DSS Graphical User Interface Administration is done from the DSS administration window, as shown in Figure 267 . There is also a DCE-only GUI, which is a subset of the DSS administration GUI and that runs on a DCE client. Most administration functions can be performed remotely. See Figure 268 for the DCE interface. The basic scope of administration in the Directory and Security Server is the cell.
Cells can include many users and resources and can span many geographical sites.
See Figure 269 for a cell folder. In these mixed environments, the existing clients and servers use a protocol that does not recognize the DCE Directory and Security Services. Registry synchronization is the act of ensuring that all updates to the Directory and Security Server registry database are propagated to the NET.ACC file on the domain controller. Directory synchronization ensures that changes to the Directory and Security Server directory database are reflected in the domain control database. In order to reduce the traffic on the network, synchronization is done on a resource domain boundary.