Revision no.

: PPT/2K403/02

Using the DNS Service and

Active Directory Services
(70-270)
 Revision no.: PPT/2K403/02

Lesson 1: Understanding DNS

2

Domain Name Space

Domain Naming Guidelines

Zones

Name Servers

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Domain Name Space

3

.
.

org.
org. com.
com. edu.
edu. au.
au.

microsoft.com.
sales.microsoft.com.

sales.microsoft.com.

Subdomain
Subdomain Second-Level
Second-Level Domain
Domain Top-Level
Top-Level Domain
Domain Root
Root

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Domain Naming Guidelines

4

Limit the number of domain levels.

Use unique names.
Use simple names.
Avoid lengthy domain names. Domain names can be up to 63
characters, including periods. The total length of an FQDN
cannot exceed 255 characters. Case-sensitive naming is not
supported.
Use standard DNS characters and Unicode characters.
Windows 2000 supports the following standard DNS
characters: A-Z, a-z, 0-9, and the hyphen (-), as defined in RFC
1035.
The DNS Service also supports the Unicode character set.

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Zones
5

Multiple zones in a domain

namespace are used to
distribute administrative tasks
to different groups
A zone must encompass a
contiguous domain namespace
The name-to-IP address
mappings for a zone are stored
in the zone database file.
Each zone is anchored to a
specific domain, referred to as
the zone's root domain.
The zone database file does not
necessarily contain information
for all subdomains of the zone's
root domain, only those
subdomains within the zone.
CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Name Servers
6

Advantages of Multiple Name Servers

They Perform Zone Transfer

They Provide Redundancy

They improve access speed for remote locations

They reduce the load on the name server containing the primary

zone database file

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Lesson 2: Understanding Name Resolution

7

Query Types
The DNS server returns the best answer that it can
Iterative Query
provide without help from other servers

The DNS server returns a complete answer to the

Recursive Query
query, not a pointer to another DNS server

Lookup Types

Forward Lookup Requires name-to-address resolution

Reverse Lookup Requires address-to-name resolution

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Lesson 3: Configuring a DNS Client

8

Configuring DNS Server Addresses

Configuring DNS Query Settings

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Configuring DNS Server Addresses

9

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Configuring DNS Query Settings

10

Append Primary And Connection Specific DNS Suffixes

Append These DNS Suffixes (In Order)

Register This Connections Addresses In DNS

Use This Connections DNS Suffix In DNS Registration

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Practice: Configuring a DNS Client

11

Configuring a DNS Client

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Lesson 4: Understanding Active Directory

12

What Is Active Directory ?

Advantages Of Active Directory

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

What Is Active Directory ?

13

Directory Service
Centralized Management
Functionality

Organize
Organize Single
Single point
point of
of administration
administration
Manage
Manage Resources
Resources Full
Full user
user access
access toto directory
directory
Control
Control resources
resources by
by aa single
single logon
logon

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Advantages Of Active Directory

14

Simplified Administration

Scalability

Open Standards Support

Domain Name System

Support for LDAP and HTTP

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Lesson 5: Understanding Active Directory

Structure and Replication
15

Logical Structure

Physical Structure

Replication within Site

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Logical Structure
16

Objects

Organizational Units

Domains

Trees

Forests

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Objects
17

Active
Active Directory
Directory
Objects
Objects
Printers
Attributes
Attributes
Printer1
Printer
Printer Name
Name
Printer2
Printer
Printer Location
Location
Printers
Printers
Printer3 Attribute
Attribute
Value
Value
Users
Attributes
Attributes
First
First Name
Name Don Hall
Last
Last Name
Name Suzan Fine
Users
Users Logon
Logon Name
Name

Objects Represent Network Resources

Attributes Store Information About an Object

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Organizational Units
18

Network
Network Administrative
Administrative Model
Model Organizational
Organizational Structure
Structure

Sales Vancouver

Users Sales
Computers Repair

Use OUs to Group Objects into a Logical Hierarchy That Best

Suits the Needs of Your Organization
Delegate Administrative Control over the Objects Within an OU
by Assigning Specific Permissions to Users and Groups

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Domains
19

A Domain Is a Security Boundary

A domain administrator can administer only within the
domain, unless explicitly granted administration rights
in other domains
A Domain Is a Unit of Replication
Domain controllers in a domain participate in replication
and contain a complete copy of the directory
information for their domain

r1 Replication
Replication r1
Us e Us e
r2 r2
Us e Us e

Windows
Windows2000
2000
Domain
Domain

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Trees and Forests

20

(root)
Two-Way Transitive
Two-Way Transitive Trust
Trust
msn.cm
msn.cm

Forest
Tree
microsoft.com
microsoft.com uk.msn.com
uk.msn.com us.msn.com
us.msn.com

Tree Two-Way Transitive

Two-Way Transitive Trusts
Trusts
uk.microsoft.com
uk.microsoft.com us.microsoft.com
us.microsoft.com sales.uk.msn.com
sales.uk.msn.com

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Physical Structure
21

Domain Controllers

Sites

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Domain Controllers
22

Domain Controllers:
Participate in Active Directory replication
Perform single master operations roles in a domain

r1 Replication r1
Us e Replication Us e
r2 r2
Us e Us e
Domain Domain
Controller Controller
Domain
Domain

= A Writeable Copy of the Active Directory Database

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Sites
23

Seattle
New York
Chicago

Los Angeles

IP subnet
Site
Sites: IP subnet

Optimize replication traffic

Enable users to log on to a domain controller by
using a reliable, high-speed connection

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Replication within Site

24

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Lesson 6: Understanding Active Directory

Concepts
25

Schema

Global Catalog

Naming Conventions

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Schema
26

Objects
Objects Active Directory Schema Is:
Class
Class Examples
Examples Dynamically Available
Dynamically Updateable
Protected by DACLs

Attribute
Attribute
Examples
Examples
Computers
Computers
Attributes
Attributes of
of Users
Users List
List of
of Attributes
Attributes
Might
Might Contain:
Contain:
accountExpires
accountExpires accountExpires
accountExpires
department
department department
department
Users
Users distinguishedName
distinguishedName distinguishedName
distinguishedName
middleName
middleName directReports
directReports
dNSHostName
dNSHostName
operatingSystem
operatingSystem
repsFrom
repsFrom
repsTo
repsTo
Printers
Printers middleName
middleName

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Global Catalog
27

Subset
Subset of
of the
the
Attributes
Attributes of
of All
All Domain
Objects
Objects
Domain
Domain Domain

Domain Domain
Global
Global Catalog
Catalog

Queries
Queries

Group
Group membership
membership
when
when user
user logs
logs on
on
Global Catalog Server
CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

Naming Conventions
28

LDAP Provides a Way to Communicate with Active

Directory by Specifying Unique Naming Paths for Each
Object in the Directory

LDAP Naming Paths Include:

Distinguished names

CN=Suzan Fine,OU=Sales,DC=contoso,DC=msft
Suzan Fine

Relative distinguished names

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute
 Revision no.: PPT/2K403/02

29

Design & Published by:

CMS Institute, Design & Development Centre, CMS House, Plot No. 91, Street No.7,
MIDC, Marol, Andheri (E), Mumbai 400093, Tel: 91-22-28216511, 28329198
Email: courseware.inst@cmail.cms.co.in
www.cmsinstitute.co.in

CMS INSTITUTE, 2004. All rights reserved. No part of this material may be reproduced, stored or emailed without the prior permission of Programme Director, CMS Institute