(ITI310) SESSIONS 9-10-11-12: Active Directory By Eng. BASSEM ALSAID.

Slides:



Advertisements
Similar presentations
By Rashid Khan Lesson 5-Directory Assistance: Administration Using Active Directory Users and Computers.
Advertisements

How to Succeed with Active Directory Robert Williams, PhD CEO Secure Logistix Corporation.
Chapter 6 Introducing Active Directory
Chapter 4 Chapter 4: Planning the Active Directory and Security.
1 Active Directory (Week 8, Monday 2/26/2007) © Abdou Illia, Spring 2007.
Introduction to Active Directory
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 1: Introduction to Windows Server 2003.
Administering Active Directory
By Rashid Khan Lesson 4-Preparing to Serve: Understanding Microsoft Networking.
Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.
Chapter 4 Introduction to Active Directory and Account Management
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 1: Introduction to Windows Server 2003.
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
By Karan Oberoi.  A directory service (DS) is a software application- or a set of applications - that stores and organizes information about a computer.
Understanding Active Directory
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 1: Introduction to Windows Server 2003.
Module 1: Introduction to Active Directory
Hands-On Microsoft Windows Server 2008
Hands-On Microsoft Windows Server 2008
ADVANCED MICROSOFT ACTIVE DIRECTORY CONCEPTS
Overview of Active Directory Domain Services Lesson 1.
Overview of Active Directory Domain Services Lesson 1.
Nassau Community College
Directory services Unit objectives
11 REVIEWING MICROSOFT ACTIVE DIRECTORY CONCEPTS Chapter 1.
Chapter 4 Introduction to Active Directory and Account Management
Session 6 Windows Platform Dina Alkhoudari. Learning Objectives What is Active Directory Logical components of active directory Physical components of.
Windows Server 2008 Chapter 4 Last Update
MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory Chapter 3: Introducing Active Directory.
(ITI310) By Eng. BASSEM ALSAID SESSIONS
Working with domains and Active Directory
KAPLAN SCHOOL OF INFORMATION SYSTEMS AND TECHNOLOGY Welcome to Unit 4 IT278 Network Administration Course Name – IT278 Network Administration Instructor.
SERVER I SLIDE: 6. SERVER I Topics: Objective 4.3: Deploy and configure the DNS service Objective 5.1: Install domain controllers.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 1: Introduction to Windows Server 2003.
September 18, 2002 Windows 2000 Server Active Directory By Jerry Haggard.
Module 7 Active Directory and Account Management.
Session 7 Windows Platform Eng. Dina Alkhoudari. Learning Objectives Active Directory review Managing users and groups Single Master Operations Delegation.
 Identify Active Directory functions and Benefits.  Identify the major components that make up an Active Directory structure.  Identify how DNS relates.
Page 1 Active Directory and DNS Lecture 2 Hassan Shuja 09/14/2004.
Hands-On Microsoft Windows Server 2008 Chapter 4-Part 1 Introduction to Active Directory and Account Manager.
Active Directory Infrastructure Microsoft Windows 2003 Active Directory Infrastructure MCSE Exam
Introduction to Active Directory in Windows 2000/2003.
Installing a Domain Controller
OVERVIEW OF ACTIVE DIRECTORY
Introduction to Active Directory
1 Active Directory Service in Windows 2000 Li Yang SID: November 2000.
Module 1: Introduction to Active Directory
Logical and Physical Network Design 1. Active Directory Objects Objects Represent Network Resources (Users,Groups,Computers,Printers) Attributes Store.
Hussain Ali Department of Computer Engineering KFUPM, Dhahran, Saudi Arabia Active Directory.
Module 8: Planning for Windows Server 2008 Active Directory Services.
CEG 2400 Fall 2012 Directory Services Active Directory Tree Domain.
Windows 2003 Architecture, Active Directory & DNS Lecture # 3 Hassan Shuja 02/14/2006.
1 Introduction to Active Directory Directory Services Uniquely identify users and resources on a network Provide a single point of network management.
MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition (70-294) Chapter 1: Overview of the Active.
Active Directory Domain Services (AD DS). Identity and Access (IDA) – An IDA infrastructure should: Store information about users, groups, computers and.
Planning an Active Directory Deployment Lesson 1.
Overview of Active Directory Domain Services Lesson 1.
Overview of Active Directory Domain Services
Implementing Active Directory Domain Services
Overview of Active Directory Domain Services
Active Directory Administration
(ITI310) SESSIONS 6-7-8: Active Directory.
Objectives Differentiate between the different editions of Windows Server 2003 Explain Windows Server 2003 network models and server roles Identify concepts.
Network Administration
Chapter 4: Planning the Active Directory and Security
Active Directory (November 7, 2016) © Abdou Illia, Fall 2016.
Active Directory Overview
Windows Active Directory Environment
Presentation transcript:

(ITI310) SESSIONS 9-10-11-12: Active Directory By Eng. BASSEM ALSAID

“ACTIVE DIRECTORY” Session 9: Introducing Active Directory Domain Services (AD DS) Describe the role of a directory service and the physical and logical Active Directory structure. Name Space, Catalogue, Global Unique Identifier (GUID), Replication. Read-Only Domain Controller (RODC) Installing Active Directory Domain Services. How to manage user accounts, computer accounts. Session 10: Introducing Group Policies The Computer Configuration Node. The User Configuration Node. How Group Policies Are Applied. Group Policy Management and Monitoring.

“ACTIVE DIRECTORY” Session 11: Configuring DNS for Active Directory Describe the structure of Domain Name System. Install and use the DNS Server role in Windows Server 2008. Configure DNS zones. Configure advanced DNS server settings. Monitor and troubleshoot DNS. Session 12: Active Directory Certificate Services Describe the components of a PKI system. Deploy the Active Directory Certificate Services role. Configure a certification authority. Maintain a PKI.

SESSION 9 “Introducing Active Directory Domain Services“ Session Objectives: Describe the role of a directory service and the physical and logical Active Directory structure. Name Space, Catalogue, Global Unique Identifier (GUID), Replication. Read-Only Domain Controller (RODC) Installing Active Directory Domain Services. How to manage user accounts, computer accounts.

“Active Directory - Definition” Active Directory Domain Services (AD DS) stores information about users, computers and other devices on the network. AD DS helps administrators securely manage these information and facilitate resource sharing and collaboration between users. AD DS is also required for directory-enabled applications such as Microsoft Exchange Server and for other Windows Server technologies such as Group Policy. From a technical point of view, a directory service is a distributed database that allows us to store information about network resources in order to facilitate their implementation and management.

“Active Directory – Logical Structure” There are five organizing components of Active Directory: Object/Leaf : user accounts, groups, computer accounts, printers, shared folders, applications, servers, and domain controllers. Organizational Unit (OU)/Container: An object containing other objects. Domain: A domain can consist of one or more organizational unit. A domain shares a single administrator group (Domain Administrators security group) and same set of objects. Trees: All domains hierarchically connected constitute a Tree of domains. The domain at the top of the hierarchy is called the Root and the domains below are Sub-Domains. Forests: A forest can consist of one or more trees or domains and those domains are connected through transitive trust. Using a geographical analogy: an OU represents a city, a domain is the state, a tree is the country, and a forest is the continent.

Objects & Fields Active Directory Objects Printers Printer1 Attributes First Name Last Name Logon Name Printer Name Printer Location Active Directory Printers Printer1 Printer2 Suzan Fine Users Don Hall Attribute Value Objects Printer3

AD Organizational Units

AD domain and OUs

TREE Tree Root Domain svuonline.org tech.svuonline.org Parent Domain Tree Root Domain svuonline.org Child Domain 2 Child Domain 1 tech.svuonline.org admin.svuonline.org New Sub-Domain

“Active Directory – Physical Structure” Controllers and Sites are the only basic elements constituting the physical structure of a network configuration. Domain Controller (DC): a computer running Windows Server 2008 with the Active Directory Domain Services role installed. Site: each physical location with a domain controller operating in a common domain connected by a WAN constitutes a site. Link: Links are the transport mechanism for Active Directory replication between sites. Replication interval and costs can be configured on Site Links.

DC, SITE, LINK DAMASCUS ALEPPO HOMS LATAKIA Site IP subnet

“Domain Controller” Active Directory domain can consist of many domain controllers, each domain controller can service only one domain. Each domain controller contains a full replica of the objects that make up the domain and is responsible for the following functions: Storing a copy of the domain data and replicating changes to that data to all other domain controllers throughout the domain. Providing data search and retrieval functions for users attempting to locate objects in the directory. Providing authentication and authorization services for users who log on to the domain and attempt to access network resources. Kerberos is a network authentication protocol, uses a strong cryptography so a client can prove its identity to a server.

Name Space, Catalogue, Global Unique Identifier (GUID) Name Space: A namespace is an area designated by specific limits in which the logical name assigned to a computer can be solved. The primary function of the namespace is to organize the descriptions of resources in order to enable users to locate these resources from their characteristics or properties. Catalogue: The global catalog contains a partial replica of every Windows 2008 domains in the directory: it is built automatically by the replication of Active Directory. GUID: Each object of a network must be identified by a unique property: it is why Active Directory associates a globally unique identifier (GUID) to each object. RODC: stores read-only copy of Active Directory database, except passwords.

Replication Domain Controller Domain Replication User1 User2

Conclusion

Installing Active Directory Domain Services Practice 1: Installing Active Directory Domain Services To start the DCPROMO wizard, run: dcpromo.exe

“What’s Inside Active Directory?” Active Directory’s contents and the functions it performs in your network are defined by the schema, objects, and Group Policy Objects (GPOs, discussed later in this chapter in “Introducing Group Policy”). The Active Directory Schema: The schema defines the type, organization, and structure of data stored in the Active Directory database and is shared by all domains in an Active Directory forest. The information the schema defines is divided into two categories: schema classes and schema attributes.

Schema classes, schema attributes, and Active Directory objects

Active Directory Database Directory Partitions Schema Contains definitions and rules for creating and manipulating all objects and attributes Forest Configuration Contains information about Active Directory structure svuonline.org Holds information about all domain-specific objects created in Active Directory Domain Active Directory Database

Practice 2: Locating Objects with Active Directory Users and Computers.

NEXT SESSION Date: C9 : Wednesday 02-Jul-2014 15:00 C10 : Thirsday 03-Jul-2014 15:00 Title: “ACTIVE DIRECTORY – PART 2” THANKS