SENIOR HIGH SCHOOL

Technical-Vocational-Livelihood
COMPUTER SYSTEMS SERVICING NC II
Quarter 3 – Module 1
Setup User Access:
Create Organizational Units and User on
Active Directory Windows Server 2008 R2
Technical-Vocational-Livelihood
COMPUTER SYSTEM SERVICING NC II
Second Semester Quarter 3 - Module 1: Setup User Access: Create
Organizational Units and User on Active Directory Windows Server 2008 R2
LO1 – Set-up User Access

Republic Act 8293, Section 176 states that:

No copyright shall subsist in any work of the Government of the Philippines.
However, prior approval of the government agency or office wherein the work is created
shall be necessary for exploitation of such work for profit. Such agency or office may,
among other things, impose as a condition the payment of royalties.

Borrowed materials (i.e., songs, stories, poems, pictures, photos, brand names,
trademarks, etc.) included in this book are owned by their respective copyright holders.
Every effort has been exerted to locate and seek permission to use these materials from
their respective copyright owners. The publisher and authors do not represent nor claim
ownership over them.

Regional Director: GILBERT T. SADSAD

Assistant Regional Director: JESSIE L. AMIN

Development Team of the Module

Author: MISHAEL T. LIM - Teacher II (Tubli National High School)
Editors: ALLAN BENOYO – Master Teacher I (SAVS)
JERICK M. MANLAGÑIT – Teacher II (Calatagan HS)
Reviewers: AMELIA B. CABRERA – Education Program Supervisor I,
TVL SDO Catanduanes
DR. JESSLYN T. TAWAY – Education Program Supervisor I,
LRMDS SDO Catanduanes
ALLAN M. BENOYO – Master Teacher I (SAVS)
Layout: MISHAEL T. LIM - Teacher II (Tubli National High School)
 SENOR HIGH SCHOOL

COMPUTER SYSTEMS SERVICING

Quarter 3 – Module 1
Setup User Access:
Create Organizational Units and User on
Active Directory Windows Server 2008 R2
 Welcome Message
Greetings! You are about to learn Computer Systems Servicing specialization of
Technical-Vocational-Livelihood Track.
We are providing you with self-learning modules that will guide you in acquiring the
relevant knowledge, skills, and attitude needed to perform the tasks in Computer
Systems Servicing specialization at your own pace and time. The lessons are divided
based on the four core competencies of Computer Systems Servicing, namely: Core 1
– Installing and Configuring Computer Systems (ICCS), Core 2 – Setting-up Computer
Networks (SUCN), Core 3 – Setting-up Computer Servers (SUCS), and Core 4 –
Maintaining and Repairing Computer Systems and Networks (MRCSN). These core
lessons are sectioned into smaller topics that can be finished in a week’s time.
You need to go through all the parts of the module to ensure that you will be equipped
with the necessary information and skills for achieving the competencies in Computer
Systems Servicing. Here are the different parts of the CSS module:

Starter Brief introduction of the topic

The competencies that you need to achieve at the

Objectives
end of the module.

The skills and knowledge you know before the

Pre-Test
topic.

Vocabulary List Keywords to learn before the lesson.

Lesson proper that emphasizes the competency

Learning Activities
that you must develop.

Self-Check Activities to practice on after lesson proper.

Measures Learner’s knowledge after completing
Post-Test
the lesson
Provides activities designed to reinforce the
Assignments
information provided.
Answer Key Answer key to practice test.

References Sources of information used for the lesson.

You need to master the competencies of this module before you can proceed to the
next one. You may ask your CSS teacher for any clarifications in case you encounter
any difficulties.

Have a fun and meaningful journey in taking this course! Goodluck!

1
 Starter
Welcome to Quarter 3 Module 1! In this module, you will learn how to Create
Organizational Units and User on Active Directory Windows Server 2008 R2.

Objectives
At the end of this module, you should be able to:
 Define FQDN, OU, GPO
 Formulate steps in creating OU and User
 Appreciate the advantage of computer server features.

Pre-Test
Directions:
TRUE or FALSE. Read each statement carefully and on your answer sheet, write TRUE
if the statement is correct. Otherwise, write FALSE.

1. One of the benefits of GPO is that as the administrator you can block the devices
for specific end users.
2. User group is a collection of user accounts that share the same security rights
and permissions.
3. The user is the one who manages the network
4. A domain name can be considered as fully qualified domain name if it has a sub-
domain name and a top level domain name.
5. The Computer server administrator can manage each user under organizational
units.

Vocabulary List
Organizational Unit OU
Organizational Unit let you organize the users in one container that can hold all user and
computer accounts that have common needs so that can be easily managed and
supported by the administrator.

Active Directory Domain Services (AD DS)

Active Directory Domain Services (AD DS) is a server role in Active Directory that allows
admins to manage and store information about resources from a network, as well as
application data, in a distributed database.

2
Active Directory Users and Computers

The active Directory Users and Computers is tool and a console snaps in introduced by
Microsoft for the management purposes.

Hostname

The term hostname is sometimes used in place of ‘FQDN’

Group Policy Object (GPO)

Group policy object is the tool which provides centralized configuration and management
for the operating system and let you set rules on user and computer accounts in the
Active Directory as the system administrator.

User

The person who can use any specific computer in the given environment with the
specified policies.

Learning Activities
Active directory (AD) is not going to work solely without its objects, Objects are
everything live under AD. As stated in (Information sheet: Active Directory) objects are
the following, Users and groups, services (i.e. Emails), resources such printers, shared
folders.

Active Directory Users and Computers

The active Directory Users and Computers are tools and console snaps are introduced
by Microsoft for the management purposes. You can create user and computer
accounts; set their security policies and you can also apply group policies.

User
User is the person who can use any specific computer in the given environment with the
specified policies. You can log on the computer by the Active Directory user account.
The Active Directory account identifies the user and establish authentication so that the
user can use the resources within the domain.

What is an OU?

An Organizational Unit is a container that holds AD Object like User Accounts,

Computer Accounts, and Groups.

3
OUs help to keep your objects organized, but also are used to control what your Users
can and can’t do (among the other things)

We’ll start off building a few OUs so our Users and Computer Accounts will have a place
to live.

You can organize OUs:

 Geographically
 By function (Departments etc.)

Group Policy Object (GPO)

Group policy object is the tool which

provides centralized configuration and
management for the operating system
and let you set rules on user and
computer accounts in the Active
Directory as the system administrator. It
is used in the small businesses and
organizations very commonly.
Group policy object will store the
configured setting of Active Directory.
The management and configuration of
software, desktop and network
environments can be done by GPO. The Source: Margaret Rouse
Group Policy is the feature in Windows https://searchwindowsserver.techtarget.com/definiti
Server 2008’s Server Manager you need on/Group-Policy-Object
4
to install so that you could use and manage multiple accounts. Group Policy
management console let you easily use different policies for the group policy objects.

Benefits of using GPO

There are some uses of Group Policy Objects

 You can block as the administrator the devices for specific users
 The improved security implementations for devices and users using firewall and
IPsec
 Categorized management of resources makes it possible to easily deploy and
manage the resources
 You can manage multiple groups, logs and event in the GPO

TWO TYPES OF GROUP POLICIES:

1. Local Group Policy
Each computer running the windows line of operating system has exactly one
local group policy. It is available only to the particular computer in which it resides
and to users who log on to that computer. The local group policy objects reside
in the %systemroot%\System32\Group Policy folder. It has only a subset of
settings that are available in the non-local group policy.

2. Non-local Group policy

Each domain controller has one or more non-local group policies. They are
available to all the machines and users in the Active Directory environment. A
non-local group policy can be applied to all users and computers in a domain or
to a particular OU depending on where the group policy is linked.

Steps in creating (OU, User and Groups) on Active Directory Windows Server 2008
R2

Below is the walkthrough process in creating Organizational Units, Users and Groups on
Active Directory Windows Server 2008 R2.

5
Procedures:

1. For a start, click Start,

point to Administrative
Tools, and then click
Active Directory Users
and Computers:

2. To create Organization Unit, right click on Tekbloq.local (domain name sample) and
Click New and then Click Organization Unit:

6
 3. Type name of your New
Organizational Unit and click OK:

As you see New OU (Organization

Unit) has been created, Same way
you can create child OU under IT
Users OU:

Create User under an Organizational Unit:

1. To create user, right click on IT Users OU and

Click New and then click User:

2. Type all required information below

and click Next.

7
3. Type password for the User and click Next.

4. Lastly, click Finish to create user.

5. Now, the new user was created under the OU.

8
Conclusion
Now, we finished the process on creating Organizational Units and Users.
Computer server has a lot of features that you will learn on the next module.

Self-Check
Using a flowchart, map the step-by-step process of creating Organizational Unit and its
user. Do this by naming your own domain name, OU name and password. You can
customize according to your choice of flowchart design.

Creating OU Creating New User

Step1 Step1

Step 2 Step 2

Step 3 Step 3

Post-Test
Enumeration
Directions: Read and understand each statement carefully. Select your answer on the
terms listed below. Write your answer on a separate sheet of paper.

Non-local group policy Active Directory Users and Computers

Local Group Policy Group Policy Object Hostname

Organizational Unit Active Directory Domain User

1. A group policy that is only available to a particular computer in which it resides

and to users who log on to that computer.
2. Type of group policy that is available to all the machines and users in the Active
Directory environment.
3. Person who can use any specific computer in the given environment with the
specified policies.
4. A tool in which provides centralized configuration and management.
9
 5. Term that is sometimes used in place of FQDN.
6. A tool and console snaps in introduced by Microsoft for the management
purposes.
7. A server role in the Active Directory that allow admins to manage and store
information from a network.
8. Let users to be organized in one container that can hold all user and computer
accounts that have common needs.

Assignment
In a sheet of paper, write a paragraph containing 5 sentences about each questions
below.

1. What is the importance of user account password?

2. How many characters are recommended to have a strong password?

Answer Key

5. TRUE
4. TRUE
3. FALSE
2. TRUE
1. TRUE
Pre-Test

8. Organizational Unit
7. Active Directory Domain Services
6. Active Directory Users and Computers
5. Hostname
4. Group Policy Object
3. User
2. Non-local Group Policy
1. Local Group Policy
Post-Test

10
 References
E-book
CBLM on Computer Systems Servicing NC II (Setup Server) Developed by: Ismael
Manic Balana

Illustrations
Kamala Pujhari, “Client Sever Network”, Client Server Network Examples, Security,
Advantages and Disadvantages, February 3, 2020, https://lucentgkquiz.blogspot.com
ICONS - https://iconarchive.com/
Kchungtw, 3d business man presenting word easy concept, Free Royalty,
www.gograph.com
https://changemakerhighschool.org/policies/
MD Juwel, What is a Top-Level Domain (TLD), July 2018,
https://www.techjan.com/2019/06/what-is-top-level-domain.html
Margaret Rouse https://searchwindowsserver.techtarget.com/definition/Group-
Policy-Object
Domain Name System (DNS), www.iteanz.com/tutorials/aws/domain-namesystem-
dns/
Thumbs up Icon, https://iconarchive.com/show/noto-emoji-people-bodyparts-icons-by-
google /12008-thumbs-up-icon.html

Content
Kristin Crabb, “Types of Domain Names: A Helpful Guide”, October 30, 2018,
https://www.domain.com/blog/2018/10/30/domain-name-types/
Malou Elevera, “System Administration Windows Server 2008”,
https://www.scribd.com/document/409078171/System-Administration-Windows-
Server-2008-docx
Zoho Corp., “Group Policy”, Active Directory 360, http://www.windows-active-
directory.com/group-policy.html
Create objects(OU,user and goups) on Active Directory Windows Server 2008 R2,
May 12, 2017, https://tekbloq.com/2017/05/12/create-objectsouuser-and-goups-on-
active-directory-windows-server-2008-r2/

11