150 likes | 478 Views
Active Directory. CNS 4650 Fall 2004 Rev. 2. Active Directory. Introduced with Windows 2000 Server X.500 based Can emulate NT-style network environments. LDAP & Active Directory. LDAP v3 compliant Active Directory handles LDAP queries directly. DNS & Active Directory.
E N D
Active Directory CNS 4650 Fall 2004 Rev. 2
Active Directory • Introduced with Windows 2000 Server • X.500 based • Can emulate NT-style network environments
LDAP & Active Directory • LDAP v3 compliant • Active Directory handles LDAP queries directly
DNS & Active Directory • DNS integral part of Active Directory • Namespace is derived from the DNS name of organization • DNS name can be actual DNS or internal DNS
Active Directory APIs • ADSI • LDAP C API • MAPI • SAM API
Active Directory Objects • Container Objects • Domain • Organizational Unit (OU)
Active Directory Objects • Leaf Objects • Network Management • Replication Management • Service Management
Active Directory Schema • Stored in the directory • cn=schema,cn=configuration,dc=mycompany,dc=com • Schema extensions can be disabled, but not deleted (Windows 2000 Server only, Windows 2003 Server fixes this issue)
Active Directory DIT • Directory tree • root to leaf • Domain tree • tree of contiguous DNS names • Forest • Collection of one or more non-contiguous Domain trees
Active Directory Naming • DNS Names for location of domains and Domain Controllers • LDAP Names for directory objects • UNC/NetBIOS - Legacy support
Security in Active Directory • Authentication • Kerberos and NTLM • Access Control • ACE (Access Control Entry) • Group Policies • GPO