07/11/2008   1
 Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure               ...
 What Is Active Directory? Active Directory Objects Active Directory Schema Lightweight Directory Access Protocol (LDA...
Directory Service  Directory Service                 Centralized Management                                    Centralized...
   A directory service stores all the information    needed to use and manage these objects in a    centralized location,...
 What Is a Directory Service? What Is a Schema? What Is the Global Catalog?                                 07/11/2008 ...
A structured repository of information about people andresources in an organization         Domain            OU1         ...
defines all the objects and attributes that the directory service uses  to store data      Examples of object             ...
   The global catalog is the central repository of    information about objects in a tree or forest. By    default, a glo...
◦ Provide a way to design and administer the  hierarchical structure, logical structure of the  network Include   Domains...
Domain Tree                         Domain     Domain         Domain       Domain                                         ...
   Logical collection of users and computers.   Several benefits of domain    Enable you to organize objects within a  ...
Tree Root Domain   Contiguous linking of one or more    AD domains that shares a common    namespace or in a Parent-Child...
   Combination of One or More Trees   A forest is a disjointed namespace   www.microsoft.com   www.msn.com   Transiti...
Forest Root Domain   The Forest Root Domain Is    the First Domain Created    in a Forest                                ...
   An organizational unit (OU) is a subdivision within an Active    Directory into which you can place users, groups, com...
   Benefits of using OUs    ◦ Easier to locate and manage the Active Directory objects    ◦ Define more advanced features...
 Not related to logical Structure Modeled via „Sites“ A site is well connected via fast Network Links One Site can hom...
   Sites   Domain controllers   WAN links                                      Site            WAN Link                ...
   Domain Controller is a server on a Microsoft Windows    Network that is responsible for allowing host access to    Win...
Lightweight Directory Access Protocol (LDAP)                                   Contoso.msft                               ...
Upcoming SlideShare
Loading in …5
×

1.2 active directory

1,904 views
1,871 views

Published on

0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
1,904
On SlideShare
0
From Embeds
0
Number of Embeds
966
Actions
Shares
0
Downloads
0
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

1.2 active directory

  1. 1. 07/11/2008 1
  2. 2.  Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure 07/11/2008 2
  3. 3.  What Is Active Directory? Active Directory Objects Active Directory Schema Lightweight Directory Access Protocol (LDAP) 07/11/2008 3
  4. 4. Directory Service Directory Service Centralized Management Centralized Management Functionality Functionality Organize Organize  Single point of administration  Single point of administration Manage Manage Resources Resources  Full user access to directory  Full user access to directory Control Control resources by a single logon resources by a single logon 07/11/2008 4
  5. 5.  A directory service stores all the information needed to use and manage these objects in a centralized location, simplifying the process of locating and managing these resources.
  6. 6.  What Is a Directory Service? What Is a Schema? What Is the Global Catalog? 07/11/2008 6
  7. 7. A structured repository of information about people andresources in an organization Domain OU1 KimYoshida Computers Attributes Values Computer1 Name Kim Yoshida Users User1 Building 117 OU2 Floor 1 Users User2 Printers Printer1A repository is a collection of resources that can beaccessed to retrieve information. Repositories often consistof several databases tied together by a common search 07/11/2008 7engine.
  8. 8. defines all the objects and attributes that the directory service uses to store data Examples of object Examples of class attributes accountExpires User distinguishedName directReports dNSHostName operatingSystem Computer firstName lastName Printer
  9. 9.  The global catalog is the central repository of information about objects in a tree or forest. By default, a global catalog is created automatically on the initial domain controller in the first domain in the forest. A domain controller that holds a copy of the global catalog is called a global catalog server. It stores only attributes about each objects ,such as objects location Read Only Global Catalog
  10. 10. ◦ Provide a way to design and administer the hierarchical structure, logical structure of the network Include  Domains and organizational units  Trees and forests
  11. 11. Domain Tree Domain Domain Domain Domain OU ObjectsDomain Domain OU OU Domain Organizational Unit Forest
  12. 12.  Logical collection of users and computers. Several benefits of domain Enable you to organize objects within a single dept. or location. Act as a security boundaries. Domain Objects are fully replicated to the domain controller’s within a domain, not to other domains .
  13. 13. Tree Root Domain Contiguous linking of one or more AD domains that shares a common namespace or in a Parent-Child Parent Parent Relationship. Parent Domain Two-way transitive trust contoso.msft automatically created Tree Root Domain :- first domain in a tree or parent domain Child Domain Child Child sales.contoso.msft New Domain
  14. 14.  Combination of One or More Trees A forest is a disjointed namespace www.microsoft.com www.msn.com Transitive Trusts created automatically
  15. 15. Forest Root Domain The Forest Root Domain Is the First Domain Created in a Forest Domain Forest Tree Tree Root Domain OU Domain Domain OU Domain OU TreeDomain Domain Objects
  16. 16.  An organizational unit (OU) is a subdivision within an Active Directory into which you can place users, groups, computers, and other organizational units. You can create organizational units to mirror your organizations structure. Implements a Structure inside a Domain Can be nested as needed Can not be assigned any rights Typically used for Administrative Reasons OU ◦ e.g. System Policies OU Domain OU Objects
  17. 17.  Benefits of using OUs ◦ Easier to locate and manage the Active Directory objects ◦ Define more advanced features by applying Group Policy to an OU ◦ Delegate administrative control over OUs
  18. 18.  Not related to logical Structure Modeled via „Sites“ A site is well connected via fast Network Links One Site can home multiple Domains One Domain can spread across many Sites Domain Database is stored on Domain Controllers
  19. 19.  Sites Domain controllers WAN links Site WAN Link Domain Controllers Site A site is one or more IP subnets connected by a fast and reliable link.
  20. 20.  Domain Controller is a server on a Microsoft Windows Network that is responsible for allowing host access to Windows domain resources. The domain controllers in your network are the centerpiece of your Active directory service.  It stores user account information, authenticates users and enforces security policy for a Windows domain
  21. 21. Lightweight Directory Access Protocol (LDAP) Contoso.msft Finance SalesRelative distinguished name Suzan Fine CN=Suzan Fine,OU=Sales,OU=Finance,DC=contoso,DC=msft 07/11/2008 21

×