管理不同的網域 Active Directory 管理中心Manage Different Domains in Active Directory Administrative Center

適用於:Windows Server(以每年次管道)、Windows Server 2016Applies To: Windows Server (Semi-Annual Channel), Windows Server 2016

當您開放 Active Directory 系統,您目前登入在此電腦的網域 \ (本機 domain) 會顯示在 Active Directory 管理中心瀏覽窗格中 (the left pane)。When you open Active Directory Administrative, the domain that you are currently logged on to on this computer (the local domain) appears in the Active Directory Administrative Center navigation pane (the left pane). 根據您目前登入認證組的權限,您可以檢視或管理此本機網域中的 Active Directory 物件。Depending on the rights of your current set of logon credentials, you can view or manage the Active Directory objects in this local domain.

您也可以使用的登入認證和相同的執行個體的 Active Directory 管理中心以檢視或管理的相同的樹系的任何其他網域或網域其他建立本機信任的樹系的 Active Directory 物件網域。You can also use the same set of logon credentials and the same instance of Active Directory Administrative Center to view or manage Active Directory objects in any other domain in the same forest, or a domain in another forest that has an established trust with the local domain. 支援的方式 one\ 信任和 two\ 向信任。Both one-way trusts and two-way trusts are supported.

注意

如果有網域 A 之間網域 B 透過 one\ 向信任的使用者網域 A 可存取 B 網域中的資源,但使用者網域 B 無法存取 A 網域中的資源,如果您正在執行 Active Directory 管理中心在電腦上的網域 A 您的本機網域中,您可以連接到網域 B 與您目前的登入認證,並在相同的執行個體的 Active Directory 管理中心設定。If there is a one-way trust between Domain A and Domain B through which users in Domain A can access resources in Domain B but users in Domain B cannot access resources in Domain A, if you are running Active Directory Administrative Center on the computer where Domain A is your local domain, you can connect to Domain B with the current set of logon credentials and in the same instance of Active Directory Administrative Center. 但如果您正在執行 Active Directory 管理中心在電腦上網域 B 您當地的網域的位置,您無法連接到網域 A 以相同的設定中的 Active Directory 管理中心相同的執行個體的認證。But if you are running Active Directory Administrative Center on the computer where Domain B is your local domain, you cannot connect to Domain A with the same set of credentials in the same instance of the Active Directory Administrative Center.

還有不基本群組成員,才能完成此程序。There is no minimum group membership required to complete this procedure.

Windows Server 2012:管理外部網域中選取的執行個體的 Active Directory 管理中心使用的登入認證目前的設定Windows Server 2012: To manage a foreign domain in the selected instance of Active Directory Administrative Center using the current set of logon credentials

  1. 若要打開 Active Directory 管理中心,在伺服器管理員,按一下 [工具,然後按一下 [ Active Directory 管理中心To open Active Directory Administrative Center, in Server Manager, click Tools, and then click Active Directory Administrative Center.

    注意

    打開 Active Directory 管理中心另一種方式是按[開始],然後輸入dsac.exeAnother way to open Active Directory Administrative Center is to click Start, and then type dsac.exe.

  2. 打開到新增瀏覽節點,按一下 [管理,然後按一下 [新增瀏覽節點如下所示。To open Add Navigation Nodes, click Manage, then click Add Navigation Nodes as shown in the following illustration.

    螢幕擷取畫面顯示 * * 新增瀏覽節點 * * UI

  3. 在 [新增瀏覽節點,按一下 [連接到其他網域如下所示。In Add Navigation Nodes, click Connect to other domains as shown in the following illustration.

    螢幕擷取畫面顯示 * * 新增瀏覽節點 * * UI

  4. 在 [連接到,輸入您想要管理外部網域名稱 \ (,例如contoso.com),然後按一下 [確定In Connect to, type the name of the foreign domain that you want to manage (for example, contoso.com), and then click OK.

  5. 當您連接到外部網域成功時,瀏覽欄新增瀏覽節點視窗中,選取要新增到您 Active Directory 管理中心瀏覽窗格中,然後按一下 [容器[確定]When you are successfully connected to the foreign domain, browse through the columns in the Add Navigation Nodes window, select the container or containers to add to your Active Directory Administrative Center navigation pane, and then click OK.

Windows Server 2008 R2:管理外部網域中選取的執行個體的 Active Directory 管理中心使用的登入認證目前的設定Windows Server 2008 R2: To manage a foreign domain in the selected instance of Active Directory Administrative Center using the current set of logon credentials

  1. 若要打開 Active Directory 管理中心,按一下 [ [開始],按一下 [系統管理工具],然後按一下 [ Active Directory 管理中心To open Active Directory Administrative Center, click Start, click Administrative Tools, and then click Active Directory Administrative Center.

    注意

    打開 Active Directory 管理中心另一種方式是按[開始],按一下 [執行,然後輸入dsac.exeAnother way to open Active Directory Administrative Center is to click Start, click Run, and then type dsac.exe.

  2. 打開新增瀏覽節點,靠近頂端的 [Active Directory 管理中心視窗中,按新增瀏覽節點中如下所示。To open Add Navigation Nodes, near the top of the Active Directory Administrative Center window, click Add Navigation Nodes as shown in the following illustration.

    螢幕擷取畫面顯示 * * 新增瀏覽節點 * * UI

    注意

    打開另一種方法新增瀏覽節點是 right\ 按一下 Active Directory 管理中心瀏覽窗格中的空白區域中的任何位置,然後按一下 [新增瀏覽節點Another way to open Add Navigation Nodes is to right-click anywhere in the empty space in the Active Directory Administrative Center navigation pane, and then click Add Navigation Nodes.

  3. 在 [新增瀏覽節點,按一下 [連接到其他網域如下所示。In Add Navigation Nodes, click Connect to other domains as shown in the following illustration.

    螢幕擷取畫面顯示 * * 新增瀏覽節點 * * * * 連接到其他網域 * * UI

  4. 在 [連接到,輸入您想要管理外部網域名稱 \ (,例如contoso.com),然後按一下 [確定In Connect to, type the name of the foreign domain that you want to manage (for example, contoso.com), and then click OK.

  5. 當您連接到外部網域成功時,瀏覽欄新增瀏覽節點視窗中,選取要新增到您 Active Directory 管理中心瀏覽窗格中,然後按一下 [容器[確定]When you are successfully connected to the foreign domain, browse through the columns in the Add Navigation Nodes window, select the container or containers to add to your Active Directory Administrative Center navigation pane, and then click OK.

    如需有關自訂 Active Directory 管理中心瀏覽窗格中,請自訂 Active Directory 系統管理員中心瀏覽窗格For more information about customizing the Active Directory Administrative Center navigation pane, see Customize the Active Directory Administrative Center Navigation Pane.

    您也可以使用的登入認證登入認證您目前的設定不同的一組開放 Active Directory 管理中心。You can also open Active Directory Administrative Center by using a set of logon credentials that is different from your current set of logon credentials. 下列程序中的命令可如果您登入執行 Active Directory 管理中心使用一般的使用者的認證的電腦,但您想要使用這台電腦上的 Active Directory 管理中心管理您本機系統管理員的身分網域。The command in the following procedure can be useful if you are logged on to the computer that is running Active Directory Administrative Center with normal user credentials, but you want to use Active Directory Administrative Center on this computer to manage your local domain as an administrator. \(這個命令也可以是您想要使用遠端管理外部網域與當地的一組憑證登入認證您目前的設定不同的網域不同的 Active Directory 管理中心才有用。(This command can also be useful if you want to use Active Directory Administrative Center to remotely manage a foreign domain that is different from your local domain with a set of credentials that is different from your current set of logon credentials. 不過,外部網域必須建立的信任與當地的網域。)However, the foreign domain must have an established trust with the local domain.)

    還有不基本群組成員,才能完成此程序。There is no minimum group membership required to complete this procedure.

若要管理使用不同的目前的登入認證集登入認證網域中To manage a domain using logon credentials that are different from the current set of logon credentials

  1. 若要打開 Active Directory 管理中心,在命令提示字元中,輸入下列命令,,然後按 ENTER 鍵:To open Active Directory Administrative Center, at a command prompt, type the following command, and then press ENTER:

    runas /user:<domain\user> dsac

    其中<domain\user>是您想要開放 Active Directory 管理中心的認證組和dsac是 Active Directory 管理中心可執行檔名稱 (Dsac.exe)。Where <domain\user> is the set of credentials that you want to open Active Directory Administrative Center with and dsac is the Active Directory Administrative Center executable file name (Dsac.exe).

    例如,輸入下列命令,並按一下 ENTER:For example, type the following command, and then press ENTER:

    runas /user:contoso\administrator dsac

  2. Active Directory 管理中心開放時,瀏覽以檢視或管理您的 Active Directory domain 瀏覽窗格。When Active Directory Administrative Center is open, browse through the navigation pane to view or manage your Active Directory domain.