Introduction to Active Directory in Windows 2000/2003
Overview Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure Methods for Administering a Windows 2000 Network
What Is Active Directory? Directory Service Functionality Organize Manage Control Organize Manage Control Resources Centralized Management Single point of administration Full user access to directory resources by a single logon Single point of administration Full user access to directory resources by a single logon
Active Directory Objects represents network resources, such as users, groups, computers, and printers AttributesAttributes First Name Last Name Logon Name First Name Last Name Logon Name AttributesAttributes Printer Name Printer Location Printer Name Printer Location Active Directory Printers Printer1 Printer2 Suzan Fine Users Don Hall AttributeValueAttributeValue ObjectsObjects Printers Users Printer3
Active Directory Logical Structure includes: Domains Organizational Units Tree and Forest
Domains A Domain is a collection of computers that share a common database A Domain Is a Security Boundary A domain administrator can administer only within the domain, unless explicitly granted administration rights in other domains A Domain Is also a Unit of Replication Domain controllers in a domain participate in replication and contain a complete copy of the directory information for their domain- NT?? Windows 2000 Domain User1 User2 User1 User2 ReplicationReplication
Organizational Units Fire Dept All Users Police Dept Network Administrative Model Use OUs to Group Objects into a Logical Hierarchy That Best Suits your needs for Administration Software Deployment Policies Delegation Fire Dept All Computers Police Dept Network Administrative Model
Tree and Forest Town.Belmont.ms.us (root) Police.town.belmont.ma.us Fire.town.belmont.ma.us Tree
Active Directory Physical Structure Domain Controllers Sites
Domain Controllers Domain Controller Domain ReplicationReplication User1 User2 User1 User2 = A Writeable Copy of the Active Directory Database Domain Controllers: Participate in Active Directory replication You can have more than one
WHY HAVE SEPARATE SITES
Methods for Administering a Windows 2000 Network Using Active Directory for Centralized Management Managing the User Environment
Using Active Directory for Centralized Management Active Directory: Enables a single administrator to centrally manage resources Allows administrators to easily locate information Allows administrators to group objects into OUs Uses Group Policy to specify policy-based settings
Managing the User Environment Use Group Policy to: Control and lock down what users can do Centrally manage software installation, repairs, updates, and removal Configure user data to follow users whether they are online or offline Windows 2000 Enforces Continually Apply Group Policy Once Domain OU1 OU2 OU
Review Introduction to Active Directory Active Directory Logical Structure Active Directory Physical Structure Methods for Administering a Windows 2000 Network