Session 6 Windows Platform Dina Alkhoudari

Learning Objectives What is Active Directory Logical components of active directory Physical components of active directory

Active Directory Domain Service Directory service is a distributed database that allows us to store information about network resources in order to facilitate their implementation and management Provides authentication and authorization services in a network and supports object management through Group Policy Kerberos is the protocol used to authenticate identities in an AD.

Active Directory Domain Service Provides information management and sharing services Should be deployed in every network that runs Windows Server 2008 The components of the network are stored in the form of objects Active Directory associates a globally unique identifier (GUID) to each object

Active Directory Domain Service Objects are organized hierarchically according to a scheme AD Domain service allows you to make this information available to users, administrators and application according to the access rights granted to them

Logical Components of an active directory infrastructure Active Directory data store the database which is divided into several partitions, including the schema, configuration, global catalog and the domain naming context that contains the data about objects within a domain OUfolder/container within a domain. OUs can be used to organize set of computers or users and are very useful when implementing different set of polices to a group of users or computers within a domain Domain controllers servers that performs the AD DS role + DNS

Logical Components of an active directory infrastructure Domain - One or more domain controllers are required to create an Active directory domain - All domain controllers replicate the domain’s partition of the data store which contains among other things the identity data for the domain’s users, group and computers - E ach domain represents a safe area where the access to objects is controlled by access control entries (ACE) recorded in the access control Lists (ACL). These security settings cannot be transmitted from one domain to another

Windows Server 2008 Datacenter Edition TreeThe DNS namespace of domains in a forest creates trees, The domain at the top of the hierarchy is called the Root and the domains below are. Sub-Domains SVUONLINE.ORG MAIL.SVUONLINE.ORG

Logical Components of an active directory infrastructure Forest disparate trees can be grouped together to form a Forest All trees in a forest share the same global catalog, the same configuration and the same schema. A forest can consist of one or more trees or domains and those domains are connected through transitive trust ABC Trust

Physical Components of an active directory infrastructure Site connected group of physical subnets which define internal replication boundary Subnetslist of connected networks in the same site Linksthe transport mechanism for Active Directory replication between sites.

Replication in Active Directory All servers of Windows 2008 could be configured as domain controllers (DC) and thus operate as peers. all domain controllers replicate information automatically on all other domain controllers in a multi-master replication mode. For replication; active directory uses Update Sequence Numbers (USN) with 64 bits length.

End of Session