zettelkasten/OneNoteExport/Technik/Dokumentation/Konzepte/03_OU's n der AD.md

OU\'s n der AD

Dienstag, 23. Januar 2018

13:41

 

![Computergenerierter Alternativtext: Active Directory Users and Computers \[SVCDCPD02.SVC.DEV\] Saved Queries SVC.DEV 8uiItin CENTRAL ACCOUNTS BLUE CONTACTS GREEN PWCHECK RED CUSTOMER ACL ADSI CTX GPO MDM PRT PSR REG S48 SCCM SQL SYS GROUPS SERVERS TRASH Computers Domain Controllers ](media/image1.png){width="4.46875in" height="7.25in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:41

 

![Computergenerierter Alternativtext: 8ulItln CENTRAL ACCOUNTS CUSTOMER GROUPS aj RIGHTS ACL ADSI ALO APPDNA CTX GPO PREF PSR REG SCCM SQL SYS ROLES QSC SERVICES SERVERS TRASH Computers Domain Controllers ForeignSecurityPrincipaIs LostAndFound Managed Service Accounts Program Data System Users ](media/image2.png){width="3.6145833333333335in" height="6.885416666666667in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:42

 

![Computergenerierter Alternativtext: 8uiItin CENTRAL ACCOUNTS CUSTOMER GROUPS SERVERS ADFS BLUE RED APPDNA CDC-P CDC-T DC-P DC-T WEM-p F8D MON SCCM SCRIPT UNIX TRASH Computers Domain Controllers ForeiqnSecuntyPrincipaIs ](media/image3.png){width="3.1770833333333335in" height="7.53125in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:43

 

 

![Computergenerierter Alternativtext: ACCOUNTS CUSTOMER GROUPS SERVERS TRASH Computers Domain Controllers ForeignSecurityPrincipaIs LostAndFound Managed Service Accounts red SQL mon sm SVCD8PIOJ svc_adfs svc SVCD8PD01J svc_SVCD8PD3J Program Data Microsoft System AdminSDHoIder ComPartitions ComPartitionSets DomainUpdates Meetings Microsoft SharePoint Products Policies RAS and IAS Servers Access Check System Management WinsockServices WMIPoIicy Default Domain Policy Dfs- Configuration DFSR- GlobalSettings File Replication Service FileLinks psps RpcServices Users ](media/image4.png){width="3.5104166666666665in" height="7.135416666666667in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:44

 

![Computergenerierter Alternativtext: APPPKIEnroIIment Function aza blue Function aza red Function 8inaryD8 Function Black 01 Function Black 02 Function Black 03 Function Black CA Function blue_sysmgmt_l Function blue_sysmgmt_2 Function CloudCockpit CTX Function Cloudcockpit Ida Function ConfigRepository Function cr tl dbo Function crobot admin Function crobot user Function cstore root Function CTX-APPDNA Function CTX-PubIishing Function deploy blue Function ctx deploy red Function ctx ems Idap Function .fct CCockpit LDAP fct MailGW LDAP fct maintenance adm NetScaIer LDAP Git Idap Function Joindomainmdt Function joindomainunix Function KeyRecoveryAgent Function pki cdsgn 01 Function red sysmgmt_l Function red sysmgmt_2 Function SCCMmgmtDOI Function L, SCCMmgmtD02 Function SCCMmgmtOI I Function SCCMmgmt012 Function SCCMMgmt014 Function SCCMmgmt016 Function SCCMMgmtOIg Function Type User User User User User User User User User User User User User User User User User User User User User User User User User User User User User User User User User User User Description Azure Automation Hybrid Worker - BLUE ZONE Azure Automation Hybrid Worker - RED ZONE Fuktionsuser für Binary Tree DB Zugriff BLACK ZONE Administrator BLACK ZONE Administrator BLACK ZONE Administrator BLACK ZONE Administrator Group Account: Monitoring Systems Group Account: Monitoring Systems Used by CloudCockpit to query Citrix Cloudcockpit Ida Zugriff auf ConfigRepositoryShares Cloud Robot Database User Funktionsuser für die Durchführung von Automatisierungsvorgängen Funktionsuser für die Dialogmeldung freigeschalteter User Cloud Store Superuser für alle Domänen QSC AG - administrative Account Run Publishing Script via SCCM QSC AG - administrative Account CSC AG - administrative Account Enterprise Management Server LDAP User Technical account for Claud Cockpit LDAP access LDAP User for Mail Gateway Technical account for AD schema changes Technical account for NetScaIer LDAP access Idap user for GIT Technical account for MDT Domain Join QSC AG - administrative Account User to reccn.\'er archived private keys Code Signing User 01 SVC.DEV Group Account: Monitoring Systems Group Account: Monitoring Systems System Center Full Administrator, access to all Scopes System Center Configuration Manager Installation Account The Domain Joining Account is used in a task sequence to join a newly imaged computer to a domain. This account is re-quired if you add the step Join Domain or Workgroup to a task sequence, and then select Join a d The Network Access Account is used by client computers when they cannot use their local computer account to access con-tent on distribution Points. The Reporting Services Point Account is used by SQL Server Reporting Services to retrieve the data for Configuration Manager reports from the Site database. The Windows user account and password that you specify are The Capture Operating System Image Account is used by Configuration Manager to access the folder where captured images are stored when you deploy operating systems. This account is required if you add the step CSC AG - administrative Account ](media/image5.png){width="16.572916666666668in" height="8.479166666666666in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:51

 

 

![Computergenerierter Alternativtext: BLUE SECURITY ZONE Properties Name SYS SYS SYS SYS SYS SYS SYS SYS Member Of BLACK Oeny log on as a batch job BLACK Dany log on as a service BLACK Deny log on localfy BLACK Deny log on through Remote Deskto GREEN Deny log on as a batchjob GREEN Deny log on as a service GREEN Deny log on localfy GREEN Deny log on through Remote Deskto Attribute Editor Managed By Active Directo SUCOEW•CEN SVC DEV/CE SVC DEVICE SVC DEVICE SVC DEVICE SVC DEVICE SVC DEVICE SVC DEVICE This list displays onfy groups from tha current domain and groups maintained in tha Global Catalog. such as universal groupe Halp ](media/image6.png){width="4.416666666666667in" height="5.114583333333333in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:56

 

![Computergenerierter Alternativtext: BLACK SECURITY ZONE Properties Attribute Editor Managed Active Directory Do Name SYS SYS SYS SYS SYS SYS SYS SYS BLUE Oeny log on as a batch job BLUE Dany log on as a service BLUE Deny log on localfy BLUE Deny log on through Remote Des GREEN Deny log on as a batchjob GREEN Deny log on as a service GREEN Deny log on localfy GREEN Deny log on through Remote D SUCOEV/CENTRA SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT This list displays onfy groups from tha current domain and groups maintained in tha Global Catalog. such as universal groupe Halp ](media/image7.png){width="4.416666666666667in" height="5.104166666666667in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:55

 

![Computergenerierter Alternativtext: GREEN SECURITY ZONE Properties Name SYS SYS SYS SYS SYS SYS SYS SYS Member Of BLACK Deny log on as a batch job BLACK Dany log on as a service BLACK Deny log on localfy BLACK Deny log on through Remote Des BLUE Deny log on as a batchjob BLUE Deny log on as a service BLUE Deny log on localfy BLUE Deny log on through Remote Desk Attribute Editor Managed Active Directory SUCOEV/CENTR\' SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT SVC DEV/CENT This fist displays onfy groups from tha current domain and groups maintained in tha Global Catalog. such as universal groupe Halp ](media/image8.png){width="4.385416666666667in" height="5.083333333333333in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:56

 

![Computergenerierter Alternativtext: RED SECURITY ZONE Properties Attribute Editor Managed Active Di Name SYS SYS SYS SYS SYS SYS SYS SYS BLACK Oeny log on as a batch job BLACK Dany log on as a service BLACK Deny log on localfy BLUE Deny log on as a batchjob BLUE Deny log on as a service BLUE Deny log on localfy BLUE Deny log on through Remote Desktop Ser GREEN Deny log on as a batchjob SVC DEV SVC DEV SVC DEV SVC DEV SVC DEV SVC DEV SVC DEV This list displays onfy groups from tha current domain and groups maintained in the Global Catalog. such as universal groupe Halp ](media/image9.png){width="4.364583333333333in" height="5.0in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:57

 

 

**OU Groups Roles Services**

![Computergenerierter Alternativtext: Name BLACK ZONE Active Directcry Services Administratcrs BLUE ZONE Active Directory Services Operators BLUE ZONE ASG CloudFactory Operators BLUE ZONE ASG Infrastructure and CloudCockpit Managers BLUE ZONE Backup Operators BLUE ZONE CC Security BLUE ZONE Certificate Manager BLUE ZONE Certificate Services Administrators BLUE ZONE Citrix Advanced Help Desk BLUE ZONE Citrix Application Support BLUE ZONE Citrix Auditor BLUE ZONE Citrix Help Desk BLUE ZONE Citrix Operators BLUE ZONE Customer Account Management BLUE ZONE Database Operators BLUE ZONE EV Help Desk BLUE ZONE EV Power Administrator BLUE ZONE EV View only BLUE ZONE Exchange Help Desk BLUE ZONE Exchange Operators BLUE ZONE Exchange Recipient Management BLUE ZONE Exchange Server Management BLUE ZONE Exchange View only BLUE ZONE Fileservice Operators BLUE ZONE Mobile Device Management Helpdesk BLUE ZONE Mobile Device Management Operators BLUE ZONE Monitoring Administrators BLUE ZONE Print Service Operators BLUE ZONE Read all Customer Services BLUE ZONE Remote Desktop Services BLUE ZONE Remote Desktop Services Application Support BLUE ZONE Remote Desktop Services Operators BLUE ZONE Remote Desktop Services Users BLUE ZONE Service Desk Shared Services BLUE ZONE SharePoint Operators BLUE ZONE SharePoint Services BLUE ZONE System Center Application Administrator BLUE ZONE System Center Citrix Application Administrator BLUE ZONE System Center Client Application Manager BLUE ZONE System Center CUSTOMER Operators Security Group - Glcbal Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group - Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group - Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group - Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group - Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Security Group Global Description Active Directory Services Administratcrs - BLACK Active Directory Services Operators - BLUE ASG CloudFactory Operators - BLUE ASG Infrastructure and CloudCockpit Managers - BLUE Backup Operators - BLUE CC Security BLUE Certificate Manager - BLUE Certificate Services Administrators - BLUE Citrix Advanced Help Desk - BLUE Citrix Application Support BLUE Citrix Auditor - BLUE Citrix Help Desk - BLUE Citrix Operators - BLUE Customer Account Management - BLUE Database Operators - BLUE Exchange Help Desk - BLUE Exchange Operators - BLUE Exchange Recipient Management - BLUE Exchange Server Management - BLUE Exchange View Only BLUE Fileservice Operators - BLUE Mobile Device Management Operatrors BLUE Mobile Device Management Operators - BLUE Monitoring Administrators - BLUE Grants full Administrative Permissions for Print-Services - BLUE Read all Customer Services - BLUE Remote Desktop Services - BLUE Remote Desktop Services Application Support - BLUE Remote Desktop Services Operators -BLUE Remote Desktop Services Users - BLUE SharePoint Operators - BLUE System Center Application Administrator - BLUE System Center Application Administrator - BLUE System Center Client Application Manager - BLUE System Center CUSTOMER Operators - BLUE ](media/image10.png){width="9.145833333333334in" height="8.177083333333334in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:58

 

 

![Computergenerierter Alternativtext: BLUE ZONE System Center Sofware Update Manager BLUE ZONE Workplace Help Desk GREEN ZONE CC Security GREEN ZONE Citrix Operators GREEN ZONE Monitoring Administrators GREEN ZONE Opentext Operators GREEN ZONE Remote Desktop Services Users GREEN ZONE System Center Client Application Manager GREEN ZONE System Center Client Operators GREEN ZONE System Center Client Read Only Analyst GREEN ZONE System Center Client Remote Tools Operators GREEN ZONE System Center Client Software Update Manager RED ZONE Account Management RED ZONE Active Directory Services Operators RED ZONE ASG CloudFactory Operators RED ZONE ASG Infrastructure and CloudCockpit Managers RED ZONE Backup Operators RED ZONE CC Security RED ZONE Certificate Manager RED ZONE Certificate Services Administrators RED ZONE Citrix Advanced Help Desk RED ZONE Citrix Application Support RED ZONE Citrix Auditor RED ZONE Citrix Help Desk RED ZONE Citrix Operators RED ZONE Database Operators RED ZONE DHCP Operators RED ZONE Exchange Operators RED ZONE Fileservice Operators RED ZONE Monitoring Administrators RED ZONE Remote Desktop Services Users RED ZONE SharePoint Consulting RED ZONE SharePoint Operators RED ZONE SharePoint Services RED ZONE SharePoint Test Full Access RED ZONE Skript Release Management RED ZONE System Center Application Administrator RED ZONE System Center Operators RED ZONE System Center Read Only Analyst RED ZONE System Center Software Update Manager Type Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Global Description System Center Sofware Update Manager - BLUE Workplace Help Desk - BLUE CC Security GREEN Citrix Operators - GREEN Monitoring Administrators - GREEN Opentext Operators - GREEN Remote Desktop Services Users - GREEN System Center Client Application Manager - GREEN System Center Client Operators - GREEN System Center Client Read Only Analyst GREEN System Center Client Remote Tools Operators - GREEN System Center Client Software Update Manager - GREEN Account Management - RED Active Directory Services Operators - RED ASG CloudFactory Operators - RED ASG Infrastructure and CloudCockpit Managers - RED Backup Operators - RED CC Security RED Certificate Manager RED Certificate Services Administrators - RED Citrix Advanced Help Desk - RED Citrix Application Support - RED Citrix Auditor - RED Citrix Help Desk - RED Citrix Operators - RED Database Operators - RED Exchange Operators - RED Fileservice Operators - RED Monitoring Administrators - RED Remote Desktop Services Users - RED SharePoint Operators Test group for SharePoint development Skript Release Management - RED System Center Application Administrator - RED System Center Operators - RED System Center Read Only Analyst - RED System Center Software Update Manager - RED ](media/image11.png){width="10.395833333333334in" height="8.6875in"}

 

Erfasster Bildschirmausschnitt: 23.01.2018 13:59