Outline l Introduction to Active Directory l Logical Structure » Domain, Organizational Units, Trees and Forests, Schema l Physical Structure » Sites » Domain Controllers » Specific Domain Controller Roles l Installing Active Director

Hussain, Ali

KFUPM ePrints

Hussain Alihussain@ccse.kfupm.edu.saDepartment of Computer Engineering KFUPM, Dhahran, Saudi ArabiaActive DirectoryOutlinel Introduction to Active Directoryl Logical Structure» Domain, Organizational Units, Trees and Forests, Schemal Physical Structure» Sites» Domain Controllers» Specific Domain Controller Rolesl Installing Active DirectoryIntroductionl Directory ?» A directory is an information source used to store information about interesting objects. Ex: Telephone directory» A directory service differs from a directory in that it is both the directory information source and the services making the information available and usable to the users.The Need for Directory Servicel Why Have a Directory Service?» Enforce security defined by administrators» Distribute a directory across many computers» Replicate a directory to make it available to more users and resistant to failure» Partition a directory into multiple stores to allow the storage of a very large number of objectsActive Directory Featuresl What is the Active Directory?» Directory Service included with Windows 2000» It is secure, distributed, partitioned» It uses multi-master replication» Scalable: No restriction on size of objects» It replaces the SAM database of Windows NT» It can go upto million of objects. NT supports 25,000 users (40MB SAM size).» Organizes information hierarchically to ease network use and management.Active Directory Featuresl Features» DNS Integration» Dynamic DNS» Access to the Active Directory (LDAP, X.500, MAPI-RPC)» Application Programming Interface» Directory Service Functionality– AD provides central organization, management and control of access to network resources.» Centralized Management– Single point administration– Single sign on I.e. users log on once for full access to resources throughout directorySupported Technologiesl TCP/IP: Network transportl DHCP: Dynamic Host Control Protocoll DNS: Domain Name Systeml SNTP: Simple Network Time Protocoll LDAP: Lightweight Director Access Protocol v3l LDIF: LDAP data interchange formatl Kerberos v5 for authenticationl X.509 certificates for authenticationNaming Conventionl Distinguished Name (DN)» CN=Kareem, CN=Users,DC=ccse,DC=kfupm,DC=edu, DC=saWhere CN=common nameDC=domain componentl Relative DN» Attribute of the object » Ex: RDN of the Kareem user object is Kareem and RDN for parent object is Users.Naming Conventionl User Principal Name» UPN of a user object is composed of the user’s logon name and DNS name of the domain.» Ex: kareem@ccse.kfupm.edu.sal Globally Unique Identifier (GUIDs)» GUID is a 128-bit hexadecimal representation to objectsl Uniqueness of Names» DN are guaranteed to be unique in the forestLogical Structurel Domainsl Organizational Unitsl Trees and Forestsl SchemaDomainDomainTreeOUOU OUDomainDomain DomainTreeDomainForestLogical Structurel Domains» Security Boundary» Unit of Replication» Multi-Master replication model» Domain Modes– Mixed mode (Windows 2000 & NT controllers)– Native mode (Windows 2000 controllers only)Logical Structurel Organization Units» Organization Unit (OU) is a container object that is used to organize objects within a domain. It contains user accounts, groups, computers, printers and other OUs.l OU Hierarchy» Organization structure based on department or geographical boundaries» Organization structure based on administrative responsibilities like users, computers etc.l Administrative Control» OU administrative control can be delegated over the objects within the OU.Logical Structurel Trees» A tree is a hierarchical arrangement of Windows 2000 domains that share a contiguous namespace.» While adding a domain to an existing tree, the new domain is a child domain of an existing parent domain.RootKfupm.edu.saccseLogical Structurel Forests» A forest is a group of trees that do not share a contiquous namespace. The trees in a forest share a common configuration.RootKfupm.edu.saKsu.edu.saccseLogical Structurel Schema» It contains the definitions of all objects such as users, computers and printers.» Two types of definitions: Classes and attributes» Examples:– Classes: Computers, Users and Servers– Attribute: accountExpires, mail, Name, badPasswordTime etc….» Only one schema for the entire forest so that all objects created in AD conform to the same rules» Schema is stored in a database.Physical Structurel Sitesl Domain ControllersSiteDomainDomain Controller Rolesl Global Catalog Server (GCS)» Global Catalog is Repository of information that contains a subset of attributes for all objects in Active Directory.» Most frequent used attributes are stored in GC.» GCS is a domain controller that stores a copy of an processes queries to the global catalog.» It enables a user to find directory information in the entire forest, regardless of the location of the data.Domain Controller Rolesl Single Master Operations» Schema Master» Domain Naming Master» RID Master» PDC Emulator» Infrastructure Master

Active Directory

https://eprints.kfupm.edu.sa/id/eprint/211/1/Active-Directory-HussainAli.pdf

Active Directory

Abstract

Similar works

Full text

Available Versions

KFUPM ePrints