[ Team Lib ] Active Directory, 2Nd Edition, Provides System And
Total Page:16
File Type:pdf, Size:1020Kb
[ Team LiB ] • Table of Contents • Index • Reviews • Reader Reviews • Errata Active Directory, 2nd Edition By Robbie Allen, Alistair G. Lowe-Norris Publisher: O'Reilly Pub Date: April 2003 ISBN: 0-596-00466-4 Pages: 686 Active Directory, 2nd Edition, provides system and network administrators, IT professionals, technical project managers, and programmers with a clear, detailed look at Active Directory for both Windows 2000 and Windows Server 2003. Active Directory, 2nd Edition will guide you through the maze of concepts, design issues and scripting options enabling you to get the most out of your deployment. [ Team LiB ] [ Team LiB ] • Table of Contents • Index • Reviews • Reader Reviews • Errata Active Directory, 2nd Edition By Robbie Allen, Alistair G. Lowe-Norris Publisher: O'Reilly Pub Date: April 2003 ISBN: 0-596-00466-4 Pages: 686 Copyright Preface Intended Audience Contents of the Book Conventions in This Book How to Contact Us Acknowledgments Part I: Active Directory Basics Chapter 1. A Brief Introduction Section 1.1. Evolution of the Microsoft NOS Section 1.2. Windows NT Versus Active Directory Section 1.3. Windows 2000 Versus Windows Server 2003 Section 1.4. Summary Chapter 2. Active Directory Fundamentals Section 2.1. How Objects Are Stored and Identified Section 2.2. Building Blocks Section 2.3. Summary Chapter 3. Naming Contexts and Application Partitions Section 3.1. Domain Naming Context Section 3.2. Configuration Naming Context Section 3.3. Schema Naming Context Section 3.4. Application Partitions Section 3.5. Summary Chapter 4. Active Directory Schema Section 4.1. Structure of the Schema Section 4.2. Attributes (attributeSchema Objects) Section 4.3. Attribute Syntax Section 4.4. Classes (classSchema Objects) Section 4.5. Summary Chapter 5. Site Topology and Replication Section 5.1. Site Topology Section 5.2. Data Replication Section 5.3. Summary Chapter 6. Active Directory and DNS Section 6.1. DNS Fundamentals Section 6.2. DC Locator Section 6.3. Resource Records Used by Active Directory Section 6.4. Delegation Options Section 6.5. Active Directory Integrated DNS Section 6.6. Using Application Partitions for DNS Section 6.7. Summary Chapter 7. Profiles and Group Policy Primer Section 7.1. A Profile Primer Section 7.2. Capabilities of GPOs Section 7.3. Summary Part II: Designing an Active Directory Infrastructure Chapter 8. Designing the Namespace Section 8.1. The Complexities of a Design Section 8.2. Where to Start Section 8.3. Overview of the Design Process Section 8.4. Domain Namespace Design Section 8.5. Design of the Internal Domain Structure Section 8.6. Other Design Considerations Section 8.7. Design Examples Section 8.8. Designing for the Real World Section 8.9. Summary Chapter 9. Creating a Site Topology Section 9.1. Intrasite and Intersite Topologies Section 9.2. Designing Sites and Links for Replication Section 9.3. Examples Section 9.4. Summary Chapter 10. Designing Organization-Wide Group Policies Section 10.1. How GPOs Work Section 10.2. Managing Group Policies Section 10.3. Using GPOs to Help Design the Organizational Unit Structure Section 10.4. Debugging Group Policies Section 10.5. Summary Chapter 11. Active Directory Security: Permissions and Auditing Section 11.1. Using the GUI to Examine Permissions Section 11.2. Using the GUI to Examine Auditing Section 11.3. Designing Permission Schemes Section 11.4. Designing Auditing Schemes Section 11.5. Real-World Examples Section 11.6. Summary Chapter 12. Designing and Implementing Schema Extensions Section 12.1. Nominating Responsible People in Your Organization Section 12.2. Thinking of Changing the Schema Section 12.3. Creating Schema Extensions Section 12.4. Wreaking Havoc with Your Schema Section 12.5. Summary Chapter 13. Backup, Recovery, and Maintenance Section 13.1. Backing Up Active Directory Section 13.2. Restoring a Domain Controller Section 13.3. Restoring Active Directory Section 13.4. FSMO Recovery Section 13.5. DIT Maintenance Section 13.6. Summary Chapter 14. Upgrading to Windows Server 2003 Section 14.1. New Features in Windows Server 2003 Section 14.2. Differences With Windows 2000 Section 14.3. Functional Levels Explained Section 14.4. Preparing for ADPrep Section 14.5. Upgrade Process Section 14.6. Post-Upgrade Tasks Section 14.7. Summary Chapter 15. Migrating from Windows NT Section 15.1. The Principles of Upgrading Windows NT Domains Section 15.2. Summary Chapter 16. Integrating Microsoft Exchange Section 16.1. Quick Word about Exchange Server 2003 Section 16.2. Preparing Active Directory for Exchange 2000 Section 16.3. Exchange 5.5 and the Active Directory Connector Section 16.4. Summary Chapter 17. Interoperability, Integration, and Future Direction Section 17.1. Microsoft's Directory Strategy Section 17.2. Interoperating with Other Directories Section 17.3. Integrating Applications and Services Section 17.4. Summary Part III: Scripting Active Directory with ADSI, ADO, and WMI Chapter 18. Scripting with ADSI Section 18.1. What Are All These Buzzwords? Section 18.2. Writing and Running Scripts Section 18.3. ADSI Section 18.4. Simple Manipulation of ADSI Objects Section 18.5. Further Information Section 18.6. Summary Chapter 19. IADs and the Property Cache Section 19.1. The IADs Properties Section 19.2. Manipulating the Property Cache Section 19.3. Checking for Errors in VBScript Section 19.4. Summary Chapter 20. Using ADO for Searching Section 20.1. The First Search Section 20.2. Other Ways of Connecting and Retrieving Results Section 20.3. Understanding Search Filters Section 20.4. Optimizing Searches Section 20.5. Advanced Search Function-SearchAD Section 20.6. Summary Chapter 21. Users and Groups Section 21.1. Creating a Simple User Account Section 21.2. Creating a Full-Featured User Account Section 21.3. Creating Many User Accounts Section 21.4. Modifying Many User Accounts Section 21.5. Account Unlocker Utility Section 21.6. Creating a Group Section 21.7. Adding Members to a Group Section 21.8. Evaluating Group Membership Section 21.9. Summary Chapter 22. Manipulating Persistent and Dynamic Objects Section 22.1. The Interface Methods and Properties Section 22.2. Creating and Manipulating Shares with ADSI Section 22.3. Enumerating Sessions and Resources Section 22.4. Manipulating Print Queues and Print Jobs Section 22.5. Summary Chapter 23. Permissions and Auditing Section 23.1. How to Create an ACE Using ADSI Section 23.2. A Simple ADSI Example Section 23.3. A Complex ACE Example Section 23.4. Creating Security Descriptors Section 23.5. Listing ACEs to a File for All Objects in an OU and Below Section 23.6. Summary Chapter 24. Extending the Schema and the Active Directory Snap-Ins Section 24.1. Modifying the Schema with ADSI Section 24.2. Customizing the Active Directory Administrative Snap-ins Section 24.3. Summary Chapter 25. Using ADSI and ADO from ASP or VB Section 25.1. VBScript Limitations and Solutions Section 25.2. How to Avoid Problems When Using ADSI and ASP Section 25.3. Combining VBScript and HTML Section 25.4. Binding to Objects Via Authentication Section 25.5. Incorporating Searches into ASP Section 25.6. Migrating Your ADSI Scriptsfrom VBScript to VB Section 25.7. Summary Chapter 26. Scripting with WMI Section 26.1. Origins of WMI Section 26.2. WMI Architecture Section 26.3. Getting Started with WMI Scripting Section 26.4. WMI Tools Section 26.5. Manipulating Services Section 26.6. Querying the Event Logs Section 26.7. Querying AD with WMI Section 26.8. Monitoring Trusts Section 26.9. Monitoring Replication Section 26.10. Summary Chapter 27. Manipulating DNS Section 27.1. DNS Provider Overview Section 27.2. Manipulating DNS Server Configuration Section 27.3. Creating and Manipulating Zones Section 27.4. Creating and Manipulating Resource Records Section 27.5. Summary Chapter 28. Getting Started with VB.NET and System.Directory Services Section 28.1. The .NET Framework Section 28.2. Using VB.NET Section 28.3. Overview of System.DirectoryServices Section 28.4. DirectoryEntry Basics Section 28.5. Searching with DirectorySearcher Section 28.6. Manipulating Objects Section 28.7. Summary Colophon Index [ Team LiB ] [ Team LiB ] Copyright Copyright © 2003, 2000 O'Reilly & Associates, Inc. Printed in the United States of America. Published by O'Reilly & Associates, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O'Reilly & Associates books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (http://safari.oreilly.com). For more information, contact our corporate/institutional sales department: (800) 998-9938 [email protected] . Nutshell Handbook, the Nutshell Handbook logo, and the O'Reilly logo are registered trademarks of O'Reilly & Associates, Inc. The association between the image of domestic cats and the topic of Active Directory is a trademark of O'Reilly & Associates, Inc. While every precaution has been taken in the preparation of this book, the publisher and authors assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein. [ Team LiB ] [ Team LiB ] Preface Active Directoy is a common repository for information about objects that reside on the network, such as users and groups, computers and printers, and applications and files. The default Active Directory schema supports numerous attributes for each object class that can be used to store a variety of information. Access Control Lists (ACLs) are also stored with objects, which allow you to maintain permissions for who can access and manage them. Having a single source for this information makes it more accessible and easier to manage. However, to accomplish this with Active Directory requires a significant amount of knowledge of such topics as LDAP, Kerberos, DNS, multi- master replication, group policies, and data partitioning, to name a few. This book will be your guide through this maze of technologies, showing you how to deploy a scalable and reliable Active Directory infrastructure.