Special Edition Using Microsoft Active Directory

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780789724342 | 0789724340
Cover: Paperback
Copyright: 3/28/2001

Sorry, this item is currently not available.

Special Edition Using Microsoft Active Directory provides you with complete, in-depth coverage of the newest directory service from Microsoft. Authors Fullerton and Hudson use their previous training and administration experiences to explain how to design, implement, and troubleshoot using Active Directory. Topics covered include Domain Name Services and Active Directory, Logical and Physical Active Directory, replication, authentication, group policies, administering and managing, backup, restore, maintenance, and Active Directory Services Interface.

Introduction to Active Directory

(8)

Windows 2000 Active Directory

(1)

History of Directory Services

(2)

X.500

(1)

LDAP

(1)

Banyan VINES and Streettalk

(1)

Novell NetWare Directory Services

(1)

Active Directory

(1)

Why a Directory?

(1)

What Makes a Directory?

(1)

Schema

(1)

Class

(1)

Attribute

(1)

Value

(1)

Object

(1)

Active Directory in a Nutshell

(2)

Physical and Logical Structure of the Active Directory

(1)

Services That Support the Active Directory

(1)

Summary

(2)

Installing Active Directory

(26)

And Away We Go! Or Not

(1)

Before You Begin

(2)

Planning the Forest

(1)

Choosing the Correct Hardware

(1)

Software You Will Need

(1)

Decisions, Decisions

(3)

DNS

(1)

Namesplaces

(1)

Filesystems

(1)

Permissions Compatibility

(1)

Directory Services Restore Mode Password

(1)

Promoting a Server to Domain Controller

(9)

Authorization

(7)

Creating a New Tree

(2)

Creating a Child Domain

(1)

Creating Additional Domain Controllers

(1)

Automating dcpromo

(2)

After dcpromo

(1)

New Shares

(1)

New Files

(1)

Default Containers

(1)

Removing a Domain Controller

(2)

Demotion Considerations

(1)

dcpromo in Reverse

(1)

Summary

(1)

Troubleshooting

(3)

Domain Name Services

(8)

The Need for DNS

(1)

The Function of DNS

(1)

Examples of Name Resolution

(1)

Using the MMC

(3)

Default Consoles

(1)

Creating Custom Consoles

(2)

Summary

(1)

Troubleshooting

(2)

Installing and Configuring DNS

(22)

Installing DNS

(6)

Installing DNS Manually Through Control Panel

(3)

Installing DNS Automatically as a Part of AD Installation

(2)

Installing DNS Automatically Through Scripting

(1)

Configuring DNS

(12)

Manually Installing a Forward Lookup Zone

(3)

Manually Installing a Reverse Lookup Zone

(5)

Manually Installing DNS Zones Using dnscmd.exe

(3)

Summary

(1)

Troubleshooting

(3)

DNS Architecture

(14)

Using the DNS MMC Snap-In

(6)

DNS Record Types

(5)

Zones Created by the Active Directory

(1)

Anatomy of a DNS Lookup

(4)

Forward Lookup Example

(4)

Summary

(1)

Troubleshooting

(2)

Integrating BIND DNS with Active Directory

(12)

BIND and the Active Directory

(1)

Why Use BIND?

(1)

BIND Configuration Files

(6)

named.conf

(2)

Forward Lookup Zone Configuration Files

(1)

Reverse Lookup Zone Configuration Files

(1)

root. cache

(2)

named. local

(1)

Zone Files After a Dynamic Update

(1)

Delegating a Zone

(1)

Summary

(1)

Troubleshooting

(1)

DNS and AD Namespaces

(8)

Namespaces

(1)

External Namespaces

(1)

Internal Namespaces

(1)

Choosing an AD Namespace

(2)

Using the Same Namespace Internally and Externally

(1)

Using a Separate Namespace

(1)

Finding a Domain Controller

(3)

Sites

(3)

Summary

(1)

Troubleshooting

(2)

Windows 2000 Name Resolution Services

(16)

Name Resolution in Windows 2000

100

(1)

NetBIOS Node Types

100

(2)

Broadcast/b-node

101

(1)

Point-to-Point/p-node

101

(1)

Mixed/m-node and Hybrid/h-node

101

(1)

The Imhosts File

102

(1)

Troubleshooting Imhosts with nbtstat

102

(1)

The hosts File

103

(3)

ipconfig

104

(2)

WINS

106

(6)

Installing and Configuring WINS

106

(2)

Intergrating WINS with DNS

108

(4)

Summary

112

(1)

Troubleshooting

113

(2)

Dynamic and Active Directory Integrated DNS

115

(26)

Dynamic DNS

116

(4)

Allowing Updates

116

(1)

Dynamic DNS Step by Step

117

(2)

Configuring DHCP for Dynamic Update

119

(1)

AD Intergrated DNS

120

(14)

Viewing DNS as Active Directory Objects

120

(2)

Advantages of AD-Intergrated Zones

122

(12)

DNS Record Aging and Scavenging

134

(4)

Feature of DNS Record Aging and Scavenging

134

(1)

DNS Record Aging and Scavenging Parameters and Architecture

134

(2)

Viewing DNS Record Aging and Scavenging Options in the MMC

136

(1)

Configuring DNS Record Aging and Scavenging Options

136

(2)

Summary

138

(1)

Troubleshooting

139

(2)

Troubleshooting DNS

141

(20)

DNS Troubleshooting Tools

142

(9)

DNS Monitoring

142

(1)

DNS Logging

143

(1)

netdiag. exe

144

(4)

ipconfig. exe

148

(3)

General IP Troubleshooting Tools

151

(4)

ping. exe

151

(1)

tracert. exe

152

(2)

Network Monitor

154

(1)

nslookup. exe

155

(4)

Summary

159

(1)

Troubleshooting

159

(2)

Domains, Trees, and Forests

161

(10)

Introduction

162

(1)

Domains

162

(3)

Boundaries

162

(1)

Security

163

(1)

Administration

163

(1)

Replication

164

(1)

Domain Modes

165

(2)

Mixed Mode

165

(1)

Native Mode

166

(1)

Trees

167

(1)

Forests

168

(1)

Summary

169

(1)

Troubleshooting

170

(1)

Operations Masters

171

(16)

Introduction

172

(2)

Forest-Wide Roles

174

(1)

Schema Master

174

(1)

Domain Naming Master

175

(1)

Domain Roles

175

(4)

Infrastructure Master

175

(1)

RID Master

176

(1)

PDC Emulator

177

(2)

Transferring and Seizing Roles

179

(6)

Transferring Roles

181

(4)

Seizing Roles

185

(1)

FSMO Placement

185

(1)

Summary

186

(1)

Troubleshooting

186

(1)

Active Directory Schema

187

(20)

Introduction

188

(1)

Schema Location

189

(1)

Schema Components

189

(4)

Classes

189

(1)

Attributes

190

(1)

Syntaxes

190

(1)

Object Identifiers

191

(1)

Tools for Exploring the Schema

191

(2)

Modifying the Schema

193

(8)

Reasons for Schema Modification

193

(1)

Planning for Schema Modification

194

(1)

Adding Classes and Attributes

195

(6)

Schema Replication

201

(1)

Deactivating Classes and Attributes

201

(4)

Indexing Attributes

202

(2)

Replicating Attributes to the Global Catalog

204

(1)

Summary

205

(1)

Troubleshooting

205

(2)

Active Directory Sites

207

(22)

Introduction to Sites

208

(1)

Architecture

208

(1)

How Are Sites Used?

208

(1)

Where Do Sites Live?

209

(1)

How Are Domain Controllers Added to a Site?

209

(1)

How Is Site Membership Determined?

209

(1)

Requirements

209

(4)

Subnet

209

(4)

Creating Sites

213

(14)

Server Objects

215

(2)

The NTDS Settings Object

217

(6)

Moving a DC to a New Site

223

(1)

Site Licensing Server

224

(1)

The NTDS Site Settings Object

225

(2)

Summary

227

(2)

Site Link Objects and Connection Objects

229

(20)

Introduction

230

(1)

Site Link Objects

231

(9)

Inter-Site Transports

231

(5)

Schedules

236

(2)

Replication Intervals

238

(1)

Costs

239

(1)

Site Link Bridges

240

(2)

Connection Objects

242

(5)

Connection Object Properties

243

(3)

Creating Connection Objects

246

(1)

Summary

247

(2)

Intra-Site Replication

249

(24)

Introduction to Replication

250

(11)

Multimaster

250

(1)

Loose Consistency

250

(1)

With Convergence

251

(1)

Naming Contexts

251

(2)

Updates

253

(1)

Update Sequence Numbers

254

(6)

Conflict Resolution

260

(1)

Deleted Objects

261

(1)

Topology Generation

261

(1)

The Knowledge Consistency Checker

262

(1)

The Intra-Site Replication Process

263

(1)

Urgent Replication

264

(1)

Account Lockout

264

(1)

Change of an LSA Secret

264

(1)

Password Changes

264

(1)

Intra-Site Replication Management Tasks

265

(8)

Using Active Directory Sites and Services to Manage Intra-Site Replication

265

(2)

Using Active Directory Replication Monitor to Manage Intra-Site Replication

267

(6)

Inter-Site Replication

273

(16)

Introduction

274

(1)

Topology

274

(5)

Inter-Site Topology Generator

275

(3)

Bridgehead Servers

278

(1)

The Replication Process

279

(3)

Cost

279

(3)

Inter-Site Replication Management Tasks

282

(7)

Repadmin

282

(2)

Tuning

284

(3)

Monitoring Replication

287

(2)

Authentication

289

(22)

Enterprise Security

290

(1)

Kerberos

290

(1)

History of Kerberos

290

(1)

Advantages of Kerberos

290

(1)

Kerberos Roles in Windows 2000

291

(1)

Key Distribution Center

291

(1)

Authentication Service

292

(1)

Ticket-Granting Service

292

(1)

Kerberos Key Distribution

292

(1)

Kerberos Tools

292

(2)

Kerbtray

293

(1)

klist

293

(1)

Authenticating to the Domain

294

(3)

Finding the KDC

294

(1)

Logging On

294

(1)

Obtaining a TGT from the KDC

295

(1)

Client Request for a TGT

295

(1)

Getting a Session Ticket for the Local Computer

296

(1)

Completing the Logon Process

296

(1)

Authenticating to Other Domains in the Tree

297

(1)

Automatic Kerberos Transitive Trusts

297

(1)

Managing Trusts

298

(2)

How Transitive Trusts Work

300

(3)

Cross-Domain Authentication Example

300

(3)

Advantages to the Previous Scenario

303

(1)

Explicit Trusts

303

(1)

Shortcut Trusts

304

(4)

Creating a Shortcut Trust

304

(4)

Testing the Shortcut Trust

308

(1)

To Trust or Not to Trust

308

(1)

Kerberos Policy

308

(2)

Enforce User Logon Restrictions

308

(1)

Maximum Lifetime for a Service Ticket

309

(1)

Maximum Lifetime for a User Ticket

309

(1)

Maximum Lifetime for User Ticket Renewal

309

(1)

Maximum Tolerance for Computer Clock Synchronization

309

(1)

Summary

310

(1)

Troubleshooting

310

(1)

Authorization

311

(22)

Authorizing Access to Active Directory

312

(1)

Rights Versus Permissions

312

(1)

Security Components of the Active Directory

312

(3)

Globally Unique Identifiers

312

(1)

Security Identifiers

312

(1)

Relative Identifiers

313

(1)

Security Descriptor

313

(1)

Access Tokens

314

(1)

Groups

315

(5)

Native Versus Mixed Mode

315

(1)

Domain Local Groups

316

(1)

Global Groups

316

(1)

Universal Groups

316

(1)

Computer Local Groups

317

(1)

Nesting Groups

317

(1)

System-Created Groups

317

(3)

Authorization Step by Step

320

(1)

Gathering the User's Credentials

320

(1)

Getting an Access Token

321

(1)

Using the Access Token

321

(1)

Modifying Permissions

321

(7)

Using the Security Tab

322

(4)

Using the Delegation of Control Wizard

326

(2)

Troubleshooting Permissions

328

(4)

The Basics

329

(1)

Tools

329

(3)

Summary

332

(1)

Troubleshooting

332

(1)

Group Policy

333

(10)

Introduction to Group Policy

334

(1)

A Simple Group Policy Example

335

(2)

Why Group Policy?

337

(1)

Types of Group Policy

338

(1)

Computer Group Policy

338

(1)

User Group Policy

339

(1)

Applying Group Policy

339

(1)

Choosing Where to Assign Group Policy

339

(1)

Assigning Group Policy

340

(1)

Group Policy and Security Groups

340

(1)

Summary

341

(1)

Troubleshooting

341

(2)

Group Policy Sections

343

(30)

Overview of Group Policy Sections

344

(1)

Computer Configuration

344

(18)

Software Settings

345

(1)

Windows Settings

346

(10)

Administrative Templates

356

(6)

User Configuration

362

(8)

Software Settings

362

(1)

Windows Settings

363

(4)

Administrative Templates

367

(3)

Summary

370

(1)

Troubleshooting

371

(2)

Managing Group Policy

373

(34)

Overview of Group Policy Administration

374

(5)

The Group Policy Tab

374

(5)

Feature of Group Policy

379

(1)

Logon Scripts

380

(7)

Windows Scripting Host

380

(1)

VBScript Syntax

381

(1)

A Simple VBScript Example

381

(1)

Sample Logon Script

381

(1)

The Logon Script Line by Line

382

(2)

Attaching a Logon Script Through Group Policy

384

(3)

Installing Software Through Group Policy

387

(11)

Windows Installer Service

387

(1)

Features of Native Windows Installer Packages

388

(1)

Assigning and Publishing Software Through Group Policy

388

(1)

An Example of Assign and Publish

389

(6)

Testing Your Group Policy

395

(2)

Configuring the Software Installation Node

397

(1)

Group Policy Security and Inheritance

398

(6)

Group Policy Inheritance

398

(2)

Group Policy Security

400

(1)

Creating Exceptions to Group Policy Application

401

(3)

Summary

404

(1)

Troubleshooting

404

(3)

Group Policy Architecture

407

(12)

Overview of Group Policy Architecture

408

(1)

Group Policy Storage

408

(1)

Group Policy Container

408

(1)

Group Policy Template

408

(1)

Group Policy Replication

409

(1)

File Replication Service

409

(1)

Group Policy Processing

410

(2)

Problems with Group Policy

412

(4)

Replication Issues

412

(1)

Inheritance Issues

413

(3)

Permissions Issues

416

(1)

Summary

416

(1)

Troubleshooting

416

(3)

User, Group, and Contact Objects

419

(20)

User Objects

420

(12)

Creating a User Object

420

(10)

Copying an Existing User Account

430

(2)

Groups

432

(4)

Group Types

432

(1)

Group Scope

432

(1)

Creating Groups

433

(1)

Modifying Groups

434

(1)

Planning Group Usage

435

(1)

Contacts

436

(1)

Summary

436

(1)

Troubleshooting

436

(3)

Printer, Computer, and Shared Folder Objects

439

(18)

Printer Objects

440

(9)

Active Directory and Printers

440

(3)

Printer Location Tracking

443

(1)

Managing Published Printers

444

(1)

Adding a Printer

444

(3)

Modifying a Printer

447

(1)

Adding Printers to the Directory from Non-Windows 2000 Print Servers

448

(1)

Computer Objects

449

(6)

Creating Computer Objects

450

(1)

Creating a Computer Object Using VBScript

451

(1)

Creating a Computer Object Using NET Commands

452

(1)

Creating a Computer Object by Joining a Domain

452

(3)

Summary

455

(1)

Troubleshooting

455

(2)

Containers and Organizational Units

457

(12)

Organizational Units

458

(7)

Creating an OU

458

(2)

Design Considerations

460

(2)

Moving and OU

462

(1)

Deleting and OU

463

(2)

OU Design Considerations

465

(1)

Containers

465

(2)

Creating Container Objects

467

(1)

Deleting Container Objects

467

(1)

Summary

467

(1)

Troubleshooting

467

(2)

Active Directory Database Optimization

469

(16)

Introduction to the Active Directory Database

470

(1)

Understanding Transactional Database

470

(1)

Active Directory Database Structure

470

(1)

Database Files

471

(5)

The Active Directory Database File

472

(1)

Transaction Log Files

473

(1)

Checkpoint Files

474

(1)

Reserve Log Files

475

(1)

Patch Files

475

(1)

Database Maintenance

476

(7)

Defragmentation

476

(1)

Other Maintenance Tasks

477

(6)

Summary

483

(1)

Troubleshooting

483

(2)

Backup and Restore

485

(12)

Active Directory Backup

486

(2)

System State

486

(2)

Microsoft Windows Backup Tool

488

(1)

Restoring Active Directory

489

(5)

Restoring from a Backup

489

(5)

Additional Concepts

494

(1)

Offline Backup

494

(1)

Determining the Date of the Last Full Backup

495

(1)

Impact of the Tombstone Lifetime on Restores

495

(1)

Computer Membership and Trusts

495

(1)

Summary

495

(1)

Troubleshooting

496

(1)

Migrating from NT to Active Directory

497

(18)

Upgrading and Migrating

498

(1)

Upgrade in Place

498

(4)

Planning

498

(2)

Performing the OS Upgrade

500

(1)

Running dcpromo

500

(1)

Testing the Upgrade

501

(1)

Important Considerations When Upgrading NT Domains

502

(1)

Structural Modifications

502

(1)

Security Issues During the Upgrade

502

(1)

Checking the Upgrade

502

(1)

Consolidation by Moving Objects

503

(4)

Moving Objects Inside a Domain

503

(1)

Moving Objects Between Domains or Trees

503

(2)

Moving Objects Between Forests

505

(2)

FastLane

507

(6)

Summary

513

(1)

Troubleshooting

514

(1)

Scripting the Active Directory

515

(16)

The Active Directory Services Interface

516

(1)

Windows Script Host

516

(1)

Using ADSI with WSH

516

(8)

Creating a User

517

(2)

Manipulating Groups with ADSI

519

(1)

Moving Objects

520

(2)

Listing and Viewing Properties

522

(2)

iadstools

524

(4)

Checking Group Policy Versions

525

(1)

Replication Status

526

(2)

Summary

528

(1)

Troubleshooting

529

(2)

Conclusion

531

(8)

Active Directory Summary

532

(1)

The Future

532

(1)

Whistler

532

(1)

Headless Servers

532

(1)

MSMQ 5.1

532

(1)

Networking Changes

532

(1)

Application Directory Partitions

532

(1)

Improved Support for Wireless LANs

533

(1)

Dynamic Objects

533

(1)

Dynamic Auxiliary Classes

533

(1)

Virtual List Views and Attribute Scoped Queries

533

(1)

Universal Plug-and-Play

533

(1)

New WinSock 2 APIs

533

(1)

Windows Media Rights Manager

533

(1)

NET

533

(1)

AppCenter

534

(1)

Biztalk Server

534

(1)

SQL Server 2000

534

(1)

Host Integration Server 2000

534

(1)

Internet Security and Acceleration Server 2000

534

(1)

64-Bit Windows

534

(1)

Blackcomb

534

(1)

Where to Go from Here...

535

(2)

Online Help

535

(1)

Support Tools

535

(1)

Resource Kits

535

(1)

msnews.microsoft.com

535

(1)

www.microsoft.com

535

(1)

Microsoft Official Curriculum

536

(1)

msdn.microsoft.com

536

(1)

TechEd

536

(1)

The End

537

(2)

Index

539

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Special Edition Using Microsoft Active Directory

Summary

Author Biography

Table of Contents

Supplemental Materials