1. Introduction to Active Directory in Windows 2000/2003

2. Overview Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure Methods for Administering a Windows 2000 Network

3. What Is Active Directory? Directory Service Functionality Organize Manage Control Organize Manage Control Resources Centralized Management Single point of administration Full user access to directory resources by a single logon Single point of administration Full user access to directory resources by a single logon

4. Active Directory Objects represents network resources, such as users, groups, computers, and printers AttributesAttributes First Name Last Name Logon Name First Name Last Name Logon Name AttributesAttributes Printer Name Printer Location Printer Name Printer Location Active Directory Printers Printer1 Printer2 Suzan Fine Users Don Hall AttributeValueAttributeValue ObjectsObjects Printers Users Printer3

5. Active Directory Logical Structure includes: Domains Organizational Units Tree and Forest

6. Domains A Domain is a collection of computers that share a common database A Domain Is a Security Boundary A domain administrator can administer only within the domain, unless explicitly granted administration rights in other domains A Domain Is also a Unit of Replication Domain controllers in a domain participate in replication and contain a complete copy of the directory information for their domain- NT?? Windows 2000 Domain User1 User2 User1 User2 ReplicationReplication

7. Organizational Units Fire Dept All Users Police Dept Network Administrative Model Use OUs to Group Objects into a Logical Hierarchy That Best Suits your needs for Administration Software Deployment Policies Delegation Fire Dept All Computers Police Dept Network Administrative Model

8. Tree and Forest Town.Belmont.ms.us (root) Police.town.belmont.ma.us Fire.town.belmont.ma.us Tree

9. Active Directory Physical Structure Domain Controllers Sites

10. Domain Controllers Domain Controller Domain ReplicationReplication User1 User2 User1 User2 = A Writeable Copy of the Active Directory Database Domain Controllers: Participate in Active Directory replication You can have more than one

11. WHY HAVE SEPARATE SITES

12. Methods for Administering a Windows 2000 Network Using Active Directory for Centralized Management Managing the User Environment

13. Using Active Directory for Centralized Management Active Directory: Enables a single administrator to centrally manage resources Allows administrators to easily locate information Allows administrators to group objects into OUs Uses Group Policy to specify policy-based settings

14. Managing the User Environment Use Group Policy to: Control and lock down what users can do Centrally manage software installation, repairs, updates, and removal Configure user data to follow users whether they are online or offline Windows 2000 Enforces Continually Apply Group Policy Once 1 1 2 2 3 3 Domain OU1 OU2 OU3 1 1 2 2 3 3

15. Review Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure Methods for Administering a Windows 2000 Network