Hey everybody welcome to the next video.
So in this video we're gonna be going over oh use organizationally units and they're some of the permissions
and properties around them.
So as we talked about before we've got our test o you here we just got nothing in it right now.
So if we went ahead and tried to delete this it fails it won't let us do this and again like I like
I said this is to protect you from yourself.
So in case you build this whole structure this whole domain got all the users got all the computers
it's got automation scraps it's got good policies put in place and you just delete it.
It's gone.
There's no backup from that unless you have an actual back of the domain in a tree.
But in general sense it's gone.
There's there's there isn't a reverse button.
So the first thing we want to do is go to enable advanced features.
So if we go to view advanced features we're gonna see a few more o use present.
We're going to ignore those for now.
A lot of these are stuff that you're never ever going to touch.
I wouldn't worry too much about it just understand that there are more used and what you just saw.
This is this is more or less the full list.
So feel free to play around with with a few of them and see what what what's there.
Take a look at a few things.
But in our case we want to take a look at the test don't you.
So if we right click and do properties we can see that there's a bit here so we can see there's Group
managed by object security common attribute editor.
So if we disable that and we just look at it again we can only see General managed by and com.
So it does provide us quite a few more features.
So go on go back to properties and test all you.
So we have managed by security.
Com and actually Ed so in our case are we looking at object.
So in here we can see that protect from accidental deletions already put in place.
So we're going to go ahead and disable that apply.
OK.
And then now this.
Oh you and only this so you can delete however if we went over to the built in object it's not currently
protected.
So not all of them are protected by default.
So keep that in mind if you wanted this to not be actually deleted and you plan on using a different
oh you struck or you didn't plan on using a different structure then you should probably check this.
So what I also want to introduce you to is something called the asked ESD SDI sort of go back into the
adventure tools or adc editor so with this go ahead and disconnect from me here.
So yours is going to look like this.
So what you need to do is this allows you to modify some of the objects of a current domain controller
or a remote one.
So if we do action connect to now we can see here the path is we're just doing an el DAP connection
which is what we're what.
How you communicate with a D through a protocol called El DAP.
So I'll leave that to you guys to brush up a little bit on El DAP and understand how to make a connection.
There's quite a few ways you can do it so we'll use the standard stuff will leave everything exactly
as it is and we hit.
OK so if we double click on this we can now see we have our red team our nation DC local so that's perfectly
fine.
And then we see all of our same same things as well.
Again we can create a new object but this is more of a raw raw type
tool.
So you're going to have to be a little bit more familiar so you can't just right click user.
So you'd have to come down here and user happens to be the name.
But this is something called object classes now and held up.
Everything has a class associated with it which tells us the type.
So if we come in here to the users and we do properties we have the attribute editor.
If we look for object class we can see object class is a container which is perfect.
So if we come over here and we create a new you it's going to have the organizational one soldiers do
test.
Perfect.
Open up a SDI will refresh.
There's our test properties and we'll look for object classes because the object classes organizational
unit and if we went to a specific user as an example we went into Brandon properties we would see the
organizational unit or the object class as organizational person person and user.
So it has multiple different ones.
So a way an object works in 80 or LDA up in general.
Now this isn't just preference to a D.
Let's son El up any of those they use something called attributes.
So each object class here has a certain set of attributes that are available to it.
So you see a lot of these aren't set.
However you can set these on their own.
So the other mobile there's a UI for that.
Luckily for a D but if you needed to set it through an application let's say you would set it this way.
So understand that each object has an object class and depending on the object class has a set of attributes
or variables that go with it just understand that ahead of time but also know that there is a security
option.
So it does have standard file permissions on who can.
So for example you can see authenticated users can read domain admins have quite a bit of control.
Enterprise admins have again a lot of control.
Administrators cannot delete all child Alex but they can create them so that you can get pretty detailed
with the permissions that need to be done.