Active Directory administration

Organisational units

A structured OU hierarchy was created for the IT, Marketing and Produktion departments. Each department contains the Benutzer, Computer and Gruppen organisational units.

Get-ADOrganizationalUnit `
-Filter * `
-SearchBase "OU=Abteilungen,DC=gfnlab,DC=test" `
-SearchScope Subtree |
Sort-Object DistinguishedName |
Select-Object Name, DistinguishedName

Users and global group

The users SI and TL were created in the IT/Benutzer OU. Both were added to the global security group G_IT-Mitarbeiter-IT-PRO.

Get-ADGroupMember "G_IT-Mitarbeiter-IT-PRO" |
Select-Object Name, SamAccountName

Production share

The domain local group DL_Produktion-Freigabe-RW was created for C:\Freigabe-Produktion. The global IT group was nested within it.

The domain local group has Change permission on the SMB share and NTFS Modify permission on the file system.

Get-ADGroupMember "DL_Produktion-Freigabe-RW" |
Select-Object Name, SamAccountName

Get-SmbShareAccess -Name "Produktion"

icacls "C:\Freigabe-Produktion"