Managing AD Computers

PRACTICE ! PRACTICE ! PRACTICE !

By default, all the machines which joins a domain (except for the DCs) will be put in the container called Computers

While there is no rule on how to organise your machines, an excellent starting point is segregating devices according to their use

Workstations - They are one of the most common devices within an Active Directory domain

• Each user in the domain will likely be logging into a workstation. This is the device they will use to do their work or normal browsing activities. These devices should never have a privileged user signed into them

Servers - Servers are the second most common device within an Active Directory domain

• Servers are generally used to provide services to users or other servers

Domain Controllers - They are the third most common device within an Active Directory domain

• Domain Controllers allow you to manage the Active Directory Domain, These devices often contain the most sensitive devices within the network as they contain hashed passwords for all user accounts within the environment