One password for a whole college
A college has 1,200 students and 150 staff. Each person signs in to many computers with the same name and password. Staff can open the staff drive. Students cannot.
Nobody made 1,350 accounts on every computer by hand. One central list does the job. This lesson is about that list and what hangs from it.
Key words
| Word | What it means |
|---|---|
| Network | computers and devices joined together so they can share data |
| Protocol | a set of rules that devices follow to talk to each other |
| Client-server network | a network where client devices ask a central server for services |
| Directory | a central list of the accounts, devices and groups in an organisation |
| AD DS | Active Directory Domain Services, the Microsoft directory for a network of Windows computers |
| Domain controller | the server that holds the directory and checks sign-ins |
| OU | organisational unit, a folder inside the directory that holds accounts and devices |
| Security group | a set of accounts that are given the same permissions |
| Distribution list | a set of accounts that are sent the same emails |
| GPO | group policy object, a bundle of settings and files that the directory pushes out |
| LDAP | the protocol that programs use to search a directory and check a sign-in |
| Authentication | proving who you are, for example with a password |
| Permission | a rule that says what an account may do |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can explain what AD DS, OUs, security groups, distribution lists, group policy and LDAP do on a client-server network.
Starter
Have a go
Starter
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
The directory and AD DS
A directory is a central list. It holds user accounts, device accounts and groups.
AD DS is the Microsoft version. It runs on a domain controller. When you sign in, the computer asks the domain controller if your name and password are right.
A technician changes a person once, in the directory. Every computer sees the change.
OUs, groups and lists
An OU is a folder in the directory. You put accounts and devices in OUs to keep them tidy. A policy can be tied to an OU.
A security group gives permissions. Put ten teachers in the group "Maths staff". Give the group the maths folder once, and all ten can open it.
A distribution list is for email only. It cannot give permissions.
Check
Have a go
Check
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.