[wondersz1]

Thanks! Didn't actually know that and it matters a lot for domain security.

[HappyCassio]

good demonstration and explanation of what are the 'redircmp' and the 'redirusr' commands.

[toto384]

Thanks for helping me to understand what redirusr is!