Objective
Outline the step-by-step installation and configuration of Active Directory
Active Directory
A directory service for the efficient management of users, resources and privileges that is based on standard protocols
Active Directory
An efficient directory management service for users, resources and privileges that is based on standard Internet protocols
AD Purpose
Keep a central list of users and passwords Provide a set of servers to act as authentication servers known as a Domain Controller Maintain a searchable index of the things in the domain Allow you to create users with different levers of powers
Some AD Uses
Multiple selection of user objects Drag and Drop functionality Efficient search capabilities Saved Queries
Requirements
The computer must be Windows 2k, 2k3 Server, Advanced Server or Datacenter Server. At least one volume on the computer must be formatted with NTFS. DNS must be active on the network prior to AD installation or be installed during AD installation. DNS must support SRV records and be dynamic. The computer must have IP protocol installed and have a static IP address. The Kerberos v5 authentication protocol must be installed. Time and zone information must be correct
Installation Initiation
From start menu run DCPROMO
Installing an DNS
DNS is required for AD to function
Client use DNS to locate ad controllers Servers and client computers register their names and IP addresses with DNS for IP resolution
Accessing AD Tools
From start menu choose administrative tools and then AD tools
Group Policy
Defines the various components of the users desktop environment that an administrator must manage Applies not only to user and client computers but also to member servers, domain controllers, and other 2003 server in scope of management
Joining a Domain
Computers may have to join a domain to be able to access the resources
Auditable Features
Account logon and logon events Object access Account management Directory service access Policy change System events Process tracking Privilege