IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

2.1.1 Create a custom Active Directory administrative console MMC – Windows Server 2012 R2

[00:03] We are going to…

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

[00:11] "By creating productive MMC consoles, you can provide visibility to tasks, tools, and documentation that will empower your administrative teams. The consoles will consist of taskpads, and the taskpads will quite often be derived from saved queries rather than from organizational units or containers in the Active Directory hierarchy. Integrate procedural documentation directly into the console, along with an administrative home page that can serve as both the opening page of the console and the hub for navigation to each taskpad" – itprotoday.com

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://www.itprotoday.com/active-directory/create-active-directory-mmc-consoles-down-level-administrators

Active Directory administrative consoles are snap-ins based on MMC technology. MMC provides a common host environment for snap-ins, provided by Microsoft and third-party software vendors.

Snap-ins provide the actual management behavior; MMC itself does not provide any management functionality.

The MMC environment provides for seamless integration between snap-ins.

For example, Certificates snap-in require you specify whether this is for configuring My user/Services/Computer account because of this snap-in involves viewing, request, issues,… certificates, which can only belong to User/Service/Computer object.

First, select a snap-in then click Add button, and let's configure for this if required.

Configuring task is varying between snap-ins because of its specific purpose.

We will create an Administrative console named "Administration Tasks" contain the following snap-ins:

– Active Directory Users and Computers

– Certificates

– Windows Firewall with Advanced Security

– Resultant Set of Policy

[00:51] "If you manage a large number of PCs or servers, you might want to consider creating your own custom Microsoft management console (MMC) so that you’ve got all the tools you need at your fingertips. The instructions below can be used in Windows 10 or Windows Server 2012 R2" – petri.com

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://www.petri.com/create-custom-mmc-consoles-managing-windows-server

[1:09] Some advanced snap-ins was hidden, and we are must register this "dll" library to make it available.

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

We can remove one or many snap-ins if unneeded.

To reregister this "dll" library, you must launch "Command Prompt/cmd" with Admin privilege by:

– Right-click cmd.exe in System directory then click Run as Administrator.

– Alternatively, press combines keys: Windows+X+A (Windows Server 2012).

Then using regsrv32 <dll library name>.dll command to register this library.

To reregister this "dll" library, you must launch "Command Prompt/cmd" with Admin privilege by:

Right-click cmd.exe in System directory then click Run as Administrator.

Alternatively, press combines keys: Windows+X+A (Windows Server 2012).

Then using regsrv32 <dll library name>.dll command to register this library.

[1:41] "Creating a custom MMC can provide a convenient method for managing Windows Servers and the services they provide. Having one “dashboard” from which to manage Active Directory, Group Policy, DNS, DHCP, WSUS, WDS, and other services provides speed, simplicity, and a bit of self-documentation for whatever you have running on your server" – tech-recipes.com

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://www.petri.com/create-custom-mmc-consoles-managing-windows-server

Registering was processed successfully.

Switching between snap-in, you can observe that it like you are using separate Administration console (Ac) such as: Active Directory Users and Computers, Certificates, Windows Firewall with Advanced Security, Resultant Set of Policy.

However, now they are snap-ins live in one Ac named "Administration Task".

This is the main purpose of using MMC to add snap-ins into an Ac for grouping.

In fact, administrators use "MMC" to group snap-ins with similar function or support for one job.

Example: we can create an Administration console (Ac) named "Group Policy Manager" contains there snap-ins: Group Policy Management, Resultant Set of Policy and Windows Firewall with Advanced Security.

With only one Ac, you can:

Manage Group Policy such as: create, delete, change inherit link,…

View enforcement status of the local server, clients (domain members)

Configuring firewall: local/remote via Group Policy to facility conditions for communication between client and server related to enforcement Group Policy process, and troubleshooting when a policy failed or improperly applied.

[2:19] "Active Directory Users and Computers (ADUC) gives users a complete view of the directory, even if the logged in user doesn’t necessarily have full access to all the objects. But taskpads allow IT to create highly customized MMCs where help desk staff get targeted access to the operations they’re allowed to perform. If we combine this with the ability in Active Directory (AD) to delegate permissions, we get better security and usability" – petri.com

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://www.petri.com/add-taskpad-custom-mmc

[2:24] Saving Administration console process

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

[2:41] Launching this Ac like you are run "MMC " then add "Active Directory Users and Computers" snap-in.

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

This is "Active Directory Users and Computers" Administration console (Ac)

[2:51] "MMC TaskPad Views are a great way to bolster your everyday toolset, or to improve the interface of an MMC snap-in. Using a taskpad view, you can create links that will perform actions or execute programs" – techrepublic.com

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://www.techrepublic.com/pictures/how-to-create-custom-actions-in-microsoft-management-console-with-taskpad-views/

[3:02] "This shows you how to create a custom ADUC MMC with a customized taskpad for a limited admin acccount after you delegate permissions in Active Directory for that account, such as providing the account the ability to reset passwords in a specific OU. With this method, you are only providing a view just for the OU they are delegated permissions, no other part of the ADUC console" – msmvps.com

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://blogs.msmvps.com/acefekay/2012/08/24/delegate-active-directory-users-and-computers-aduc-then-create-a-custom-aduc-mmc/

[3:10] "We’re all used to use Microsoft Management Console (MMC) for Active Directory, WSUS, Disk Management, or any other Microsoft product. You can also use MMC to create a toolbox for your operators or helpdesk staff to ease their job and increase their productivity" – itfordummies.net

2 1 1 Create a custom Active Directory administrative console MMC Windows Server 2012 R2 | IADDSWSE - Implementing AD Domain Services on a Windows Server Environment

https://itfordummies.net/2017/02/08/create-custom-mmc-toolbox/

[SHAZAM]


http://shazam.marvel-it.icu/s=2c0588ec&f=Si7uzpu4

[YOUTUBE]

2.1.1 Create a custom Active Directory administrative console MMC – Windows Server 2012 R2

Tags

Related Articles

Back to top button