1 / 14

Week 2 - Objectives

Week 2 - Objectives. Overview of AD DS Overview of Domain Controllers Installing a Domain Controller. Overview of AD DS. AD DS is composed of both physical and logical components. What Are AD DS Domains?. AD DS requires one or more domain controllers

deepak
Download Presentation

Week 2 - Objectives

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Week 2 - Objectives • Overview of AD DS Overview of Domain Controllers Installing a Domain Controller

  2. Overview of AD DS AD DS is composed of both physical and logical components

  3. What Are AD DS Domains? • AD DS requires one or more domain controllers • All domain controllers hold a copy of the domain database which is continually synchronized • The domain is the context within which user, group, and computer accounts are created • The domain is a replication boundary • An administrative center for configuring and managing objects • Any domain controller can authenticate any logon in the domain

  4. What Are OUs? Organizational Units • Containers that can be used to group objects within a domain • Create OUs to: • Delegate administrative permissions • Apply Group Policy

  5. What Is an AD DS Forest? Forest Root Domain Tree Root Domain adatum.com fabrikam.com atl.adatum.com

  6. What Is the AD DS Schema? The Active Directory schema acts as a blueprint for AD DS by defining the attributes and object classes such as: • Attributes • objectSID • sAMAccountName • location • manager • department • Classes • User • Group • Computer • Site

  7. What Is a Domain Controller? Domain Controllers • Servers that host the Active Directory database (NTDS.DIT) and SYSVOL • Kerberos authentication service and KDC services perform authentication • Best practices: • Availability: At least two domain controllers in a domain • Security: RODC and BitLocker

  8. What Is the Global Catalog? Schema Schema • Global catalog: • Hosts a partial attribute set for other domains in the forest • Supports queries for objects throughout the forest Schema Schema Configuration Configuration Configuration Configuration Domain A Domain A Domain B Domain B Domain B Global catalog server

  9. The AD DS Logon Process The AD DS logon process: User Account is authenticated to DC1 DC1 returns TGT back to client Client uses TGT to apply for access to WKS1 DC1 grants access to WKS1 Client uses TGT to apply for access to SVR1 DC1 returns access to SVR1 DC1 WKS1 SVR1

  10. What Are Operations Masters? In any multimaster replication topology, some operations must be single master Many terms are used for single master operations inAD DS, including the following: • Operations master (or operations master roles) • Single master roles • FSMOs Roles • Forest: • Domain naming master • Schema master • Domain: • RID master • Infrastructure master • PDC Emulator master

  11. Installing a Domain Controller from Server Manager

  12. Installing a Domain Controller on a Server Core Installation of Windows Server 2012 Use the dcpromo /unattend:”D:\answerfile.txt” command to perform the unattended installation. The following is an example of text from the answer file: [DCINSTALL] UserName=<The administrative account in the domain of the new domain controller> UserDomain=<The name of the domain of the new domain controller> Password=<The password for the UserName account> SiteName=<The name of the AD DS site in which this domain controller will reside> This site must be created in advance in the Dssites.msc snap-in. ReplicaOrNewDomain=replica ReplicaDomainDNSName=<The fully qualified domain name (FQDN) of the domain in which you want to add an additional domain controller> DatabasePath="<The path of a folder on a local volume>" LogPath="<The path of a folder on a local volume>" SYSVOLPath="<The path of a folder on a local volume>" InstallDNS=yes ConfirmGC=yes SafeModeAdminPassword=<The password for an offline administrator account> RebootOnCompletion=yes

  13. Upgrading a Domain Controller Options to upgrade AD DS to Windows Server 2012: • In place upgrade (from Windows Server 2008 or Windows Server 2008 R2) • Benefit: Except for the prerequisite checks, all the files and programs stay in-place and there is no additional work required • Watch for: May leave legacy files and DLLs • Introduce a new Windows Server 2012 server into the domain and promote it to be a domain controller • This option is the usually the preferred choice • Benefit: Result is a new server with no accumulated files and settings • Watch for: May need additional work to migrate users’ file settings

  14. Installing a Domain Controller by Using Install from Media

More Related