• Save
1.2 active directory
Upcoming SlideShare
Loading in...5

1.2 active directory






Total Views
Views on SlideShare
Embed Views



2 Embeds 620

http://munhkjargal.blogspot.com 580
http://www.munhkjargal.blogspot.com 40



Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
Post Comment
Edit your comment

1.2 active directory 1.2 active directory Presentation Transcript

  • 07/11/2008 1
  •  Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure 07/11/2008 2
  •  What Is Active Directory? Active Directory Objects Active Directory Schema Lightweight Directory Access Protocol (LDAP) 07/11/2008 3 View slide
  • Directory Service Directory Service Centralized Management Centralized Management Functionality Functionality Organize Organize  Single point of administration  Single point of administration Manage Manage Resources Resources  Full user access to directory  Full user access to directory Control Control resources by a single logon resources by a single logon 07/11/2008 4 View slide
  •  A directory service stores all the information needed to use and manage these objects in a centralized location, simplifying the process of locating and managing these resources.
  •  What Is a Directory Service? What Is a Schema? What Is the Global Catalog? 07/11/2008 6
  • A structured repository of information about people andresources in an organization Domain OU1 KimYoshida Computers Attributes Values Computer1 Name Kim Yoshida Users User1 Building 117 OU2 Floor 1 Users User2 Printers Printer1A repository is a collection of resources that can beaccessed to retrieve information. Repositories often consistof several databases tied together by a common search 07/11/2008 7engine.
  • defines all the objects and attributes that the directory service uses to store data Examples of object Examples of class attributes accountExpires User distinguishedName directReports dNSHostName operatingSystem Computer firstName lastName Printer
  •  The global catalog is the central repository of information about objects in a tree or forest. By default, a global catalog is created automatically on the initial domain controller in the first domain in the forest. A domain controller that holds a copy of the global catalog is called a global catalog server. It stores only attributes about each objects ,such as objects location Read Only Global Catalog
  • ◦ Provide a way to design and administer the hierarchical structure, logical structure of the network Include  Domains and organizational units  Trees and forests
  • Domain Tree Domain Domain Domain Domain OU ObjectsDomain Domain OU OU Domain Organizational Unit Forest
  •  Logical collection of users and computers. Several benefits of domain Enable you to organize objects within a single dept. or location. Act as a security boundaries. Domain Objects are fully replicated to the domain controller’s within a domain, not to other domains .
  • Tree Root Domain Contiguous linking of one or more AD domains that shares a common namespace or in a Parent-Child Parent Parent Relationship. Parent Domain Two-way transitive trust contoso.msft automatically created Tree Root Domain :- first domain in a tree or parent domain Child Domain Child Child sales.contoso.msft New Domain
  •  Combination of One or More Trees A forest is a disjointed namespace www.microsoft.com www.msn.com Transitive Trusts created automatically
  • Forest Root Domain The Forest Root Domain Is the First Domain Created in a Forest Domain Forest Tree Tree Root Domain OU Domain Domain OU Domain OU TreeDomain Domain Objects
  •  An organizational unit (OU) is a subdivision within an Active Directory into which you can place users, groups, computers, and other organizational units. You can create organizational units to mirror your organizations structure. Implements a Structure inside a Domain Can be nested as needed Can not be assigned any rights Typically used for Administrative Reasons OU ◦ e.g. System Policies OU Domain OU Objects
  •  Benefits of using OUs ◦ Easier to locate and manage the Active Directory objects ◦ Define more advanced features by applying Group Policy to an OU ◦ Delegate administrative control over OUs
  •  Not related to logical Structure Modeled via „Sites“ A site is well connected via fast Network Links One Site can home multiple Domains One Domain can spread across many Sites Domain Database is stored on Domain Controllers
  •  Sites Domain controllers WAN links Site WAN Link Domain Controllers Site A site is one or more IP subnets connected by a fast and reliable link.
  •  Domain Controller is a server on a Microsoft Windows Network that is responsible for allowing host access to Windows domain resources. The domain controllers in your network are the centerpiece of your Active directory service.  It stores user account information, authenticates users and enforces security policy for a Windows domain
  • Lightweight Directory Access Protocol (LDAP) Contoso.msft Finance SalesRelative distinguished name Suzan Fine CN=Suzan Fine,OU=Sales,OU=Finance,DC=contoso,DC=msft 07/11/2008 21