Windows 2003 Server Support Tools

Active Directory Service Interfaces Editor (ADSI Edit) is part of Windows 2003 Server Support Tools. It is a LDAP editor that you can use to manage objects and attributes in AD. ADSI Edit lets you have a view of every object and attribute in AD. You can query, view, and edit attributes that are not shown with other AD MMC snap-ins.

We will need ADSI Edit later on for several tasks. To use it you must install the Windows 2003 Server Support Tools, and then:

1. press START -> Run : mmc

   Figure 1.16: Run: 'mmc'

   

2. File -> Add/Remove Snap-in

   Figure 1.17: File - Add/Remove Snap-in

   

3. Add
4. ADSI Edit

   Figure 1.18: Adding ADSI Edit

   

5. Add
6. Close
7. Ok

If you want to work locally at the server, you must:

1. Right click at ADSI Edit

   Figure 1.19: ADSI Edit - Connect to...

   

2. Select Connect To...
3. Then you should check:
   • Connection Point: Domain and Configuration

     Figure 1.20: ADSI Edit - Domain

     

     Figure 1.21: ADSI Edit - Configuration

     

   • Computer: Default or Domain domain.com

NOTE: Until the end of this chapter, we'll work with Connection Point checked for both Domain and Configuration.

Figure 1.22: Domain and Configuration under ADSI Edit

If you dont have the standard ADSI Edit, you can download it at
http://tinyurl.com/yhgn9u and follow these steps:

• Extract all files to a folder;
• Copy the adsiedit.dll to c:\windows
• At Start - Run insert regsvr32 adsiedit
• Start using the ADSIEdit executing the file adsiedit.msc