You are previewing Windows® 2000 Active Directory™.
O'Reilly logo
Windows® 2000 Active Directory™

Book Description

Microsoft's Active Directory is a quantum leap forward in the management, interoperability, and security of your enterprise network. More that just an overview of the new features, Windows 2000 Active Directory helps you get the most out of this new tool's potential. Brovick, Hauger, and Wade will help you obviate pitfalls while giving you detailed solutions and pragmatic advice you won't find anywhere else. Perfect for network architects and implementers, this book describes the intricacies of Active Directory while keeping real-world systems and constraints in mind. If you are charged with planning, implementing, or managing Windows 2000, Windows 2000 Active Directory will help you: learn how to define your organization's business and technical requirements, and couple them with Active Directory's functionality; develop a unified directory strategy that will support enterprise applications now and in the future; and comprehend how Active Directory and DNS can coexist peacefully.

Table of Contents

  1. Copyright
  2. About the Authors
  3. About the Technical Reviewers
  4. Acknowledgments
  5. Your Feedback Is Valuable
  6. Introduction
  7. Who This Book Is Written For
  8. What's in This Book
  9. How to Use This Book
  10. Introduction and Overview
    1. How Active Directory Will Affect Your Organization
      1. The Customer—How Active Directory Affects the Users
      2. Administration
      3. Roles
      4. Organizing and Evolving the Active Directory Team
      5. Central Versus Distributed Administration
      6. Small Organizations
      7. Security
      8. Infrastructure
      9. Summary
    2. Introducing Active Directory
      1. Active Directory Components
      2. Summary
    3. Active Directory as a Meta-Directory
      1. Defining a Meta-Directory
      2. Integration with NetWare Directory Services
      3. Integration with X.500
      4. Summary
    4. Defining and Meeting Your Directory Requirements
      1. Defining Requirements
      2. Mapping Requirements to Functionality
      3. Summary
    5. Scoping the Project
      1. Analysis of Current Applications
      2. Administrative Structure
      3. Environmental Considerations
      4. Staff
      5. Summary
  11. Planning
    1. Planning for Coexistence
      1. Methodology and Process
      2. Publisher and Subscriber Directories
      3. Planning for Coexistence with NetWare
      4. Planning for Coexistence with Windows NT 4.0
      5. Planning for Coexistence with UNIX
      6. Summary
    2. Designing the Windows 2000 Domain Structure
      1. Determining the Scope of Active Directory
      2. Assessing Your Environment
      3. Assessing the Administrative Structure
      4. Assessing the Application Structure
      5. Assessing the Organizational Structure
      6. Weighing the Requirements
      7. Defining Active Directory Namespace Candidates
      8. Summary
    3. Designing the DNS Namespace
      1. Windows 2000 DNS: With Active Directory and Without Active Directory
      2. Dynamic Host Configuration Protocol (DHCP) and DNS
      3. DNS Standards that Support Active Directory
      4. Microsoft DNS
      5. Wadeware's DNS Implementation
      6. Wadeware Uses Existing DNS
      7. Summary
    4. Group Policies
      1. Windows NT 4.0 System Policy Capabilities
      2. Group Policies
      3. How to Administer Group Policies
      4. Improving Performance on GPOs
      5. How to Use Group Policy
      6. Migrating Group Policy from Windows NT 4.0
      7. Summary
    5. The Physical Topology: Sites and Replication
      1. Physical versus Logical Structure
      2. Replication
      3. Tools for Monitoring Replication
      4. Sites Explained
      5. Site Functionality Beyond Replication
      6. Network Bandwidth
      7. Site Design
      8. Building Sites
      9. Summary
    6. Active Directory and Scalability
      1. Growing a Domain
      2. Growing a Tree
      3. Growing a Forest
      4. Growing with Your Organization
      5. Growing with Your Applications
      6. Summary
  12. Implementation
    1. Managing the Desktop
      1. Subsets of Enterprise Management
      2. Windows 2000 Management Services
      3. IntelliMirror
      4. Microsoft Installer
      5. System Management Server
      6. Windows 2000 Remote Installation Services
      7. Summary
    2. Developing an Administration Strategy
      1. Typical Windows NT 4.0 Administration Models
      2. Windows 2000 Administrative Groups
      3. Windows 2000 Administrative Strategies
      4. Administrative Models for Windows 2000 Using Active Directory
      5. OU-Specific Administration
      6. Summary
    3. Windows 2000 Networking Services
      1. Windows 2000 Network Services
      2. WINS
      3. QoS
      4. Summary
    4. Developing a Network Security Strategy
      1. Types of Security
      2. Choosing the Right Security
      3. Summary
    5. Developing a Remote Access Solution
      1. Remote Access Strategy
      2. Remote Access Technologies
      3. Access Methods and Standards
      4. Secure RASs
      5. Thin-Client Computing
      6. Remote Access Considerations
      7. Remote Access Policies
      8. Summary
    6. Developing an Implementation Plan
      1. Implementation Plan in the Overall Project
      2. Implementing Active Directory Design
      3. Defining an Implementation Approach
      4. Defining a Set of Implementation Tasks
      5. Additional Implementation Plan Components
      6. Managing the Implementation Project
      7. Summary
    7. Windows 2000 and Exchange Server
      1. Exchange 5.5
      2. Exchange 2000
      3. Summary
    8. Scripting with Active Directory
      1. Benefits of Using Scripts
      2. Creating a Simple Script
      3. Testing the Script
      4. Using LDIFDE Utility
      5. Creating the Scripts
      6. CSVDE Utility
      7. Third-Party Tools
      8. Summary
    9. Designing Active Directory Hierarchies
      1. Definition of a Hierarchy
      2. When to Use OUs
      3. When to Use Multiple Domains in a Single Tree
      4. When to Use Multiple Trees
      5. When to Use Multiple Forests
      6. Summary
    10. Creating a Lab
      1. Building a Lab Team
      2. Developing a Lab Strategy and Methodology
      3. Creating a Test Lab Environment
      4. Testing Hardware
      5. Testing Software
      6. Documenting Test Results
      7. Presenting Lab Results
      8. Summary
    11. Upgrading from Windows NT 4.0
      1. Reasons to Upgrade
      2. Project Phases
      3. Goals of the Migration
      4. Preparing for the Migration and Active Directory
      5. Approaches for Upgrading to Active Directory
      6. Active Directory Upgrade Scenarios
      7. When to Go to Native Mode
      8. Summary
  13. Index