WINDOWS 2000 ACTIVE DIRECTORY
CONTENTS PART I: GETTING STARTED CHAPTER 1 INTRODUCTION TO ACTIVE DIRECTORY INTRODUCTION INTRODUCTION TO DIRECTORY SERVICES DIRECTORY ENABLED NETWORKS HISTORY OF THE DIRECTORY SERVICE WHAT IS IN A DIRECTORY SERVICE? THE DIRECTORY DATABASE DIRECTORY SERVICE DOMINO EFFECT INTRODUCTION TO ACTIVE DIRECTORY NET PROTOCOL INTEROPERABILITY SINGLE POINT OF ADMINISTRATION ACTIVE DIRECTORY ARCHITECTURE NAMESPACE FORESTS SCOPE DISTINGUISHED NAME USER PRINCIPLE NAME PARTITIONS GLOBAL CATALOG OBJECT CONTAINER DOMAINS DOMAIN TREES VIEWING TRUST RELATIONSHIPS VIEWING THE NAMESPACE SITES ARCHITECTURE DATA MODEL SCHEMA SECURITY MODEL ADMINISTRATION MODEL SUMMARY SOLUTIONS FAST TRACK FREQUENTLY ASKED QUESTIONS CHAPTER 2 ASSESSING YOUR ENVIRONMENT DEFINING YOUR BUSINESS OBJECTIVES MATCHING BUSINESS OBJECTIVES TO TECHNOLOGY BUSINESS OBJECTIVES THAT ACTIVE DIRECTORY WILL MEET COSTS AND BENEFITS PROJECT COSTS BENEFITS ASSESSING YOUR CURRENT ENVIRONMENT NETWORK INFRASTRUCTURE SERVERS DESKTOPS PERIPHERALS AND MOBILE DEVICES LOCATIONS GATHERING INFORMATION FOR YOUR ACTIVE DIRECTORY PLANNING AND DESIGN OBJECTS AND OUS ORGANIZATIONAL AND NETWORK INFRASTRUCTURES THAT IMPACT ACTIVE DIRECTORY PLANNING AND DESIGN PLANNING FOR YOUR IMPLEMENTATION PROJECT TIMELINE SETTING MILESTONES SETTING A BUDGET COMMUNICATIONS GAP ANALYSIS OF BUSINESS OBJECTIVES AND CURRENT ENVIRONMENT RISK ANALYSIS CHAPTER 3 ACTIVE DIRECTORY FOR WINDOWS 2000 JUMPSTART TUTORIAL WHAT ACTIVE DIRECTORY IS, AND WHY YOU NEED TO KNOW ABOUT IT DEMOTE A DC POLICY-BASED ADMINISTRATION DECENTRALIZED ADMINISTRATION IMPROVED SECURITY IMPORTANT FEATURES SCALABILITY OF FORESTS, DOMAINS, ORGANIZATIONAL UNITS, AND SITES EXTENSIBILITY OF THE SCHEMA MULTI-MASTER DOMAIN CONTROLLERS INTELLIMIRROR KERBEROS TRUSTS USE OF STANDARD PROTOCOLS ACCESSIBILITY OF RESOURCES INDUSTRIES AND COMPANIES AFFECTED BY WINDOWS TECHNOLOGY VENDORS AND PARTNERS COMPETITORS CUSTOMERS AND… MICROSOFT ITSELF ADVANTAGES AND DISADVANTAGES OF ACTIVE DIRECTORY ADVANTAGES WITH ACTIVE DIRECTORY PROBLEMS WITH ACTIVE DIRECTORY PART II: DESIGNING THE ACTIVE DIRECTORY CHAPTER 4 DNS AND NAMING STRATEGIES WHAT IS DNS? HOW DNS ZONES FUNCTION ACTIVE DIRECTORY’S INTEGRATION WITH DNS HOW ACTIVE DIRECTORY USES DNS DYNAMIC DNS PLANNING ACTIVE DIRECTORY AND DNS FOREST PLAN DOMAIN AND DNS STRATEGY DNS SIZING DOMAIN DIVISIONS REQUIREMENTS ROOT DOMAIN ABOUT DOMAINS DNS SERVERS ORGANIZATIONAL UNITS SITE TOPOLOGY NAMING CONVENTIONS DEFINING DNS NAMES DEFINING DNS ZONES NAMING CONVENTIONS FOR ACTIVE DIRECTORY MIGRATING AN EXISTING EXCHANGE SERVER DESIGN MIGRATING AN EXISTING NOVELL DIRECTORY SERVICES DESIGN CHAPTER 5 DESIGNING THE BASIC STRUCTURE CASE STUDIES ABOUT TEKKIETECH COM ABOUT INSURANCE, INC DESIGNING A FOREST TEKKIETECH COM INSURANCE, INC DESIGNING A DOMAIN TREE DESIGNING AN ORGANIZATIONAL UNIT STRUCTURE DESIGNING A SITE TOPOLOGY USING OUS FOR DELEGATING ADMINISTRATION OU OBJECTS IN ACTIVE DIRECTORY GROUP POLICY AND OUS DELEGATING ADMINISTRATION CHAPTER 6 DESIGNING A SITE STRUCTURE THE FUNCTION OF SITES IN ACTIVE DIRECTORY DEFAULT-FIRST-SITE-NAME REPLICATED ACTIVE DIRECTORY COMPONENTS DOMAIN PARTITIONS SCHEMA AND CONFIGURATION CONTAINERS SITE REPLICATION COMPONENTS SITE OBJECTS KNOWLEDGE CONSISTENCY CHECKER CONNECTION OBJECTS SITE LINKS SITE LINK BRIDGES REPLICATION PROTOCOLS REPLICATION IN ACTIVE DIRECTORY REPLICATION TOPOLOGY PLANNING A SITE STRUCTURE PLACING DOMAIN CONTROLLERS WHERE TO PLACE GLOBAL CATALOG SERVERS CHAPTER 7 DESIGNING: A CASE STUDY CASE STUDY OVERVIEW ASSESSING A CORPORATE NETWORK DETERMINING THE BUSINESS OBJECTIVES KINGS VINEYARD’S BUSINESS OBJECTIVES CURRENT ENVIRONMENT DESKTOPS AND END-USERS DESIGNING THE FORESTS DETERMINING DOMAIN AND TREE STRUCTURE PLANNING THE OU STRUCTURE ADMINISTRATIVE STRUCTURE HIDDEN OUS GROUP POLICIES INHERITANCE ESTABLISHING THE INITIAL SITES PLACING SERVERS DOMAIN CONTROLLERS GLOBAL CATALOG SERVERS PART III: INSTALLING ACTIVE DIRECTORY OR NT 4 TO ACTIVE DIRECTORY SERVER MIGRATION STRATEGIES PRIMARY DOMAIN CONTROLLERS CHANGES REQUIRED WHEN UPGRADING A DOMAIN CONTROLLER BACKUP DOMAIN CONTROLLERS MEMBER SERVERS PROMOTING MEMBER SERVERS WITH DCPROMO UPGRADING WITH THE WINDOWS 2000 SETUP WIZARD INSTALLING ACTIVE DIRECTORY SERVICES INTERIM MIXED DOMAINS MIXED MODE NATIVE MODE MIGRATING COMPONENTS USING ORGANIZATIONAL UNITS TO CREATE A HIERARCHICAL STRUCTURE USER ACCOUNTS CLONEPRINCIPAL ACTIVE DIRECTORY MIGRATION TOOL MACHINE ACCOUNTS NESTED GROUPS GLOBAL GROUPS DELEGATING ADMINISTRATIVE AUTHORITY INSERT INTO THE REPLICATION TOPOLOGY UPGRADING CLIENTS TO WINDOWS PROFESSIONAL CHAPTER 9 IMPLEMENTING A DOMAIN INSTALLING DNS VERIFYING COMPATIBILITY WINDOWS 2000 DNS INSTALLATION DELEGATING A SUBDOMAIN CONFIGURING DNS ABOUT ZONES SERVICE RESOURCE RECORD REGISTRATION INSTALLING DOMAINS IN ACTIVE DIRECTORY ACTIVE DIRECTORY SIZER TOOL THE FIRST DOMAIN CONTROLLER ACTIVE DIRECTORY WIZARD INTEGRATING DNS INTO ACTIVE DIRECTORY ACTIVE DIRECTORY INTEGRATED ZONES MANAGING OBJECTS IN ACTIVE DIRECTORY CREATING ORGANIZATIONAL UNITS MANAGING USER ACCOUNTS MANAGING GROUPS NESTING GROUPS MANAGING COMPUTERS COMMON OBJECT MANAGEMENT ROLE-BASED ADMINISTRATION MICROSOFT MANAGEMENT CONSOLE ADMINISTRATIVE ROLES CHAPTER 10 BUILDING TREES AND FORESTS UNDERSTANDING THE CHARACTERISTICS OF AN ACTIVE DIRECTORY FOREST COMMON SCHEMA COMMON CONFIGURATION CONTIGUOUS NAMESPACE TRUST RELATIONSHIPS TRANSITIVE BIDIRECTIONAL TRUST TRUSTS THAT CROSS FORESTS TRUST UTILITIES IMPLEMENTING THE FOREST STRUCTURE THE DOMAIN TREE STRUCTURE ADDING A CHILD DOMAIN RIGHT-SIZING THE ACTIVE DIRECTORY STORAGE SPACE MANAGING THE FOREST CHAPTER 11 IMPLEMENTING SITES CREATING SITE COMPONENTS CREATING SITES CREATING CONNECTION OBJECTS CREATING IP SUBNETS CREATING SITE LINKS CREATING SITE LINK BRIDGES THE KNOWLEDGE CONSISTENCY CHECKER IMPLEMENTING A SITE STRUCTURE IN ACTIVE DIRECTORY REPLICATION UTILITIES REPLICATION MONITOR REPLICATION ADMINISTRATOR DSASTAT UNDERSTANDING TIME SYNCHRONIZATION CHAPTER 12 IMPLEMENTING ACTIVE DIRECTORY: A CASE STUDY DNS AND DOMAIN PLAN SITE TOPOLOGY PLAN IMPLEMENTING DNS IMPLEMENTING THE FIRST DOMAIN CONTROLLER MIGRATING UPGRADING ADDING NEW DOMAINS CREATING AN EXPLICIT TRUST ESTABLISHING THE OUS MOVING UPGRADED USERS CREATING NEW USERS ADDING COMPUTER OBJECTS SETTING UP SITES PART IV: MIGRATING ACTIVE DIRECTORY CHAPTER 13 INTELLIMIRROR WHAT ARE GROUP POLICIES? HOW GROUP POLICIES ARE APPLIED REFRESH INTERVAL BLOCKING AND ENFORCING GROUP POLICY INFORMATION STORAGE AND SETTINGS ADMINISTRATIVE TEMPLATES REGISTRY POL GROUP POLICY SETTINGS COMPUTER CONFIGURATION USER CONFIGURATION DESIGNING A GROUP POLICY STRATEGY GROUP POLICY IN WAN ENVIRONMENTS IMPLEMENTING A GROUP POLICY STRATEGY CONFIGURING GROUP POLICY OBJECTS LINK A GROUP POLICY OBJECT TO A CONTAINER ADDING SCRIPTS DEPLOYING APPLICATIONS WITH GROUP POLICIES FOLDER REDIRECTION KEEPING GROUPS FROM GROWING OVER TIME TROUBLESHOOTING GROUP POLICIES POLICY THAT DOES NOT EXECUTE A POLICY THAT EXECUTES IN THE WRONG WAY LOGGING ON TAKES A LONG TIME UNDERSTANDING SECURITY GROUPS DOMAIN SECURITY CONSOLE ACCOUNT POLICIES LOCAL POLICIES EVENT LOG RESTRICTED GROUPS SYSTEM SERVICES REGISTRY FILE SYSTEM PUBLIC KEY POLICIES IP SECURITY POLICIES ON ACTIVE DIRECTORY SECURITY TEMPLATES OBJECT PROTECTION ACCESS CONTROL LISTS ACCESS CONTROL ENTRIES SECURITY DESCRIPTOR SECURITY IDENTIFIER KERBEROS PUBLIC KEY INFRASTRUCTURE SMART CARDS IP SECURITY SECONDARY LOGONS CHAPTER 14 PUBLISHING PUBLISHING RESOURCES SHARING FOLDERS PUBLISHING A FOLDER IN ACTIVE DIRECTORY BROWSING AND QUERYING FOR SHARED FOLDERS OVERVIEW OF DFS AND EFS DFS EFS PUBLISHING A PRINTER IN ACTIVE DIRECTORY INTERFACING WITH ACTIVE DIRECTORY ADSI RPC WINDOWS SOCKETS DCOM EXCHANGE SERVER 5 5 ACTIVE DIRECTORY CONNECTOR EXCHANGE SERVER CHAPTER 15 MODIFYING THE SCHEMA ABOUT OBJECTS AND ATTRIBUTES PLANNING SCHEMA MODIFICATIONS WHY MODIFY THE SCHEMA? WHEN TO MODIFY THE SCHEMA WHO SHOULD MODIFY THE SCHEMA? SCHEMA MANAGEMENT CONSOLE FLEXIBLE SINGLE MASTER OPERATION HOW TO MODIFY THE SCHEMA CLASS ATTRIBUTES SYSTEM CHECKS AFTER SCHEMA MODIFICATION SCHEMA CONTAINER THE CACHE SCHEMA UTILITIES QUERYING ACTIVE DIRECTORY DISPLAY SPECIFIERS CHAPTER 16 USING ACTIVE DIRECTORY: A CASE STUDY PLANNING THE GROUP POLICY SOLUTION CREATING NEW OUS DECIDING GROUP POLICY APPLICATION DETERMINING WHAT GROUP POLICIES ARE NEEDED IMPLEMENTING THE GROUP POLICY COMPUTER NODE USER NODE CREATING THE GROUP POLICY FOR AN OU CREATING LOGON/LOGOFF SCRIPTS PART V: INTEGRATING WITH ACTIVE DIRECTORY CHAPTER 17 PLUGGING INTO ACTIVE DIRECTORY MICROSOFT’S METADIRECTORY MMS ARCHITECTURE OBTAINING MMS MICROSOFT’S ACTIVE DIRECTORY DEPLOYMENT TOOLS MISSION CRITICAL’S ACTIVE DIRECTORY MIGRATION TOOL DEPLOYING ACTIVE DIRECTORY-ENABLED CLIENTS BEST PRACTICES DEPLOYING DSCLIENT QUEST’S FASTLANE TECHNOLOGIES FASTLANE REPORTER FASTLANE ADMINISTRATOR FASTLANE MIGRATOR FASTLANE DEVELOPER FASTLANE CONSOLIDATOR CISCO CNS/AD WHAT CNS/AD DOES OTHER APPLICATIONS SAP MOBILE INFORMATION SERVER SQL SERVER CHAPTER 18 DISASTER RECOVERY FOR ACTIVE DIRECTORY MODELING SITES WITH DISASTER RECOVERY IN MIND AVOIDING DISASTERS UNINTERRUPTIBLE POWER SOURCE RAID CLUSTERING FILE REPLICATION SERVICE DISTRIBUTED FILE SERVICE THE ACTIVE DIRECTORY DATABASE FILE STRUCTURE BACKUP CREATING AN EMERGENCY REPAIR DISK RECOVERING A FAILED DOMAIN CONTROLLER NON-AUTHORITATIVE RESTORE VERSUS AUTHORITATIVE RESTORE AUTHORITATIVE RESTORE OF DELETED OBJECTS STARTUP OPTIONS THE RECOVERY CONSOLE