Active Directory CNS 4650 Fall 2004 Rev. 2
Active Directory Introduced with Windows 2000 Server X.500 based Can emulate NT-style network environments
LDAP & Active Directory LDAP v3 compliant Active Directory handles LDAP queries directly
DNS & Active Directory DNS integral part of Active Directory Namespace is derived from the DNS name of organization DNS name can be actual DNS or internal DNS
Active Directory APIs ADSI LDAP C API MAPI SAM API
Active Directory Objects Container Objects Domain Organizational Unit (OU)
Active Directory Objects Leaf Objects Network Management Replication Management Service Management
Active Directory Schema Stored in the directory cn=schema,cn=configuration,dc=mycompany,dc=com Schema extensions can be disabled, but not deleted (Windows 2000 Server only, Windows 2003 Server fixes this issue)
Active Directory DIT Directory tree root to leaf Domain tree tree of contiguous DNS names Forest Collection of one or more non-contiguous Domain trees
Active Directory Naming DNS Names for location of domains and Domain Controllers LDAP Names for directory objects UNC/NetBIOS - Legacy support
Security in Active Directory Authentication Kerberos and NTLM Access Control ACE (Access Control Entry) Group Policies GPO