You are previewing Special Edition Using Microsoft Active Directory.
O'Reilly logo
Special Edition Using Microsoft Active Directory

Book Description

Special Edition Using Microsoft Active Directory provides you with complete, in-depth coverage of the newest directory service from Microsoft. Authors Fullerton and Hudson use their previous training and administration experiences to explain how to design, implement, and troubleshoot using Active Directory. Topics covered include Domain Name Services and Active Directory, Logical and Physical Active Directory, replication, authentication, group policies, administering and managing, backup, restore, maintenance, and Active Directory Services Interface.

Table of Contents

  1. Copyright
  2. Foreword
  3. About the Authors
  4. Sean Fullerton's Acknowledgments
  5. James Hudson's Acknowledgments
  6. Introduction to Active Directory
    1. Windows 2000 Active Directory
    2. History of Directory Services
    3. Why a Directory?
    4. What Makes a Directory?
    5. Active Directory in a Nutshell
    6. Summary
  7. Installing Active Directory
    1. And Away We Go! Or Not
    2. Before You Begin
    3. Decisions, Decisions
    4. Promoting a Server to Domain Controller
    5. Creating a New Tree
    6. Creating a Child Domain
    7. Creating Additional Domain Controllers
    8. Automating dcpromo
    9. After dcpromo
    10. Removing a Domain Controller
    11. Summary
    12. Troubleshooting
  8. Domain Name Services
    1. The Need for DNS
    2. The Function of DNS
    3. Examples of Name Resolution
    4. Using the MMC
    5. Summary
    6. Troubleshooting
  9. Installing and Configuring DNS
    1. Installing DNS
    2. Configuring DNS
    3. Summary
    4. Troubleshooting
  10. DNS Architecture
    1. Using the DNS MMC Snap-In
    2. Anatomy of a DNS Lookup
    3. Summary
    4. Troubleshooting
  11. Integrating BIND DNS with Active Directory
    1. BIND and the Active Directory
    2. Why Use BIND?
    3. BIND Configuration Files
    4. Zone Files After a Dynamic Update
    5. Delegating a Zone
    6. Summary
    7. Troubleshooting
  12. DNS and AD Namespaces
    1. Namespaces
    2. External Namespaces
    3. Internal Namespaces
    4. Choosing an AD Namespace
    5. Finding a Domain Controller
    6. Summary
    7. Troubleshooting
  13. Windows 2000 Name Resolution Services
    1. Name Resolution in Windows 2000
    2. NetBIOS Node Types
    3. The lmhosts File
    4. The hosts File
    5. WINS
    6. Summary
    7. Troubleshooting
  14. Dynamic and Active Directory Integrated DNS
    1. Dynamic DNS
    2. AD Integrated DNS
    3. DNS Record Aging and Scavenging
    4. Summary
    5. Troubleshooting
  15. Troubleshooting DNS
    1. DNS Troubleshooting Tools
    2. General IP Troubleshooting Tools
    3. nslookup.exe
    4. Summary
    5. Troubleshooting
  16. Domains, Trees, and Forests
    1. Introduction
    2. Domains
    3. Domain Modes
    4. Trees
    5. Forests
    6. Summary
    7. Troubleshooting
  17. Operations Masters
    1. Introduction
    2. Forest-Wide Roles
    3. Domain Roles
    4. Transferring and Seizing Roles
    5. FSMO Placement
    6. Summary
    7. Troubleshooting
  18. Active Directory Schema
    1. Introduction
    2. Schema Location
    3. Schema Components
    4. Modifying the Schema
    5. Schema Replication
    6. Deactivating Classes and Attributes
    7. Summary
    8. Troubleshooting
  19. Active Directory Sites
    1. Introduction to Sites
    2. Architecture
    3. Requirements
    4. Creating Sites
    5. Summary
  20. Site Link Objects and Connection Objects
    1. Introduction
    2. Site Link Objects
    3. Site Link Bridges
    4. Connection Objects
    5. Summary
  21. Intra-Site Replication
    1. Introduction to Replication
    2. Deleted Objects
    3. Topology Generation
    4. The Knowledge Consistency Checker
    5. The Intra-Site Replication Process
    6. Urgent Replication
    7. Intra-Site Replication Management Tasks
  22. Inter-Site Replication
    1. Introduction
    2. Topology
    3. The Replication Process
    4. Inter-Site Replication Management Tasks
  23. Authentication
    1. Enterprise Security
    2. Kerberos
    3. Kerberos Roles in Windows 2000
    4. Kerberos Tools
    5. Authenticating to the Domain
    6. Authenticating to Other Domains in the Tree
    7. Automatic Kerberos Transitive Trusts
    8. Managing Trusts
    9. How Transitive Trusts Work
    10. Explicit Trusts
    11. Shortcut Trusts
    12. Kerberos Policy
    13. Summary
    14. Troubleshooting
  24. Authorization
    1. Authorizing Access to Active Directory
    2. Rights Versus Permissions
    3. Security Components of the Active Directory
    4. Groups
    5. Authorization Step by Step
    6. Modifying Permissions
    7. Troubleshooting Permissions
    8. Summary
    9. Troubleshooting
  25. Group Policy
    1. Introduction to Group Policy
    2. A Simple Group Policy Example
    3. Why Group Policy?
    4. Types of Group Policy
    5. Applying Group Policy
    6. Group Policy and Security Groups
    7. Summary
    8. Troubleshooting
  26. Group Policy Sections
    1. Overview of Group Policy Sections
    2. Computer Configuration
    3. User Configuration
    4. Summary
    5. Troubleshooting
  27. Managing Group Policy
    1. Overview of Group Policy Administration
    2. Features of Group Policy
    3. Logon Scripts
    4. Installing Software Through Group Policy
    5. Group Policy Security and Inheritance
    6. Summary
    7. Troubleshooting
  28. Group Policy Architecture
    1. Overview of Group Policy Architecture
    2. Group Policy Storage
    3. Group Policy Replication
    4. Group Policy Processing
    5. Problems with Group Policy
    6. Summary
    7. Troubleshooting
  29. User, Group, and Contact Objects
    1. User Objects
    2. Groups
    3. Contacts
    4. Summary
    5. Troubleshooting
  30. Printer, Computer, and Shared Folder Objects
    1. Printer Objects
    2. Computer Objects
    3. Summary
    4. Troubleshooting
  31. Containers and Organizational Units
    1. Organizational Units
    2. Containers
    3. Summary
    4. Troubleshooting
  32. Active Directory Database Optimization
    1. Introduction to the Active Directory Database
    2. Database Files
    3. Database Maintenance
    4. Summary
    5. Troubleshooting
  33. Backup and Restore
    1. Active Directory Backup
    2. Microsoft Windows Backup Tool
    3. Restoring Active Directory
    4. Additional Concepts
    5. Summary
    6. Troubleshooting
  34. Migrating from NT to Active Directory
    1. Upgrading and Migrating
    2. Upgrade in Place
    3. Important Considerations When Upgrading NT Domains
    4. Consolidation by Moving Objects
    5. FastLane
    6. Summary
    7. Troubleshooting
  35. Scripting the Active Directory
    1. The Active Directory Services Interface
    2. Windows Script Host
    3. Using ADSI with WSH
    4. iadstools
    5. Summary
    6. Troubleshooting
  36. Conclusion
    1. Active Directory Summary
    2. The Future
    3. Whistler
    4. .NET
    5. 64-Bit Windows
    6. Blackcomb
    7. Where to Go from Hereā€¦
    8. The End
  37. Index