blocks|key|2121679|text|我会权衡一次设置10台计算机的初始成本，相对于管理域而言，这是一次最少的管理工作。例如，为了冗余/可靠性起见，两个域控制器是可取的，它们的配置可能需要相当长的时间。这会导致更大的财务成本，也可能导致更大的工时成本。它也增加了你的网络的复杂性，这很可能会给你带来更多的工作，而不会带来太多的实际利益。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2121680|另一方面，与10台机器工作的地方政策是比较少和干。我怀疑您是否会在日常活动中对安全策略进行微观管理。更新可能会很麻烦，但是一旦您测试了它们，就可以正确地应用它们。AV/恶意软件/入侵实用程序也可能是烦人的，只需一些最小的管理。|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|F|8|@]|9|@]|A|$]]]|D|$]]

<p>I would weigh the initial cost of setting up 10 computers one time with minimal administrative work vs. the management of a domain. For example, two domain controllers would be advisable for redundancy/reliability's sake and their configuration can take a fair bit of time. This contributes to a greater financial cost and might contribute to a greater cost in man-hours. It also adds to the complexity of your network, which will more than likely make more work for you down the line without much tangible benefit.</p>
<p>On the other hand, working with 10 machines local policies is comparatively cut and dry. I doubt you will be micromanaging security policies in your day to day activities. Updates can be troublesome, but properly applied once you've tested them. AV/malware/intrustion utilities can also be annoying with some minimal administration.</p>


blocks|key|2121586|text|微软为慈善机构提供了一个特殊的许可程序，折扣相当大，只需运行一个广告，你就可以使用两台旧PC和几个内存。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2121587|见详细信息|offset|length|entityMap|0|LINK|mutability|MUTABLE|url|http://www.microsoft.com/licensing/licensing-options/for-industries.aspx#tab=4^0|0|1|4|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@$D|O|E|P|1|Q]]|A|$]]]|F|$G|$5|H|I|J|A|$K|L]]]]

<p>Microsoft offer a special licensing program for charities, the discounts are quite big and for just running an AD you can use two old PC's with a couple of gigs of ram.</p>

<p>See for <a href="http://www.microsoft.com/licensing/licensing-options/for-industries.aspx#tab=4" rel="nofollow noreferrer">details</a></p>


blocks|key|7372711|text|你可能想试试TechSoup。如果您的组织符合条件，您可能会以低于100美元的价格获得Window+2008+R2的副本。我相信你也能拿到50个座位执照。正如前面所指出的，在您的情况下运行Active+Directory并不需要英勇的硬件。您甚至可以运行其他服务器角色，而不会出现重大问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|7372712|如果您实际处于需要Active+Directory的情况下，您会发现每个替代品都远远不够。|entityMap|0|LINK|mutability|MUTABLE|url|http://home.techsoup.org/pages/default.aspx|1|https://serverfault.com/questions/216581/multi-role-domain-controllers-for-small-offices-50-clients^0|6|8|0|3J|7|1|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@$A|P|B|Q|1|R]|$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@]|C|$]]]|F|$G|$5|H|I|J|C|$K|L]]|M|$5|H|I|J|C|$K|N]]]]

<p>You might want to try <a href="http://home.techsoup.org/pages/default.aspx" rel="nofollow noreferrer">TechSoup</a>. If your organization qualifies you could probably get a copy of Window Server 2008 R2 for less than $100 dollars. I believe you'll get about 50 seat licenses with it as well. And as previously pointed out, you don't need heroic hardware to run Active Directory in your situation. You can even run <a href="https://serverfault.com/questions/216581/multi-role-domain-controllers-for-small-offices-50-clients">other server roles</a> without significant trouble.</p>

<p>If you are <em>actually</em> in a situation that requires Active Directory, <strong>you will find that every substitute falls far short.</strong></p>


blocks|key|2122198|text|我是一家小企业的IT经理。我没有太多的预算，所以我尽我所能用我所拥有的。作为一个开源的拥护者，如果我能够可靠而有力地解决一个免费和开放源码软件的问题，我就会这么做。我发现了一些在没有的情况下工作得很好的东西。我就是这样做的：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2122199|雾项目|header-two|2122200|FOG是一种用于磁盘成像的开源解决方案。(例如:创建虚拟机的磁盘映像，sysprep并将该映像部署到10台计算机上。)FOG还可以远程安装插件。插件可以是任何可执行文件。如果我想在一台或多台机器上更改与组策略相关的内容，我将创建一个带有需要更新的组策略注册表值的注册表文件。我创建批处理脚本来调用regedit+/s文件并更新注册表。|offset|length|style|CODE|2122201|7-zip和7-zip+SFX制造商|2122202|SFX为我创建了很好的.exe文件，这些文件可以配置为静默地提取内容并运行任意程序。在上面的示例中，我使用SFX将.cmd和.reg文件打包到一个.exe中，然后将其上传到fog中，并作为一个管理单元进行部署。|2122203|Misc.企业IT部署工具|2122204|为了在所有工作站上安装新的程序，我首先查找有关软件的企业IT部署工具。例如，Google提供商用铬，它有一个预可配置、易于部署和可选择的静默安装程序。许多打印机制造商也有帮助您部署打印机驱动程序的工具。惠普和兄弟有很好的工具。您只需为您的操作系统找到合适的打印机驱动程序，然后使用他们的工具来创建一个无声的安装程序，它可以用作迷雾管理单元。|2122205|AutoIT|2122206|许多软件开发人员都不生产部署工具，甚至有些大名鼎鼎的书名，比如Quickbook。在这里帮不了你。在每台计算机都需要它的情况下，有时更容易将软件烘焙到磁盘映像中，然后将磁盘映像与所有常用的应用程序一起部署。对于其他的一切，都有AutoIT。虽然这样做非常耗时，但您可以编写AutoIT脚本来自动化软件安装，方法是检测窗口和模拟鼠标和击键，或者复制安装程序通常会做的文件和注册表更改。|2122207|TightVNC|2122208|我管理的每台计算机都有一台TightVNC服务器。基本上是远程桌面。当工作站不使用时，我可以连接到工作站并手动更改设置，就像我坐在机器前面一样。|2122209|足|2122210|对于不需要在每台机器上改变的小改变，脚会非常方便地把我转移到有问题的计算机上，然后摆弄它。这里的好处是，我可以得到一些锻炼，以弥补我原本久坐不动的生活方式:P.虽然这不是管理大量计算机的好办法，但它有利于对少数计算机进行小改动。(对于其他一切，都有AutoIT，记得吗？)|2122211|结论|2122212|雾是整个过程的支柱。FOG允许我将机器分配给组，它们可以分配适合这些组的特定磁盘映像和管理单元。组可以是"room1“、"room2”等，并在需要时部署特定的打印机管理单元。这个过程可能不是很好的扩展，也不是没有缺陷，但在我的例子中，我管理了大约20台计算机，它运行得很好。|entityMap|0|LINK|mutability|MUTABLE|url|https://www.google.com/intl/en/chrome/business/browser/admin/|1|http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/mostViewedDisplay?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_efb5c0793523e51970c8fa22b053ce01=wsrp-navigationalState%253DdocId%25253Demr_na-c01695467-6%25257CdocLocale%25253Den_US&javax.portlet.tpst=efb5c0793523e51970c8fa22b053ce01&sp4ts.oid=503548&ac.admitted=1395460151726.876444892.492883150|2|http://welcome.solutions.brother.com/BSC/public_s/id/case_studies/en/ddw.html?reg=us&c=us_ot&lang=en&redirect=on^0|0|0|44|A|0|0|0|0|1A|3|0|2T|2|1|2W|2|2|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1J|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|1K|8|@]|9|@]|A|$]]|$1|E|3|F|5|6|7|1L|8|@$G|1M|H|1N|I|J]]|9|@]|A|$]]|$1|K|3|L|5|D|7|1O|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1P|8|@]|9|@]|A|$]]|$1|O|3|P|5|D|7|1Q|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1R|8|@]|9|@$G|1S|H|1T|1|1U]|$G|1V|H|1W|1|1X]|$G|1Y|H|1Z|1|20]]|A|$]]|$1|S|3|T|5|D|7|21|8|@]|9|@]|A|$]]|$1|U|3|V|5|6|7|22|8|@]|9|@]|A|$]]|$1|W|3|X|5|D|7|23|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|24|8|@]|9|@]|A|$]]|$1|10|3|11|5|D|7|25|8|@]|9|@]|A|$]]|$1|12|3|13|5|6|7|26|8|@]|9|@]|A|$]]|$1|14|3|15|5|D|7|27|8|@]|9|@]|A|$]]|$1|16|3|17|5|6|7|28|8|@]|9|@]|A|$]]]|18|$19|$5|1A|1B|1C|A|$1D|1E]]|1F|$5|1A|1B|1C|A|$1D|1G]]|1H|$5|1A|1B|1C|A|$1D|1I]]]]

<p>I'm an IT manager for a small business. I don't have much of a budget so I do the best I can with what I have. As an open-source advocate, if I can reliably and robustly solve a problem with free and open source software, I do it. I've found something that works well enough without Active Directory. Here is how I do it:</p>
<h3>FOG Project</h3>
<p>FOG is an open source solution for disk imaging. (ex: Create a disk image of a virtual machine, sysprep and deploy that one image to ten computers.) FOG can also remotely install snap-ins. A snap-in can be any executable file. If I want to change something group policy related on one or more machines, I would create a registry file with the group policy registry values that need updated. I create batch scripts to call <code>regedit /s</code> on the .reg files and update the registry.</p>
<h3>7-zip &amp; 7-zip SFX maker</h3>
<p>SFX maker creates me nice .exe files that can be configured to silently extract the contents and run an arbitrary program. In the example above I use SFX maker to pack the .cmd and .reg files into an .exe which can then be uploaded to fog and deployed as a snapin.</p>
<h3>Misc. enterprise IT deployment tools</h3>
<p>For installing new programs on all workstations, I first look for enterprise IT deployment tools for the software in question. For example, Google Chrome provides <a href="https://www.google.com/intl/en/chrome/business/browser/admin/" rel="nofollow noreferrer">Chrome for Business</a> which has a pre-configurable, easily deployable and optionally silent installer. Many printer manufacturers also have tools to help you deploy their printer drivers. <a href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/mostViewedDisplay?javax.portlet.begCacheTok=com.vignette.cachetoken&amp;javax.portlet.endCacheTok=com.vignette.cachetoken&amp;javax.portlet.prp_efb5c0793523e51970c8fa22b053ce01=wsrp-navigationalState%3DdocId%253Demr_na-c01695467-6%257CdocLocale%253Den_US&amp;javax.portlet.tpst=efb5c0793523e51970c8fa22b053ce01&amp;sp4ts.oid=503548&amp;ac.admitted=1395460151726.876444892.492883150" rel="nofollow noreferrer">HP</a> and <a href="http://welcome.solutions.brother.com/BSC/public_s/id/case_studies/en/ddw.html?reg=us&amp;c=us_ot&amp;lang=en&amp;redirect=on" rel="nofollow noreferrer">Brother</a> have nice tools for this. You just have to find the right printer driver for your OS, then use their tools to create a silent installer which can be used as a FOG snapin.</p>
<h3>AutoIT</h3>
<p>Lots of software developers don't make deployment tools, even some big name titles like Quickbooks. Active Directory can't help you here. In cases where every computer needs it, it's sometimes easier to bake the software into your disk image, then deploy the disk image with all commonly used applications. For everything else, there's AutoIT. While it can be extremely time consuming to do so, you can write AutoIT scripts to automate software installations, either by detecting windows and simulating mouse and keystrokes or by duplicating the file and registry changes installers would normally do.</p>
<h3>TightVNC</h3>
<p>Every computer I manage has a TightVNC server. Basically remote desktop. When the workstation isn't in use, I can connect to a workstation and manually change settings as if I were sitting in front of the machine.</p>
<h3>Feet</h3>
<p>For small changes that don't need changing on every machine, feet come in very handy to transport me to the computer in question and fiddle with it. Bonus here is that I can get some exercise to make up for my otherwise sedentary lifestyle :P. While this isn't a good solution for managing a large amount of computers, it is good for making small changes to a small number of computers. (for everything else, there's AutoIT, remember?)</p>
<h2>Conclusion</h2>
<p>FOG is really the backbone of this whole process. FOG lets me assign machines to groups, which can be assigned specific disk images and snapins that are suited to those groups. Groups can be &quot;room1&quot;, &quot;room2&quot; etc. with specific printer snapins deployed where needed. This process probably doesn't scale very well, isn't without it's flaws, but in my case where I manage around 20 computers, it works pretty well.</p>


blocks|key|7372891|text|Samba+4可以作为与Microsoft+Active兼容的域控制器运行。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|7372892|https://wiki.samba.org/index.php/Samba_广告_管理_从…_视窗|offset|length|7372893|https://wiki.samba.org/index.php/Samba_广告_数据中心_何图|entityMap|0|LINK|mutability|MUTABLE|url|https://wiki.samba.org/index.php/Samba_AD_management_from_windows|1|https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO^0|0|0|1E|0|0|0|1D|1^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@$D|S|E|T|1|U]]|A|$]]|$1|F|3|G|5|6|7|V|8|@]|9|@$D|W|E|X|1|Y]]|A|$]]]|H|$I|$5|J|K|L|A|$M|N]]|O|$5|J|K|L|A|$M|P]]]]

<p>Samba 4 can run as a Domain Controller that is compatible with Microsoft's Active Directory.</p>

<p><a href="https://wiki.samba.org/index.php/Samba_AD_management_from_windows" rel="nofollow noreferrer">https://wiki.samba.org/index.php/Samba_AD_management_from_windows</a></p>

<p><a href="https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO" rel="nofollow noreferrer">https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO</a></p>


blocks|key|7372611|text|一次一次，犯了很多错误。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|entityMap^0^^$0|@$1|2|3|4|5|6|7|C|8|@]|9|@]|A|$]]]|B|$]]

<p>One at a time, with a lot of mistakes.</p>


<p>I need to setup between 5 - 10 computers to start with for a charity organization which can't offord to be running a dedicated server that maintains group policies for a growing number of staff. Is there a way I can manage policies of each computer without having to physically change the local security policies. The computers run a combination of Windows XP, Vista and 7. </p>


How do you manage computers without Active Directory?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我需要在5-10台计算机之间安装，首先是一个慈善组织，它不能运行一个专门的服务器，为越来越多的工作人员维护组策略。是否有一种方法可以管理每台计算机的策略，而不必物理地更改本地安全策略。这些计算机运行Windows、Vista和7的组合。

问如何管理没有的计算机？
EN

回答 6

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何管理没有的计算机？EN

回答 6

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何管理没有的计算机？
EN