Active Directory

• AD is a data base that is
• Network accesable
• Network created and
• Network maintained

Security Identifier

Relative Identifier

Globally unique identifier, (both SID and RID)

• AD users and computers
• AD sites and services
• AD domain and trusts
• AD group policy

• netdom - Enables administrators to manage Active Directory domains and trust relationships from the command prompt.
• ntdsutil - perform database maintenance of AD DS, manage and control single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled

DNS

Units for organizing SPO's

A local domain name

any TLD's (.com .net .org)

.local

A group of domain that you have living in a security realm

A group of domains that have a continues name space

dcpromo

Forest Functional Level - The minimum OS level to become a DC in a given forest

Domain Functional Level - The minimum OS level required for the server to become a DC in a given domain

A domain controller that cannot make any changes to the domain

• PDC Emulator
• Infrastructure Master
• RID Master
• Domain Naming Master
• Schema Master

• (Domain Level Role)
• Most used and important role
• Authortave time source for the domain
• Processes password changes
• Final Authority on passwords
• PDC replicates out of the forest

• (Domain Level Role)
• Contains a complete list of all domain objects and all of their properties
• Responsible for cross domain refrences
• Should not be placed in a Global Catalog Server unless all DCs are GCS's

• (Domain Level Role)
• Creates and owns the master RID pool
• When the DC runs out of assigned RIDS they query the RID master for additional RIDS

• (Forest Level Role)
• Responsible for maintaining the domain names in an AD forest
• Prevents the addition / creation of new domains with identical names to existing domains

• (Forest Level Role)
• Maintains the AD forest schema, determining what objects and data can be created and / or specified in a forest

netdom query fsmo

A mapping of physical locations to subnets

In charge of replication between AD servers

A varied to for how often replication occurs

• replmon
• repadmin

Contains most commonly used items for AD, Incomplete list, used for quick reference

Resources from one domain, having access to another domain

• Direction
• Mid direction (bob.com -----> tom.com) one way
• Bi direction ( bob.com <------> tom.com) both ways

• Non transitive
• Bob.com <--->tom.com<--->ted.com
• Can only talk to boxes that they are pointing to

• transitive
• bob.com<--t-->tom.com<--->ted.com
• Bob can only talk tom, but ted can talk to all