Transcript for:
Introduction to Active Directory (AD)

you know what the most confusing thing is to somebody who's trying to get an id and that is trying to explain something to them right away and being way too technical right off the bat so let's say somebody asked you to explain what active directory is how would you do it would you suddenly start talking about domain and starting to own by user accounts group policies and all that stuff they would be like what what are you talking about in this video i'm going to show you what active directory is to somebody who's never been familiarized with active directory whatsoever they've never heard of it i'm going to explain to them in such a way that they can relate to so it's easy to understand as simple as that after that if they're interested in active directory then it'd be much easier to start from there think about it i explain it to you what it is in a simple terms and then once you figure out that first part of it then you can start to look into technical aspects of it imagine is trying to teach somebody how to drive you can show them hey this is the steering wheel this is the house steering wheel moves these are the brakes this is the gas pedal you step on that and then you break on this and then you steer like that those are the basics the only way they can learn how to drive later is by letting them use it letting them drive the car and then afterwards they will learn how to drive car really well but it's going to take some time so this is why i'm going to explain active directory in a simple way to understand so that way if you're interested in it this can get you there all right let's have a look to see what i'm talking about here let's see if i can succeed in explaining what actor directory is to people who have no clue what actor directory is all right here we go guys but before i proceed please take one second to like this video i really appreciate it makes a big difference on in exposure of this video thank you so much i appreciate it so much so here we are this is virtual machine with active directory or server 2019 data center running what we're going to do is we're going to actually work and add some people into the actor directory but before i do that let me explain to you what actor directory is to those people who don't understand that and by the way my teaching in this is very unorthodox the meaning that i don't go by the book in the sense that you sit down and they say go to this chapter and learn this and you know there is a order that you followed going through the book what i'm going to do is explain it to you in a way where it actually makes sense at least i hope it comes across as something that makes sense so active directory is basically a place within a server that has your login credentials meaning your login id for that computer so let's say you start working at a company and that company says okay you're hired now congratulations here's your login id and password so you get your login id let's say your name is bob johnson and you type in bob johnson or whatever it is as your login id and then they give you a password so you can log into the computer you sit down at the computer you use those credentials your login credentials to log into the computer well those credentials are actually coming from the active directory and active directory within the server within within windows server is actually located here so if you click on start button and then you click windows administrative tools and then you select actor directory users and computers so get it you as somebody who's going to use the computer is the user get it you use that login information to use the computer so active directory users and computers are going to be located here we're going to simply connect or simply click on that so as soon as this loads up we're going to add and i'm going to show you where the users are as well it's very simple but we're going to add more users as a practice in this active directory and if you want to follow along you can download a trial version you can see this is a valuation version of server if you want to install it on your virtual machine which could be in this case i'm using oracle virtual box software to install a virtual machine meaning a virtual computer on my computer and that way you don't have to have a second computer to run actor directory on or run the server on so you can download it this is completely free okay so we have now actor directory users and computers so you are the user so guess where you would find your login id if you're thinking users where it says here you'd be absolutely right so your login id would be in this folder it's just like the folders that you have in your documents you know you go in here let's say you open up your documents and you know you go to your documents here and this is the folder with your documents and inside of that you might have more folders and this and that that's the exact same thing here in within this server there's a folder called users and all the people that coup do you use computers the users will be inside of this folder so to find yourself in the folder you can just scroll down and look where where is my login you know this is a fresh usually you would see a lot a lot of people in here within a company you know but you know we have some in here so that's fine but how would you find yourself in here you can scroll through and just look for bob whether we say bob johnson here is bob bob j bob johnson right i think i said bob johnson but you could also right click the folder and click find which makes it the best way to find yourself or anybody else for that matter so let's say you start working help desk and bob johnson calls in and says hey can you look me up i need you to reset my password all you got to do is do what i did here you right click the folder you know you click find like i showed you and then just type in name bob jay i think i have a miss bob j in there so i'm gonna click find and there's bob and now we can go and make changes to it but before we do any of that let's kind of expand on this users fa part of it we need to in this um in this scenario in this practice and if you have it along if you have this installed you might as well play along while we're doing this i'm gonna go at slower pace in this video just for that we're going to add five more people in there at least five i think and we're going to come up with some names so i'm gonna come up with some common names i'm going to say susan jackson and then we're going to add her in into that folder of the users because she's new susan just started working in accounting we got to give susan a login so she can sit down at the computer and log in you know and then we got larry um i don't know larry buffett sure and then larry started working in accounting as well they hired two people for this uh role-playing scenario and then we have mike uh let's see what was his name what could we give him his name mike uh bobson i don't know i'm just coming up with names and then we're going to create another one and we're going to say laura bailey and then one more we're going to say uh why am i struggling here it's early devoted guys for me it's like seven in the morning so i'm struggling to come up with days this is kind of silly okay okay one more name come on irvin you can do it you can do it i'm trying to psych myself up um okay uh mary pipkins all right that's that's good enough so we got susan jackson larry buffett working in accounting accounting group and then we got mike bobson laura bailey and mary pipkins working in collections all right collections call center so there are those collection reps you know you know the ones that call you and collect the money trying to collect money for it okay so we got to give them login ids and passwords so that way they can log into their computers wherever they might be sitting keep in mind this is a domain you can see how it's called tech support techsupport.kobuman.com this is a domain meaning that it's a group of computers as you can see here that that are in there and usually this will be like populated with a lots of computers and users just to kind of keep it simple to understand and so domain is a group of computers and users for an organization so this is how you organize and control their login access so you got to have a way to control everybody's login in a single point which in this case is this actor directory so again i'm not going to go into technicals we're just going to learn what actor directory is in relation to just everyday work and people that use that you know they use active directory without even knowing actual directory so meaning that you know once you get a login id and password you're using actor directory um indirectly you know actor directory gives you the credentials to log in okay so we're going to add uh where where's our sticky notes here it is susan jackson so to add new user we can right click the users folder and we can select new and then guess what she's a new user correct so we're going to add a new user other way of doing it is if you make sure that the user's folder is selected and then just hover and then click here where it says create new user in the current container meaning that whatever is selected it's going to create it inside it but i like to stick to this so if you're if you're new to computers chances are you're going to start with you know basic you know as a basic technician or somebody who's working help desk which is what you would have access to mainly so you would right click and then go to new and then create new user so this is what we're going to do we're going to start from the very basics and first person is susan jackson susan last name jackson okay and now we can tell tell her or basically tell her or give her a user login name so this is the thing that i mentioned over and over again this is what you use as your id to log into any computer that is controlled by this domain which is domain which is also known as the main controller which is this server that we are literally inside of okay so we're going to give her a login id which could be anything it could be combinations of letters and numbers and and that's fine but we're going to keep it simple here so we're going to call it susan j and if there are more than one susan jackson in there and you want to keep the logins like simple like this you may want to put in like susan j2 or susan j3 or something else that defers her from the other susan jackson if there is another susan jackson so for now we're just going to say susan j and we're just going to leave it at that so once we click next here we can give her a temporary password so the way you do that is literally just typing in whatever you password you want but make sure that you don't make any changes here you see how by default it says here there's a check mark here where it says user must change password at the next login so whatever we type here as her password is is might as well be something very simple in the sense that she's going to be forced to change the password anyways first time she tries to use that password not necessarily a secure way of doing it but we're going to keep it simple here so i'm going to type in new user one and then type it again new user one so this way she's going to be forced to change the password and if you're doing this and giving somebody a temporary password so let's say you are working help desk and susan calls you and says i can't log into my computer you can change your password as well but make sure there is a secure way of conveying what her temporary password is so we're gonna type in this time we just use new user one as a simple password and then we're just gonna click next because she's gonna be forced to change it anyway okay now susan jackson is in there now she can go to any computer and log in using those login credentials meaning login id and password but then and and and that's fine she's in there but she is now in a general just general group out there in in in the environment she's still not this is not organized right she's here right next to susan right next to all of these other people that are in there so they're all in the same group which is which is not organized way of doing things and then keep in mind she is now hired to work as somebody in accounting group so we have to have a way of doing this and we're i'm going to show you how to do that too it's very very simple but for now let's just create another login and that's for larry buffett here we're going to add him and then we're going to go in there and or we'll do organizing but for now we're going to click right click users again go to new and then we're going to click user and then we're going to create the login id just like we did for susan here we're going to create one for larry larry buffett and we're going to call it i'm going to give a login id larry b i'm pretty sure he's the only larry b uh larry uh so if there's another larry buffett in there we're going to we know we would get an error so we would but in this case it's fine so again we're going to give him him same deal we're going to give him a new new password temporary password we're going to call it new password and again i can't stress this enough the company you work for may have different security requirements when it comes to giving new passwords i distracted myself from that okay new user right user what they're going to always make sure that this is checked to force them to change the password so they have their own password for security and then we're going to click next and then larry buffett is in here okay so now we have larry buffett and we got susan jackson we can see they're highlighted because they're you know we created them recently and uh we have to keep in mind that these guys now they can log into any computer which is fine but when it comes to specific groups for example in this case they work for accounting group the accounting group is chances are we'll have different security settings let's just call it that security settings compared to somebody who works in collections call center so chances are security settings for accounting group are going to be completely different from collections so we got to make sure that we put them in their own group it's literally just a group of people right it's just a group of people that belong to certain department or i guess organization if you will but in this case accounting so what we're going to do here we're going to and to keep it simple this is not necessarily way to organize this again this is just me explaining how this how active directory works for people who don't know what actor directory is this is not for system administrators video so we're going to right click just to keep it in the same place we're going to right-click users folder again just so we can get to this part where it says new and there guess what we're going to create we want to create a group we're going to create a group but before we do that and what i was going to do is call create a group called accounting right but let's make sure that the group is not in here already i don't see it i don't see a group called accounting let me just do a quick search right click find i'm going to type in accounting yeah there's no group name named accounting so we're going to have to create that group we're going to make sure that they're you know they're grouped right so we're going to go right click we're going to go to new and select group and then we're going to call it accounting right we're going to call it accounting so and what this literally does is creates a way to keep all the same people that belong to the same group in this case accounting in one place it's literally that's all it does for now that's all you need to know as somebody who is one wanting to learn active directory from very very beginning and where it says group scope and all of that there is a reason you might want to change this for example to domain local but i'm not going to expand on this again because this is just for somebody who'd never seen a never seen actor director so we're just going to keep it super simple and i'm going to leave everything as it is okay just just keep in mind for those people who are watching here and say oh you know you did this at that no this is me literally talking to the people who have no clue what actor director is no offense to anybody so again sorry about that a little rant but then again we got to put these two people susan jackson and larry buffett we got to put him somewhere and that is accounting group so we're going to create a group called accounting and we're simply going to put them in there and i'll show you how it's very simple so now we have a group in our act directory this is accounting group and for everybody that works in accounting which includes two new people that they just hired we're going to put them inside of that group so we found accounting it's there and we're the way we're going to add those people in there we're just going to double click on it and we're going to add members you see how it says it's literally the next thing there it says add members and we're going to add susan and larry in there but let me show you again so here's the group you can see it's a security group global in this case and they belong to accounting and this is what you would do after you put them in there so we got susan where we're gonna have to find her again but there's larry and we're going to have to add him to that group so after we created larry and susan we're going to add them in there so we find accounting and then we're just going to double click it or if you can't find it in there we're going to select find and we're going to type in accounting so there are multiple ways of finding this group anyways there the point is what i'm saying is that we need to add them in there so that way it's organized we've got to have organization within this actor directory okay so we're going to double click accounting and then we're going to add members to this accounting group because remember we hire them so we're going to click on members they're members of the group they're hired for accounting and then we're going to in the second tab where it says members if you're if you're following along and i'm purposely going slower just so you know so you can catch up we're going to add them in there so if you go down and then you click add we can simply now look for these two people and i know this kind of looks like hey this is just the search box where is the drop down menu where is like you know this looks simple and that's okay this is actually really good this box is really good at finding people so again we are in the members tab we're going to add new members to this accounting group we're going to click add and here we can simply just type in susan matter of fact we're just going to type in susan j let's see if i'll find it let's see if it's good at finding it there it is it found susan jackson right away right this is susan jackson we know and if there are multiple ones you would know as well but if you really want to be very specific you can type in full name and then you can confirm that yeah indeed i've just added susan i remember we added we we gave her susan j as her login right susan j this is where she's going to type in at the computer to log in and it says at tech support techsupport.kobuman.com meaning at meaning at the server level or i should say at the domain level or at the active directory level these are all the same things that i literally just said so it's at server level at um at server level and meaning that their her credentials coming from the server their her credentials are coming at or from domain which is the same thing cobbleman.com or techsupport.comman.com is the name of the domain um anyways see i'm starting to get technical here right away see it's just a bad habit anyways this is where she's getting her login from from this place where it says tech support which is the server that we're working on right now so we know it's susan j so we're going to click ok there she is she's now added to this group she's now member of accounting group and we're going to do the same thing for larry right we got to add larry in there i'm going to type in larry let's see if just larry comes up just by typing on there there he is larry buffett i didn't have to type in anything else and we know it is the same larry because we gave him larry b login right there okie dokie so that's simple guys right this is simple basic part of it matter of fact if this is all you learn as you know somebody who is going to do help desk for now or just basic tech support like this is all you need to do even if you're thinking about doing desktop support chances are this is all you need to know when it comes to actor directory and i'm definitely going to expand on this but since we're done now with these two first two people we're going to add the other ones too once i'm once i'm here i want to explain what the point is of what the further point is of putting people in active in a group within active directory so we now we know that accounting accounting department has two members these two members the reason they're organized so this is active directory is all about organizing things all about organizing things if it's a huge company especially and we can see that we have larry and susan in there and now they're grouped so you know how when you log into a computer at a company or if you've never if you've never seen that but what happens is you log into a computer company's computer using these login ids using these login passwords you know let's say susan goes in and she just started and she logs in and then suddenly she realized that there are certain things she cannot do on a computer or she suddenly realizes that she's missing icons on her computer just like we are seeing here on this virtual server she's missing all these things or suddenly she realizes that she cannot uh she cannot for example read files or create new files or anything like that that's chances are because she hasn't she doesn't have the security or she's not allowed because of the security to do these things so chances are you can set this up that once you just create somebody like we did and you put them in there like you know susan jackson just sits here and let's say she's not part of group chances are she wouldn't be able to do any of these things like create new files you know access icons or any of that stuff so the point of us putting her in accounting group here is that so she can get those specific permissions that accounting department is allowed to do so accounting department has certain permissions they're allowed to do certain things so that's the whole point of putting somebody into a group again i'm trying to explain this in a simple way without actually going to system administrator part of it and creating actual security groups and all of this system admin stuff this is just for somebody to understand what active directory is okay now to complete our practice we're going to add these other people into a collections group as well and if there is no collections group we're going to create a collections group so we got mike bobson we're going to do this again we're going to right click users and we're going to click new user and we're going to is it bob bob bobson no it's mike bobson mike bobson and we're going to give him an id of mike b so we got mike bobson there are no other mics probably and we're going to give them a login id of mike b again at techsupport.com and yes if i were to get technical you can have multiple domains within same actor directory this is why you have the drop down here but anyways i digress this is a video i know i apologize for repeating myself but this is a video to explain what actor directory is to somebody who's never uh who's not familiar with it and we're gonna give him a password new user one all right new user one and make sure you stick around because i will actually show you how to reset their password because they will change our contact you say i can't log in again so we got to go in sometimes their accounts get you know locked out or or even disabled anyways we got mike bobson in there and let's create another one laura bailey all right new excuse me laura bailey we're going to call her laura b by the way this is not the login ids are not case sensitive so just because i put laura b as in cap b like capital letter b and capital l doesn't matter new user one new user one so we created laura in here and then we got mary pipkins again we're still we're just only creating basic login for them mary pipkins mary p all right we got all those three added in there so now that we know they are part of collections group we gotta you know put them in the collections uh they're part of call center they're gonna be taking collection calls so let's see if there's collections group in there we're going to right click the users collections fine now and again when it comes to further organizational point of this just to touch on just a little bit somebody who's a system administrator chances are most of these the the login ids and groups that you see in here they will be gone from here and then you would have different folders in here that control different organization you may have a folder that's called groups you know separately that's i don't want you to worry about that now i'm just telling i just want to show you this part of it how this actually functions but when it comes to organizational point this is something you would you would look different is what my point is it would look different from what this is this is just basic how it looks like once you want to install windows server okay so there's no group collections so we're going to have to create this group to put them in their own group called collections so again we're going to you know right click new and then create a group and we're going to call it collections matter of fact we're going to label it call center okay and now we're going to add those three people to this group so here is here's our security group for collections we're going to put them in collections group because they're part of corrections again once we open this we're going to add members and it's the second tab again we're going to click members and we're going to add them in there i'm going to click add and just like we did before let's see who was the first one that we created mike bobson mike bobson actually let's do this let's just type in mike let's see what happens aha you see once you type in mike just mike you can see there is another mic in here there's a mike moser but we know that mike moser is not the guy we know it's mike bobson good old mike b so we're going to add mike bobson right yeah see this could actually be fun too right so we got bike bob sign added to our collections group now we're going to add somebody else who was it i know it's mary but there was the laura bailey let's type in laura laura where's laura all right there's only one laura so that's cool we know it's laura bailey lura b we're gonna add laura b in here and then we got mary of course we can't forget about married guys we gotta add mary into the group otherwise mary can might log into the computer and suddenly realize that she can't do anything she'll still be able to log into her computer but chances are she won't be able to do anything because of special permissions for collections and there's our mary p mary pipkins all right now he added her and then again just to kind of touch on this you don't necessarily have to worry about this as somebody who is you know adding people to actual directory chances are the members off will have things in here and basically that would again control what all of these people in collections can do that's what that does in here so we're going to leave it at that and now they're part of collections now whatever collections is allowed to do these people are put in the collections group now they can do all of these things okay so now as somebody who might start doing basic tech support or you know help desk they may get a call from for example larry here as larry calls in and says i can't log into my computer well we can look them up in active directory scroll through but the best way to find them is to right-click the users folder and then select find i always say this this is the easiest way to navigate this thing was it did i say larry larry buffett i'm sorry guys it's early in the morning for me and uh you know i my shirt sometimes my short memory to be honest is not that great so we search for larry and larry buffett comes up and just to show you if we were to search for was it mic if we're a search for mic there will be multiple mics so you might want to be specific when you search so let's say we're searching for mic here you can see there's two mics again right but we know it's larry so we're going to search for larry there's larry buffett we found him easy peasy we're going to double click on them i'm sorry we're not going to double click on this is this is details about there are anyways i again i'm trying to keep it simple so we're going to close that for now this is another video so we found larry we just want to reset his password that's it we just want to reset his password because he can't log in or maybe unlock his account so we're going to right click larry here it's very simple we found larry whether it's in here or inside of this big thing that we're just currently scroll down it's going to be the same thing once you find larry buffett we're going to right click right click with the mouse and then we're going to guess what we're going to reset password and here we can set new password and again it kind of looks like similar when we created his login id right remember this thing where it says user must change password and next login and it kind of gives you this thing where it says user must log off and then log on again for changes to take effect so we're gonna have to tell him that if he's logged in already into computer that he needs to log off that's what it says here before we change his password so best thing to do is tell him restart your computer you know reboot and it looks just like when we created her where his password sometimes people try too many times and they lock themselves out there is a limit to how many times you can challenge change there or try to use the wrong password so if he is locked what we want to do is click here where it says unlike the user's account this will do it once we change the once we click ok as well but we're we're going to give them a new password so we're going to give them a new password and you can call whatever you want you know depending on what security policy is for your company you can just call it monday one let's say today is monday let's say today's friday you can call it friday one just so it's simple for him to kind of type in i try to make these simple and keep them very simple for them as long as i'm allowed to right so whatever the password is you have to confirm it and you're telling this is the new password and whenever he tries it he's going to be forced to change it so that he's on it so so that way you don't know what his password is and then we make sure that he's unlocked in case he tried way too many times the same old password so chances are he might be locked this way we're going to unlock him and now the password for larry has been changed we can tell larry okay your new temporary password keyword temporary password is monday one you're gonna have to change it make sure you know make sure that uh you know you do so and well he because otherwise he'll have to you just tell him you'll be forced to change your password so you'll have your own password and that's that we have a reset hilarious password now there are other things within actor directory that there are there are a lot of other things in active directory but the point that i'm trying to make with this whole video is to explain to somebody who doesn't have a clue what actor director is how many people go i tell you what within your household you have people that everybody knows how to use a computer go to them and ask them hey do you know what active directory is do you know what domain is what the main controller is they won't know chances are really high they have no idea so the only place you would encounter this is in a business environment so if you're trying to get a job as a technician or help desk or whatnot this is a really good intro and a way to uh introduce yourself to actor directory all right guys i hope you like this video i purposely tried to go slow so that way everybody can understand it and i hopefully that worked i hope so all right guys um i guess i'll show you my video outro so you can see my face all right let's get to that i hope you find this video interesting and educational because that's the whole point actor directory is not super complex it can become complex but only at the level of trying to actually build an active directory for a business where you have to make sure that certain aspects of security are in place so if you're a system administrator that's a whole nother thing but even before you become a system administrator you have to learn the basics of active directory right again i go back to my point or correlation with driving you don't suddenly start driving like a professional driver until you actually start from basic stop and go i hope this message comes off as clear and understanding all right i hope you like it thank you so much for taking a moment to like and share this video i hope to see you next time bye