WEBVTT 00:00.350 --> 00:01.770 Hey everybody welcome to the next video. 00:01.770 --> 00:07.950 So in this video we're gonna be going over oh use organizationally units and they're some of the permissions 00:07.950 --> 00:09.810 and properties around them. 00:09.810 --> 00:15.330 So as we talked about before we've got our test o you here we just got nothing in it right now. 00:15.330 --> 00:21.580 So if we went ahead and tried to delete this it fails it won't let us do this and again like I like 00:21.580 --> 00:23.830 I said this is to protect you from yourself. 00:23.860 --> 00:29.620 So in case you build this whole structure this whole domain got all the users got all the computers 00:29.620 --> 00:36.720 it's got automation scraps it's got good policies put in place and you just delete it. 00:36.820 --> 00:37.790 It's gone. 00:37.850 --> 00:44.800 There's no backup from that unless you have an actual back of the domain in a tree. 00:44.800 --> 00:47.070 But in general sense it's gone. 00:47.110 --> 00:49.620 There's there's there isn't a reverse button. 00:50.770 --> 00:57.820 So the first thing we want to do is go to enable advanced features. 00:57.820 --> 01:04.000 So if we go to view advanced features we're gonna see a few more o use present. 01:04.000 --> 01:05.430 We're going to ignore those for now. 01:05.440 --> 01:09.780 A lot of these are stuff that you're never ever going to touch. 01:09.850 --> 01:15.280 I wouldn't worry too much about it just understand that there are more used and what you just saw. 01:15.310 --> 01:17.750 This is this is more or less the full list. 01:18.040 --> 01:22.970 So feel free to play around with with a few of them and see what what what's there. 01:22.990 --> 01:24.310 Take a look at a few things. 01:24.460 --> 01:27.340 But in our case we want to take a look at the test don't you. 01:27.340 --> 01:33.790 So if we right click and do properties we can see that there's a bit here so we can see there's Group 01:33.790 --> 01:37.640 managed by object security common attribute editor. 01:37.750 --> 01:45.940 So if we disable that and we just look at it again we can only see General managed by and com. 01:46.060 --> 01:48.670 So it does provide us quite a few more features. 01:49.390 --> 01:52.210 So go on go back to properties and test all you. 01:52.240 --> 01:55.060 So we have managed by security. 01:55.420 --> 02:01.100 Com and actually Ed so in our case are we looking at object. 02:01.100 --> 02:04.820 So in here we can see that protect from accidental deletions already put in place. 02:04.820 --> 02:08.510 So we're going to go ahead and disable that apply. 02:08.550 --> 02:09.530 OK. 02:09.570 --> 02:10.740 And then now this. 02:10.770 --> 02:21.200 Oh you and only this so you can delete however if we went over to the built in object it's not currently 02:21.200 --> 02:21.860 protected. 02:21.890 --> 02:25.270 So not all of them are protected by default. 02:25.310 --> 02:32.270 So keep that in mind if you wanted this to not be actually deleted and you plan on using a different 02:32.990 --> 02:38.120 oh you struck or you didn't plan on using a different structure then you should probably check this. 02:38.140 --> 02:44.020 So what I also want to introduce you to is something called the asked ESD SDI sort of go back into the 02:44.020 --> 02:53.190 adventure tools or adc editor so with this go ahead and disconnect from me here. 02:56.050 --> 02:58.450 So yours is going to look like this. 02:58.480 --> 03:07.240 So what you need to do is this allows you to modify some of the objects of a current domain controller 03:07.270 --> 03:08.200 or a remote one. 03:08.230 --> 03:14.650 So if we do action connect to now we can see here the path is we're just doing an el DAP connection 03:15.340 --> 03:17.420 which is what we're what. 03:17.590 --> 03:21.750 How you communicate with a D through a protocol called El DAP. 03:22.100 --> 03:29.160 So I'll leave that to you guys to brush up a little bit on El DAP and understand how to make a connection. 03:29.290 --> 03:35.470 There's quite a few ways you can do it so we'll use the standard stuff will leave everything exactly 03:35.470 --> 03:36.150 as it is and we hit. 03:36.160 --> 03:48.180 OK so if we double click on this we can now see we have our red team our nation DC local so that's perfectly 03:48.180 --> 03:48.520 fine. 03:48.540 --> 03:51.810 And then we see all of our same same things as well. 03:51.810 --> 03:58.260 Again we can create a new object but this is more of a raw raw type 04:01.230 --> 04:02.110 tool. 04:02.160 --> 04:06.830 So you're going to have to be a little bit more familiar so you can't just right click user. 04:07.020 --> 04:10.130 So you'd have to come down here and user happens to be the name. 04:10.200 --> 04:14.580 But this is something called object classes now and held up. 04:14.700 --> 04:19.020 Everything has a class associated with it which tells us the type. 04:19.020 --> 04:23.790 So if we come in here to the users and we do properties we have the attribute editor. 04:23.930 --> 04:33.760 If we look for object class we can see object class is a container which is perfect. 04:33.810 --> 04:40.580 So if we come over here and we create a new you it's going to have the organizational one soldiers do 04:40.600 --> 04:41.650 test. 04:41.650 --> 04:42.450 Perfect. 04:42.490 --> 04:45.660 Open up a SDI will refresh. 04:45.780 --> 04:52.960 There's our test properties and we'll look for object classes because the object classes organizational 04:52.960 --> 05:02.550 unit and if we went to a specific user as an example we went into Brandon properties we would see the 05:02.550 --> 05:09.960 organizational unit or the object class as organizational person person and user. 05:09.960 --> 05:11.870 So it has multiple different ones. 05:11.940 --> 05:16.790 So a way an object works in 80 or LDA up in general. 05:16.800 --> 05:18.940 Now this isn't just preference to a D. 05:19.790 --> 05:27.720 Let's son El up any of those they use something called attributes. 05:27.810 --> 05:33.260 So each object class here has a certain set of attributes that are available to it. 05:33.270 --> 05:35.890 So you see a lot of these aren't set. 05:36.110 --> 05:38.210 However you can set these on their own. 05:38.220 --> 05:42.310 So the other mobile there's a UI for that. 05:42.360 --> 05:48.400 Luckily for a D but if you needed to set it through an application let's say you would set it this way. 05:48.450 --> 05:55.470 So understand that each object has an object class and depending on the object class has a set of attributes 05:55.530 --> 06:04.110 or variables that go with it just understand that ahead of time but also know that there is a security 06:04.110 --> 06:04.470 option. 06:04.470 --> 06:08.700 So it does have standard file permissions on who can. 06:08.700 --> 06:16.840 So for example you can see authenticated users can read domain admins have quite a bit of control. 06:17.160 --> 06:21.190 Enterprise admins have again a lot of control. 06:21.480 --> 06:27.930 Administrators cannot delete all child Alex but they can create them so that you can get pretty detailed 06:27.930 --> 06:31.140 with the permissions that need to be done.