Active Directory Fundamentals

What Is a Directory Service?

A service that helps track and locate objects on a network A service that helps track and locate objects on a network

Active Directory Management

UsersUsersServicesServicesWorkstationsWorkstations FilesFiles

Active Directory Domains

Boundary of Authentication

Boundary of Policies

Boundary of Replication

CONTOSO.COM

Active Directory Trees

CONTOSO.COM

US.CONTOSO.COM

SharedSchema

Configuration

Global CatalogOHIO.US.CONTOSO.COM

Transitive Trusts

CONTOSO.COM

US.CONTOSO.COM

UK.CONTOSO.COM

Active Directory Forests

US.CONTOSO.COM

FABRIKAM.COM

UK.FABRIKAM.COM

CONTOSO.COM

Schema ConfigurationGlobal Catalog

Organizational Units

CONTOSO.COM

OU Admin

Organized For:•Administration

•Same Requirements•Delegation

•Group Policy•Configuration•Security

Organized For:•Administration

•Same Requirements•Delegation

•Group Policy•Configuration•Security

OU PolicyOU Security

Organizational Unit Applications

Sales Department Marketing DepartmentLondon New YorkDesktops Printers

Hardware Devices

Domain Controllers

Windows NT 4.0 Windows Server 2003

DC

DCBDC

BDC DC

PDC

Active Directory Sites

WAN Link

Site B

Site A

Sites Used To:•Locate Services•Optimize Replication•Define Policies

Sites Used To:•Locate Services•Optimize Replication•Define Policies

Sites and Domains

CONTOSO.COM

Site A

Site B

US.CONTOSO.COM

Global Catalog

• Spans all domains

• Contains object attributes

• Used for searches

• Exists on domain controllers

DNSDomain Naming System locates network services and resources.Domain Naming System locates network services and resources.

DNS Request Process

•Requested Service•Site Information

•IP Addresses•SVR Records

DCDCDNS ServerDNS Server

CacheCache

DNS Systems and Requirements

BIND 8.1.2

Secure Update

SRV Records*

Windows NT

Windows 2000

Windows Server 2003

AD Integration

Dynamic Update*

* Required for Active Directory

Replication Scope

Across Forest:•Schema NC•Configuration NC

Across Domain•Domain NC

More Replication Scope

Intersite(Compressed)

Intrasite(Token Ring)

Operations Masters

• Performs operation exclusively

• Within designated scope

• Defaults to first domain controller

Operations Master Roles

Domain RolesForest Roles

PDC EmulatorPDC EmulatorSchema MasterSchema Master

Domain MasterDomain Master

RID MasterRID Master

InfrastructureInfrastructure