SlideShare a Scribd company logo
Active Directory® Domain 
Services (AD DS)
What are ADDS? 
• Active Directory Domain Services (AD DS) provides the 
functionality of an identity and access (IDA) solution for 
enterprise networks. 
• Store information about users, groups, computers, and 
other identities. 
• Authenticate an identity. 
 The server will not grant the user access to the document 
unless the server can verify the identity presented in the 
access request as valid. 
 Kerberos Authentication: a protocol called Kerberos is used to 
authenticate identi-ties. 
• Control access 
• Provide an audit trail
Components of an Active Directory Infrastructure 
 Active Directory data store 
 Domain controllers 
 Domain 
 Forest 
 Tree 
 Functional level 
 Organizational units 
 Sites
Domain controllers (DC) 
• DCs are servers that perform the AD DS role. 
• The Kerberos Key Distribution Center (KDC) service, which 
Performs authentication, and other Active Directory 
services.
Forest 
• A forest is a collection of one or more Active Directory 
domains. 
• The first domain installed in a forest is called the forest 
root domain. 
• The forest defines a security boundary.
Functional level 
• The functional level is an AD DS setting that enables 
advanced domain-wide or forest-wide AD DS features. 
• Three domain functional levels: 
 Windows 2000 native. 
 Windows Server 2003 
 Windows Server 2008. 
• Two forest functional levels: 
 Microsoft Window s Server 2003. 
 Windows Server 2008.
Requirements for Installing AD DS 
• Local Administrator permissions to install the first 
domain controller in a forest 
• Domain Administrator permissions to install 
additional domain controllers in a domain 
• Enterprise Administrator permissions to install 
additional domains in a forest 
Administrator 
permissions 
• TCP/IP must be configured, including DNS 
client settings 
• DNS Server that supports dynamic updates must 
be available or will be configured on the domain 
controller 
Network 
configuration 
• A computer running Windows Server 2008 
• Minimum disk space of 250 MB and a partition 
formatted with NTFS file system 
Server 
requirements to 
install AD DS
AD DS Installation Process 
Install the Active Directory Domain Services role 
using the Server Manager 
1 
Run the Active Directory Domain Services 
Installation Wizard 
2 
3 Choose the deployment configuration 
4 Select the additional domain controller features 
Select the location for the database, log files, and 
SYSVOl folder 5 
Configure the Directory Services Restore 
Mode Administrator Password 6
Advanced Options for Installing AD DS 
To access the advanced mode installation options, 
choose the Advanced Mode option in the installation wizard or run 
DCPromo /adv 
Use the advanced mode options to: 
• Create a new domain tree 
• Use backup media as the source for AD DS information 
• Select the source domain controller for the installation 
• Modify the default domain NetBIOS name 
• Define the Password Replication Policy for an RODC
Installing AD DS from Media 
Use Ntdsutil.exe to create the installation media 
Ntdsutil.exe can create the following types of installation media: 
• Full (or writable) domain controller 
• Full (or writable) domain controller without SYSVOL data 
• Read-only domain controller without SYSVOL data 
• Read-only domain controller
Installing AD DS on a Server Core Computer 
• Installing Server Core
Configuring AD DS Domain 
Controller Roles 
• What Are Global Catalog Servers? 
• Modifying the Global Catalog 
• Demonstration: Configuring Global Catalog Servers 
• What Are Operations Master Roles? 
• Demonstration: Managing Operation Master Roles 
• How Windows Time Service Works
What Are Global Catalog Servers? 
Domain 
Domain 
Domain Domain 
Domain 
Domain Domain 
Global Catalog 
Global Catalog 
Server 
Query 
Result
How Windows Time Service Works 
Windows Time service (W32Time) 
provides network clock 
synchronization for domain 
controllers and client computers 
PDC Emulator 
Domain controllers 
In a Windows Server 2008 forest, 
the PDC Emulator is used to 
provide the authoritative time 
for all other computers 
Time synchronization is important because: 
• Kerberos authentication includes a time stamp 
Client 
computers 
• Replication between domain controllers is time stamped
steps

More Related Content

What's hot

Introduction to Active Directory
Introduction to Active DirectoryIntroduction to Active Directory
Introduction to Active Directory
thoms1i
 
Active-Directory-Domain-Services.pptx
Active-Directory-Domain-Services.pptxActive-Directory-Domain-Services.pptx
Active-Directory-Domain-Services.pptx
MeriemBalhaddad
 
Windows server
Windows serverWindows server
Windows server
Hideo Amezawa
 
Understanding the Windows Server Administration Fundamentals (Part-1)
Understanding the Windows Server Administration Fundamentals (Part-1)Understanding the Windows Server Administration Fundamentals (Part-1)
Understanding the Windows Server Administration Fundamentals (Part-1)
Tuan Yang
 
1 introduction to windows server 2016
1  introduction to windows server 20161  introduction to windows server 2016
1 introduction to windows server 2016
Hameda Hurmat
 
2.1 users & groups
2.1 users & groups2.1 users & groups
2.1 users & groupsMuuluu
 
Windows Server 2016 First Look (Part 1)
Windows Server 2016 First Look (Part 1)Windows Server 2016 First Look (Part 1)
Windows Server 2016 First Look (Part 1)
Tuan Yang
 
Active Directory component
Active Directory componentActive Directory component
Active Directory component
kuldeep singh shishodia
 
Active directory
Active directory Active directory
Active directory deshvikas
 
Windows Server 2012
Windows Server 2012Windows Server 2012
Windows Server 2012
Muhibullah Malyar
 
Active directory and application
Active directory and applicationActive directory and application
Active directory and application
aminpathan11
 
Workgroup vs domain
Workgroup vs domainWorkgroup vs domain
Workgroup vs domaintameemyousaf
 
Administer Active Directory
Administer Active DirectoryAdminister Active Directory
Administer Active Directory
Hameda Hurmat
 
Microsoft Remote Desktop Services
Microsoft Remote Desktop ServicesMicrosoft Remote Desktop Services
Microsoft Remote Desktop Services
Ronnie Isherwood
 
Active Directory Training
Active Directory TrainingActive Directory Training
Active Directory Training
Nishad Sukumaran
 
Active Directory Services
Active Directory ServicesActive Directory Services
Active Directory ServicesVarun Arora
 
02-Active Directory Domain Services.pptx
02-Active Directory Domain Services.pptx02-Active Directory Domain Services.pptx
02-Active Directory Domain Services.pptx
AdiWidyanto2
 
Active directory architecture
Active directory architectureActive directory architecture
Active directory architecture
rahuldaredia21
 
Active Directory
Active DirectoryActive Directory
Active Directory
Hameda Hurmat
 
Install active directory on windows server 2016 step by step
Install active directory on windows server 2016  step by stepInstall active directory on windows server 2016  step by step
Install active directory on windows server 2016 step by step
Ahmed Abdelwahed
 

What's hot (20)

Introduction to Active Directory
Introduction to Active DirectoryIntroduction to Active Directory
Introduction to Active Directory
 
Active-Directory-Domain-Services.pptx
Active-Directory-Domain-Services.pptxActive-Directory-Domain-Services.pptx
Active-Directory-Domain-Services.pptx
 
Windows server
Windows serverWindows server
Windows server
 
Understanding the Windows Server Administration Fundamentals (Part-1)
Understanding the Windows Server Administration Fundamentals (Part-1)Understanding the Windows Server Administration Fundamentals (Part-1)
Understanding the Windows Server Administration Fundamentals (Part-1)
 
1 introduction to windows server 2016
1  introduction to windows server 20161  introduction to windows server 2016
1 introduction to windows server 2016
 
2.1 users & groups
2.1 users & groups2.1 users & groups
2.1 users & groups
 
Windows Server 2016 First Look (Part 1)
Windows Server 2016 First Look (Part 1)Windows Server 2016 First Look (Part 1)
Windows Server 2016 First Look (Part 1)
 
Active Directory component
Active Directory componentActive Directory component
Active Directory component
 
Active directory
Active directory Active directory
Active directory
 
Windows Server 2012
Windows Server 2012Windows Server 2012
Windows Server 2012
 
Active directory and application
Active directory and applicationActive directory and application
Active directory and application
 
Workgroup vs domain
Workgroup vs domainWorkgroup vs domain
Workgroup vs domain
 
Administer Active Directory
Administer Active DirectoryAdminister Active Directory
Administer Active Directory
 
Microsoft Remote Desktop Services
Microsoft Remote Desktop ServicesMicrosoft Remote Desktop Services
Microsoft Remote Desktop Services
 
Active Directory Training
Active Directory TrainingActive Directory Training
Active Directory Training
 
Active Directory Services
Active Directory ServicesActive Directory Services
Active Directory Services
 
02-Active Directory Domain Services.pptx
02-Active Directory Domain Services.pptx02-Active Directory Domain Services.pptx
02-Active Directory Domain Services.pptx
 
Active directory architecture
Active directory architectureActive directory architecture
Active directory architecture
 
Active Directory
Active DirectoryActive Directory
Active Directory
 
Install active directory on windows server 2016 step by step
Install active directory on windows server 2016  step by stepInstall active directory on windows server 2016  step by step
Install active directory on windows server 2016 step by step
 

Similar to active-directory-domain-services

Microsoft Offical Course 20410C_02
Microsoft Offical Course 20410C_02Microsoft Offical Course 20410C_02
Microsoft Offical Course 20410C_02
gameaxt
 
Windows server 2008 active directory
Windows server 2008 active directoryWindows server 2008 active directory
Windows server 2008 active directoryRaghu nath
 
Final domain control policy
Final domain control policy  Final domain control policy
Final domain control policy
BhagyashriJadhav16
 
teste
testeteste
teste
mvpjordao
 
ADDS (Active directory Domain Service) in side server
ADDS (Active directory Domain Service) in side serverADDS (Active directory Domain Service) in side server
ADDS (Active directory Domain Service) in side server
BilalMehmood44
 
Chapter Two.pptx
Chapter Two.pptxChapter Two.pptx
Chapter Two.pptx
ssuser8347a1
 
ukoug2008-oracle-activedirectory-wi-131847.ppt
ukoug2008-oracle-activedirectory-wi-131847.pptukoug2008-oracle-activedirectory-wi-131847.ppt
ukoug2008-oracle-activedirectory-wi-131847.ppt
MartinCarrozzo
 
Introduction to System and network administrations
Introduction to System and network administrationsIntroduction to System and network administrations
Introduction to System and network administrations
girmayou1
 
Microsoft Offical Course 20410C_07
Microsoft Offical Course 20410C_07Microsoft Offical Course 20410C_07
Microsoft Offical Course 20410C_07
gameaxt
 
MCSA 70-412 Chapter 04
MCSA 70-412 Chapter 04MCSA 70-412 Chapter 04
MCSA 70-412 Chapter 04
Computer Networking
 
Domain Controller Critical Services
Domain Controller Critical ServicesDomain Controller Critical Services
Domain Controller Critical ServicesJani Sabtriady
 
Mcts chapter 1 (1)
Mcts chapter 1 (1)Mcts chapter 1 (1)
Mcts chapter 1 (1)Ankit Kumar
 
pdf to ppt window configuration .pptx
pdf to ppt window configuration .pptxpdf to ppt window configuration .pptx
pdf to ppt window configuration .pptx
TadeseBeyene
 
History of Windows Server
History of Windows ServerHistory of Windows Server
History of Windows Server
sundas Shabbir
 
Lecture 11 active directory
Lecture 11 active directoryLecture 11 active directory
Lecture 11 active directory
Tanveer Malik
 
Directory Synchronization Single Sign-On in Office 365
Directory Synchronization Single Sign-On in Office 365Directory Synchronization Single Sign-On in Office 365
Directory Synchronization Single Sign-On in Office 365
InnoTech
 
Chapter08 -- network operating systems and windows server 2003-based networking
Chapter08  -- network operating systems and windows server 2003-based networkingChapter08  -- network operating systems and windows server 2003-based networking
Chapter08 -- network operating systems and windows server 2003-based networking
Raja Waseem Akhtar
 
Implementing Domain Name
Implementing Domain NameImplementing Domain Name
Implementing Domain Name
Napoleon NV
 

Similar to active-directory-domain-services (20)

Microsoft Offical Course 20410C_02
Microsoft Offical Course 20410C_02Microsoft Offical Course 20410C_02
Microsoft Offical Course 20410C_02
 
Windows server 2008 active directory
Windows server 2008 active directoryWindows server 2008 active directory
Windows server 2008 active directory
 
Final domain control policy
Final domain control policy  Final domain control policy
Final domain control policy
 
teste
testeteste
teste
 
ADDS (Active directory Domain Service) in side server
ADDS (Active directory Domain Service) in side serverADDS (Active directory Domain Service) in side server
ADDS (Active directory Domain Service) in side server
 
Chapter Two.pptx
Chapter Two.pptxChapter Two.pptx
Chapter Two.pptx
 
ukoug2008-oracle-activedirectory-wi-131847.ppt
ukoug2008-oracle-activedirectory-wi-131847.pptukoug2008-oracle-activedirectory-wi-131847.ppt
ukoug2008-oracle-activedirectory-wi-131847.ppt
 
Introduction to System and network administrations
Introduction to System and network administrationsIntroduction to System and network administrations
Introduction to System and network administrations
 
Microsoft Offical Course 20410C_07
Microsoft Offical Course 20410C_07Microsoft Offical Course 20410C_07
Microsoft Offical Course 20410C_07
 
MCSA 70-412 Chapter 04
MCSA 70-412 Chapter 04MCSA 70-412 Chapter 04
MCSA 70-412 Chapter 04
 
Domain Controller Critical Services
Domain Controller Critical ServicesDomain Controller Critical Services
Domain Controller Critical Services
 
Mcts chapter 1 (1)
Mcts chapter 1 (1)Mcts chapter 1 (1)
Mcts chapter 1 (1)
 
Asish verma
Asish vermaAsish verma
Asish verma
 
pdf to ppt window configuration .pptx
pdf to ppt window configuration .pptxpdf to ppt window configuration .pptx
pdf to ppt window configuration .pptx
 
History of Windows Server
History of Windows ServerHistory of Windows Server
History of Windows Server
 
Lecture 11 active directory
Lecture 11 active directoryLecture 11 active directory
Lecture 11 active directory
 
Directory Synchronization Single Sign-On in Office 365
Directory Synchronization Single Sign-On in Office 365Directory Synchronization Single Sign-On in Office 365
Directory Synchronization Single Sign-On in Office 365
 
Chapter08 -- network operating systems and windows server 2003-based networking
Chapter08  -- network operating systems and windows server 2003-based networkingChapter08  -- network operating systems and windows server 2003-based networking
Chapter08 -- network operating systems and windows server 2003-based networking
 
Implementing Domain Name
Implementing Domain NameImplementing Domain Name
Implementing Domain Name
 
Active directoryfinal
Active directoryfinalActive directoryfinal
Active directoryfinal
 

Recently uploaded

Digital Tools and AI for Teaching Learning and Research
Digital Tools and AI for Teaching Learning and ResearchDigital Tools and AI for Teaching Learning and Research
Digital Tools and AI for Teaching Learning and Research
Vikramjit Singh
 
The Roman Empire A Historical Colossus.pdf
The Roman Empire A Historical Colossus.pdfThe Roman Empire A Historical Colossus.pdf
The Roman Empire A Historical Colossus.pdf
kaushalkr1407
 
1.4 modern child centered education - mahatma gandhi-2.pptx
1.4 modern child centered education - mahatma gandhi-2.pptx1.4 modern child centered education - mahatma gandhi-2.pptx
1.4 modern child centered education - mahatma gandhi-2.pptx
JosvitaDsouza2
 
A Strategic Approach: GenAI in Education
A Strategic Approach: GenAI in EducationA Strategic Approach: GenAI in Education
A Strategic Approach: GenAI in Education
Peter Windle
 
Model Attribute Check Company Auto Property
Model Attribute  Check Company Auto PropertyModel Attribute  Check Company Auto Property
Model Attribute Check Company Auto Property
Celine George
 
Acetabularia Information For Class 9 .docx
Acetabularia Information For Class 9  .docxAcetabularia Information For Class 9  .docx
Acetabularia Information For Class 9 .docx
vaibhavrinwa19
 
The French Revolution Class 9 Study Material pdf free download
The French Revolution Class 9 Study Material pdf free downloadThe French Revolution Class 9 Study Material pdf free download
The French Revolution Class 9 Study Material pdf free download
Vivekanand Anglo Vedic Academy
 
The basics of sentences session 5pptx.pptx
The basics of sentences session 5pptx.pptxThe basics of sentences session 5pptx.pptx
The basics of sentences session 5pptx.pptx
heathfieldcps1
 
June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...
June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...
June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...
Levi Shapiro
 
BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...
BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...
BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...
Nguyen Thanh Tu Collection
 
CACJapan - GROUP Presentation 1- Wk 4.pdf
CACJapan - GROUP Presentation 1- Wk 4.pdfCACJapan - GROUP Presentation 1- Wk 4.pdf
CACJapan - GROUP Presentation 1- Wk 4.pdf
camakaiclarkmusic
 
special B.ed 2nd year old paper_20240531.pdf
special B.ed 2nd year old paper_20240531.pdfspecial B.ed 2nd year old paper_20240531.pdf
special B.ed 2nd year old paper_20240531.pdf
Special education needs
 
Introduction to AI for Nonprofits with Tapp Network
Introduction to AI for Nonprofits with Tapp NetworkIntroduction to AI for Nonprofits with Tapp Network
Introduction to AI for Nonprofits with Tapp Network
TechSoup
 
CLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCE
CLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCECLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCE
CLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCE
BhavyaRajput3
 
Synthetic Fiber Construction in lab .pptx
Synthetic Fiber Construction in lab .pptxSynthetic Fiber Construction in lab .pptx
Synthetic Fiber Construction in lab .pptx
Pavel ( NSTU)
 
Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46
Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46
Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46
MysoreMuleSoftMeetup
 
Lapbook sobre os Regimes Totalitários.pdf
Lapbook sobre os Regimes Totalitários.pdfLapbook sobre os Regimes Totalitários.pdf
Lapbook sobre os Regimes Totalitários.pdf
Jean Carlos Nunes Paixão
 
Phrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXX
Phrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXXPhrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXX
Phrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXX
MIRIAMSALINAS13
 
Home assignment II on Spectroscopy 2024 Answers.pdf
Home assignment II on Spectroscopy 2024 Answers.pdfHome assignment II on Spectroscopy 2024 Answers.pdf
Home assignment II on Spectroscopy 2024 Answers.pdf
Tamralipta Mahavidyalaya
 
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
siemaillard
 

Recently uploaded (20)

Digital Tools and AI for Teaching Learning and Research
Digital Tools and AI for Teaching Learning and ResearchDigital Tools and AI for Teaching Learning and Research
Digital Tools and AI for Teaching Learning and Research
 
The Roman Empire A Historical Colossus.pdf
The Roman Empire A Historical Colossus.pdfThe Roman Empire A Historical Colossus.pdf
The Roman Empire A Historical Colossus.pdf
 
1.4 modern child centered education - mahatma gandhi-2.pptx
1.4 modern child centered education - mahatma gandhi-2.pptx1.4 modern child centered education - mahatma gandhi-2.pptx
1.4 modern child centered education - mahatma gandhi-2.pptx
 
A Strategic Approach: GenAI in Education
A Strategic Approach: GenAI in EducationA Strategic Approach: GenAI in Education
A Strategic Approach: GenAI in Education
 
Model Attribute Check Company Auto Property
Model Attribute  Check Company Auto PropertyModel Attribute  Check Company Auto Property
Model Attribute Check Company Auto Property
 
Acetabularia Information For Class 9 .docx
Acetabularia Information For Class 9  .docxAcetabularia Information For Class 9  .docx
Acetabularia Information For Class 9 .docx
 
The French Revolution Class 9 Study Material pdf free download
The French Revolution Class 9 Study Material pdf free downloadThe French Revolution Class 9 Study Material pdf free download
The French Revolution Class 9 Study Material pdf free download
 
The basics of sentences session 5pptx.pptx
The basics of sentences session 5pptx.pptxThe basics of sentences session 5pptx.pptx
The basics of sentences session 5pptx.pptx
 
June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...
June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...
June 3, 2024 Anti-Semitism Letter Sent to MIT President Kornbluth and MIT Cor...
 
BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...
BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...
BÀI TẬP BỔ TRỢ TIẾNG ANH GLOBAL SUCCESS LỚP 3 - CẢ NĂM (CÓ FILE NGHE VÀ ĐÁP Á...
 
CACJapan - GROUP Presentation 1- Wk 4.pdf
CACJapan - GROUP Presentation 1- Wk 4.pdfCACJapan - GROUP Presentation 1- Wk 4.pdf
CACJapan - GROUP Presentation 1- Wk 4.pdf
 
special B.ed 2nd year old paper_20240531.pdf
special B.ed 2nd year old paper_20240531.pdfspecial B.ed 2nd year old paper_20240531.pdf
special B.ed 2nd year old paper_20240531.pdf
 
Introduction to AI for Nonprofits with Tapp Network
Introduction to AI for Nonprofits with Tapp NetworkIntroduction to AI for Nonprofits with Tapp Network
Introduction to AI for Nonprofits with Tapp Network
 
CLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCE
CLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCECLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCE
CLASS 11 CBSE B.St Project AIDS TO TRADE - INSURANCE
 
Synthetic Fiber Construction in lab .pptx
Synthetic Fiber Construction in lab .pptxSynthetic Fiber Construction in lab .pptx
Synthetic Fiber Construction in lab .pptx
 
Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46
Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46
Mule 4.6 & Java 17 Upgrade | MuleSoft Mysore Meetup #46
 
Lapbook sobre os Regimes Totalitários.pdf
Lapbook sobre os Regimes Totalitários.pdfLapbook sobre os Regimes Totalitários.pdf
Lapbook sobre os Regimes Totalitários.pdf
 
Phrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXX
Phrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXXPhrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXX
Phrasal Verbs.XXXXXXXXXXXXXXXXXXXXXXXXXX
 
Home assignment II on Spectroscopy 2024 Answers.pdf
Home assignment II on Spectroscopy 2024 Answers.pdfHome assignment II on Spectroscopy 2024 Answers.pdf
Home assignment II on Spectroscopy 2024 Answers.pdf
 
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
 

active-directory-domain-services

  • 1. Active Directory® Domain Services (AD DS)
  • 2. What are ADDS? • Active Directory Domain Services (AD DS) provides the functionality of an identity and access (IDA) solution for enterprise networks. • Store information about users, groups, computers, and other identities. • Authenticate an identity.  The server will not grant the user access to the document unless the server can verify the identity presented in the access request as valid.  Kerberos Authentication: a protocol called Kerberos is used to authenticate identi-ties. • Control access • Provide an audit trail
  • 3. Components of an Active Directory Infrastructure  Active Directory data store  Domain controllers  Domain  Forest  Tree  Functional level  Organizational units  Sites
  • 4. Domain controllers (DC) • DCs are servers that perform the AD DS role. • The Kerberos Key Distribution Center (KDC) service, which Performs authentication, and other Active Directory services.
  • 5. Forest • A forest is a collection of one or more Active Directory domains. • The first domain installed in a forest is called the forest root domain. • The forest defines a security boundary.
  • 6. Functional level • The functional level is an AD DS setting that enables advanced domain-wide or forest-wide AD DS features. • Three domain functional levels:  Windows 2000 native.  Windows Server 2003  Windows Server 2008. • Two forest functional levels:  Microsoft Window s Server 2003.  Windows Server 2008.
  • 7. Requirements for Installing AD DS • Local Administrator permissions to install the first domain controller in a forest • Domain Administrator permissions to install additional domain controllers in a domain • Enterprise Administrator permissions to install additional domains in a forest Administrator permissions • TCP/IP must be configured, including DNS client settings • DNS Server that supports dynamic updates must be available or will be configured on the domain controller Network configuration • A computer running Windows Server 2008 • Minimum disk space of 250 MB and a partition formatted with NTFS file system Server requirements to install AD DS
  • 8. AD DS Installation Process Install the Active Directory Domain Services role using the Server Manager 1 Run the Active Directory Domain Services Installation Wizard 2 3 Choose the deployment configuration 4 Select the additional domain controller features Select the location for the database, log files, and SYSVOl folder 5 Configure the Directory Services Restore Mode Administrator Password 6
  • 9. Advanced Options for Installing AD DS To access the advanced mode installation options, choose the Advanced Mode option in the installation wizard or run DCPromo /adv Use the advanced mode options to: • Create a new domain tree • Use backup media as the source for AD DS information • Select the source domain controller for the installation • Modify the default domain NetBIOS name • Define the Password Replication Policy for an RODC
  • 10. Installing AD DS from Media Use Ntdsutil.exe to create the installation media Ntdsutil.exe can create the following types of installation media: • Full (or writable) domain controller • Full (or writable) domain controller without SYSVOL data • Read-only domain controller without SYSVOL data • Read-only domain controller
  • 11. Installing AD DS on a Server Core Computer • Installing Server Core
  • 12. Configuring AD DS Domain Controller Roles • What Are Global Catalog Servers? • Modifying the Global Catalog • Demonstration: Configuring Global Catalog Servers • What Are Operations Master Roles? • Demonstration: Managing Operation Master Roles • How Windows Time Service Works
  • 13. What Are Global Catalog Servers? Domain Domain Domain Domain Domain Domain Domain Global Catalog Global Catalog Server Query Result
  • 14. How Windows Time Service Works Windows Time service (W32Time) provides network clock synchronization for domain controllers and client computers PDC Emulator Domain controllers In a Windows Server 2008 forest, the PDC Emulator is used to provide the authoritative time for all other computers Time synchronization is important because: • Kerberos authentication includes a time stamp Client computers • Replication between domain controllers is time stamped
  • 15. steps

Editor's Notes

  1. 11/19/2014Course 6425A
  2. 11/19/2014Course 6425A
  3. 11/19/2014Course 6425A
  4. 11/19/2014Course 6425A
  5. 11/19/2014Course 6425A
  6. 11/19/2014Course 6425A
  7. 11/19/2014Course 6425A
  8. 11/19/2014Course 6425A