Active Directory Training

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Active Directory Overview <ul><ul><li>Active Directory Objects </li></ul></ul><ul><ul><li>Active Directory Components </li...

Active Directory Objects and Attributes Confidential

Active Directory Definitions <ul><ul><li>Resources stored in the directory, such as user data, printers, servers, database...

Attributes & Classes <ul><ul><li>Attributes : </li></ul></ul><ul><ul><li>Defined separately from classes </li></ul></ul><...

Active Directory Components <ul><ul><li>Logical Structure </li></ul></ul><ul><ul><ul><li>Domains </li></ul></ul></ul><ul><...

Logical Hierarchical Structure Confidential

<ul><ul><li>Resources should be organized in a logical structure that mirrors the logical structure of the organization. <...

Use OUs to Handle Administrative Tasks Confidential

Domain Tree Confidential

Forest of Trees Confidential

Sites <ul><ul><li>Combination of one or more IP subnets connected by a highly reliable and fast link to localize as much n...

Understanding Active Directory Concepts <ul><ul><li>Global Catalog </li></ul></ul><ul><ul><li>Replication </li></ul></ul><...

Global Catalog Is Central Repository Confidential

Key Directory Roles <ul><ul><li>Enables network logon by providing universal group membership information to a domain cont...

Directory Partitions <ul><ul><li>Schema information </li></ul></ul><ul><ul><ul><li>Defines the objects that can be created...

A Domain Controller Stores and Replicates <ul><ul><li>Schema information for the domain tree or forest </li></ul></ul><ul>...

A Global Catalog Stores and Replicates <ul><ul><li>Schema information for a forest </li></ul></ul><ul><ul><li>Configurati...

Replication Topology Confidential

Replication Within a Site <ul><ul><li>Active Directory automatically generates a topology for replication among domain con...

Replication Between Sites <ul><ul><li>To ensure replication between sites, Active Directory must be customized to replicat...

Two Types of Trust Relationships Confidential

Implicit Two-Way Transitive Trust <ul><ul><li>Trust relationship between parent and child domains within a tree and betwe...

Explicit One-Way Nontransitive Trust <ul><ul><li>Trust relationship between domains that are not part of the same tree </l...

Minimum Requirement to install Active Directory <ul><ul><li>For Operating system Windows 2000 Server </li></ul></ul><ul><u...

Introduction to the Active Directory Installation Wizard Confidential

Adding or Creating a Domain Controller <ul><ul><li>If you add a domain controller to an existing domain, you create a peer...

Adding a Domain Controller to an Existing Domain Confidential

Creating a New Child Domain Confidential

Creating a New Domain Tree Confidential

Adding a Domain Tree to a Forest Confidential

The Active Directory Database <ul><ul><li>The database is a file named Ntds.dit, which is the directory for the new domain...

The Shared System Volume <ul><ul><li>The shared system volume is a folder structure that exists on all Windows 2000 domain...

Domain Modes <ul><ul><li>Mixed mode (By Default) </li></ul></ul><ul><ul><li>Native mode </li></ul></ul>Confidential

Introduction to OUs and their Objects <ul><ul><li>Each Active Directory object is a distinct named set of attributes that ...

Creating Ous Confidential

Adding Objects to OUs Group Confidential Computer Group

Locating Objects Confidential

Modifying Attributes and Deleting Objects <ul><ul><li>You can modify the attributes of an object to change or add informat...

Groups Simplify Administration Confidential

Group Types <ul><ul><li>Two group types exist: security and distribution. </li></ul></ul><ul><ul><li>The group type determ...

Distribution Groups <ul><ul><li>Used by applications as lists for nonsecurity-related functions </li></ul></ul><ul><ul><li...

Group Scopes Confidential

Group Scope Overview <ul><ul><li>A group type and scope must be selected when a group is created. </li></ul></ul><ul><ul><...

Global Groups <ul><ul><li>Used to organize users who share similar network access requirements. </li></ul></ul><ul><ul><li...

Universal Groups <ul><ul><li>Used to assign permissions to related resources in multiple domains. </li></ul></ul><ul><ul><...

Groups for Administrators <ul><ul><li>Why You Should Not Run Your Computer as an Administrator </li></ul></ul><ul><ul><li>...

Using Run As to Start a Program <ul><ul><li>Run As is used to run a program that requires the user to be logged on as an ...

Using Run As to Start a Program (con’t) <ul><ul><li>The RunAs service must be running for Run As to start a program. </li...

Run As Other User Dialog Box Confidential

Creating Sites and Subnets <ul><ul><li>Replication is an important function of the Active Directory service. </li></ul></u...

Configuring Site Settings <ul><ul><li>To configure a site setting: </li></ul></ul><ul><ul><li>1. Create a new site obj...

Creating a Site Object (Cont.) <ul><ul><li>By default, all domain controllers on an Active Directory network are part of a...

The Active Directory Sites And Services Console Confidential

The New Object – Site Dialog Box Confidential

Associating a Subnet Object With a Site <ul><ul><li>Computers on Transmission Control Protocol/Internet Protocol (TCP/IP)...

The New Object – Subnet Dialog Box Confidential

The Properties Dialog Box for a Subnet Confidential

Creating Site Links <ul><ul><li>A site link object and a physical link (such as a WAN connection) are required for replica...

Replication Protocols <ul><ul><li>Site link objects use Internet Protocol (IP) or Simple Mail Transfer Protocol (SMTP) to ...

Creating Site Link Objects <ul><ul><li>The Inter-Site Transports folder contains the IP folder and the SMTP folder. </li><...

The Inter-Site Transports Folder in Active Directory Sites And Services Confidential

The New Object – Site Link Dialog Box Confidential

The Properties Dialog Box for a Site Link Object Confidential

Tasks for Configuring Intersite Replication <ul><ul><li>1. Create site links. </li></ul></ul><ul><ul><li>2. Configure sit...

Configuring Site Link Attributes <ul><ul><li>When you configure intersite replication, you should provide the following ...

Site Link Cost <ul><ul><li>The site link cost assigns a value indicating the relative cost of each available connection us...

Example Site Link Configuration Confidential

The Properties Dialog Box for a Site Link Object Confidential

Replication Frequency <ul><ul><li>You configure the replication frequency for site links by specifying how many minutes Ac...

The Schedule For Dialog Box for a Site Link Object Confidential

The Properties Dialog Box for an Intersite Transports Protocol Folder Confidential

Creating Site Link Bridges <ul><ul><li>By default, when more than two sites are linked for replication and they all use ...

The New Object – Site Link Bridge Dialog Box Confidential

Operation Master Operation Master Schema Master - controls originating updates to the Schema. One domain controller per fo...

Infrastructure Master - is responsible for updating user-to-group references between domains. This role should not be held...

When to Transfer Roles <ul><ul><li>Initial setup of domain </li></ul></ul><ul><ul><ul><li>E.g. in a multi-domain forest, m...

When to Seizing Roles <ul><ul><li>Generally only seize when originally role holder has failed irrecoverably and will not b...

<ul><li>In the console tree, right-click Active Directory Users And Computers. Then select Operations Masters. </li></ul>...

Confidential

Configuring Global Catlog Server Confidential

Seizing the Operation Master Seizing the Operation Master : 1. Click Start 2. Choose Run 3. Type NTDSUTIL and press Ent...

Backing Up Active Directory <ul><ul><li>The Backup Wizard </li></ul></ul><ul><ul><li>What to Back Up </li></ul></ul><ul><u...

Backup Wizard What To Back Up Confidential

Backing Up System State Data <ul><ul><li>System State data comprises the registry, the COM+ Class Registration database, ...

Backing Up System State Data (Cont.) Confidential

Backup Wizard Where To Store The Backup Page Confidential

Backup Media Options <ul><ul><li>Backup Media Type </li></ul></ul><ul><ul><ul><li>Tape or file. </li></ul></ul></ul><ul><u...

Backup Wizard Options <ul><ul><li>Start the backup: If Finish is clicked, the Backup Wizard displays status information ab...

Backup Wizard Provides the Opportunity to do Either of the Following <ul><ul><li>Finish the backup process </li></ul></ul...

Scheduling Active Directory Backup Jobs <ul><ul><li>An unattended backup job can occur later when users are not at work an...

Preparing to Restore Active Directory <ul><ul><li>As with the backup process, only the System State data that was backed u...

Nonauthoritative Restore <ul><ul><li>Any component of the System State replicated with another domain controller is brough...

Restore Wizard What To Restore Page Confidential

Restore Wizard: Advanced Restore Options <ul><ul><li>Where To Restore page: Restore Files To option </li></ul></ul><ul><ul...

Windows Backup Functions After the Restore Wizard <ul><ul><li>Prompts for verification of the selection of the source medi...

Performing an Authoritative Restore: Authoritative Restore Operation <ul><ul><li>An authoritative restore occurs after a ...

Performing an Authoritative Restore: After the Authoritative Restore Operation <ul><ul><li>Normal replication brings the r...

Additional Tasks for Authoritatively Restoring the Entire Active Directory Database <ul><ul><li>An additional procedure in...

Active Directory Performance Monitoring Tools <ul><ul><li>Performance Monitoring Tools </li></ul></ul><ul><ul><li>The Even...

Uses for Active Directory Performance Data <ul><ul><li>Understand Active Directory performance and the corresponding effec...

Event Viewer Console Directory Service Log Confidential

Event Logs for Monitoring Active Directory Performance <ul><ul><li>Application log: Contains errors, warnings, or informat...

NTDS Performance Object Counters <ul><ul><li>The NTDS performance object contains many performance counters that provide s...

Trace Log–Specific Options in the Log Files Tab <ul><ul><li>Log File Type: The desired format for this log file </li></ul>...

Active Directory Support Tools <ul><ul><li>LDP.EXE: Active Directory Administration Tool </li></ul></ul><ul><ul><li>REPLMO...

GUI Tools <ul><ul><li>LDP.EXE: Active Directory Administration Tool </li></ul></ul><ul><ul><li>Allows users to perform LD...

<ul><ul><li>REPLMON.EXE: Active Directory Replication Monitor </li></ul></ul><ul><ul><li>Enables administrators to do var...

Active Directory Replication Monitor Features <ul><ul><li>Graphic displays </li></ul></ul><ul><ul><li>Replication status h...

REPADMIN.EXE: Replication Diagnostic Tool <ul><ul><li>Command-line tool that assists administrators in diagnosing replicat...

SDCHECK.EXE: Security Descriptor Check Utility <ul><ul><li>Command-line tool that displays the security descriptor for any...

NLTEST.EXE <ul><ul><li>Command-line tool that helps perform network administrative tasks </li></ul></ul><ul><ul><ul><li>Te...

ACL Diagnostics: ACLDIAG.EXE <ul><ul><li>Command-line tool that helps diagnose and troubleshoot problems with permissions ...

DSACLS.EXE <ul><ul><li>Command-line tool that facilitates management of ACLs for directory services </li></ul></ul><ul><ul...

Troubleshooting Active Directory <ul><li>Cannot add/remove a domain </li></ul><ul><li>Cannot create objects </li></ul><ul>...

Symptom: Cannot Add/Remove a Domain <ul><li>Cause: </li></ul><ul><ul><li>Domain naming master is not available. </li></ul>...

Symptom: Cannot Create Objects in Active Directory <ul><li>Cause: </li></ul><ul><ul><li>Relative ID master is not availabl...

Symptom: Cannot Modify the Schema <ul><li>Cause: </li></ul><ul><ul><li>Schema master is not available. </li></ul></ul><ul...

Symptom: Changes to Group Memberships Not Taking Effect <ul><li>Cause: </li></ul><ul><ul><li>Infrastructure master is not ...

Symptom: Clients Without Active Directory Client Software Installed Cannot Log On <ul><li>Cause: </li></ul><ul><ul><li>Pr...

Symptom: Unable to Access Resources in Another Domain <ul><li>Cause: </li></ul><ul><ul><li>Failure of the trust between th...

Troubleshooting Active Directory Replication <ul><ul><li>Most Active Directory replication problems that can be fixed wi...

Replication Troubleshooting Scenarios <ul><ul><li>Symptom: Replication of directory information has stopped. </li></ul></u...

Replication Troubleshooting Scenarios (Cont.) <ul><ul><li>Symptom: Replication has slowed but not stopped. (Cont.) </li></...

Replication Troubleshooting Scenarios (Cont.) <ul><ul><li>Symptom: Replication has slowed but not stopped. (Cont.) </li>...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

Active Directory by Sandeep Kapadane 53381 views
Active directory by deshvikas 28154 views
Active Directory Services by Varun Arora 11697 views
What is active directory by Adeel Khurram 10800 views
Arquitectura Directorio Activo by Isabel Yepes 7055 views
active-directory-domain-services by 202066 8319 views

View on Slideshare

1 of 124 Ad

View on Slideshare

1 of 124 Ad