MCSE Windows 2000 Directory Services Design Exam Prep

Objects 3

Attributes 3

Without a Directory Service 6

With a Directory Service 6

Without a Directory Service 6

With a Directory Service 6

Without a Directory Service 7

With a Directory Service 7

Banyan Systems Street Talk 9

Novell Directory Services (NDS) 9

Microsoft?s Active Directory Service 10

How It All Began 15

Application Relationships 21

Directory Access Protocol (DAP) 24

LDAP 26

How Does LDAP Really Work? 29

The Way It Was 38

Simplified Administration 39

Security 40

Scalability 40

Extensibility 40

Open Standard Support 40

Interoperability 41

Objects 41

Groups 42

Organizational Units 42

Domains 42

Trees 43

Forest 44

Sites 44

Global Catalog 46

Schema 46

Naming Conventions 46

Active Directory Services Interface 48

A Bit of History 67

The Four Layers of TCP/IP 68

Transport Layer 70

Application Layer 72

TCP/IP Addressing Scheme 72

Assigning the TCP/IP Address 76

TCP/IP Utilities 76

Testing Your Configuration 77

How DHCP Works 78

Step One: DHCPDISCOVER 80

Step Two: DHCPOFFER 81

Step Three: DHCPREQUEST 81

Step Four: DHCPACK 81

What If Something Goes Wrong 81

Automatic Private Addressing 81

Renewing and Releasing the Lease 82

Backing Up the DHCP Database 82

Restoring the DHCP Database 83

How Does WINS Work 83

WINS Name Registration Process 84

Renewing Your Registration 85

When the Client Is Done with the IP Address 86

Looking for Somebody on the Network 86

WINS Proxy Agent 86

Configuring WINS with the WINS Snap-In 87

Why Do We Use Uniform Resource Locators? 101

The Root and Top Levels 102

DNS Naming Conventions 104

Types of Name Servers 105

Recursive 107

Iterative 108

Caching 108

DNS Database Files 109

Start of Authority (SOA) 110

The Name Server (NS) Record 112

The Mail Exchange Record 112

The Host Record (A) 112

The CNAME Record 113

Other Important Files for DNS 113

DHCP and DDNS 115

What?s In a Name? 118

The Root of Your Name 120

Are You In or Are You Out? 121

Two Distinct Namespaces 122

Single Namespace Implementation 123

Server Implementation 124

Creating Your Zones and Handling Replication 126

Strategy 143

The Number of Levels 144

Security Identifier 147

Security Descriptor 147

International Company 149

Nationwide Company 151

A Small Company 152

Centralized Administration Model 154

Distributed Administration Model 154

Combination 154

Geographic Model 155

Object Model 156

Cost Center Model 157

Project Model 157

Division or Business Unit Model 158

Administration Model 158

Hybrid Model 159

The Need for a Larger Tree 175

Transitive Trusts 177

Empty Root Domains 178

To Forest or Not to Forest? 179

Shortcut Trusts 180

Forest Points to Remember 181

Multiple Forests 181

The Root 183

The First Level 183

The Second Level 184

Scenario One 192

Scenario Two 193

Scenario Three 193

Scenario Four 194

Scenario Five 194

Mixed Mode: The Slow Integration Process 209

Domain Local Groups 210

Global Groups within Windows 2000 211

Universal Groups 211

Group Conversions 212

Group Placement 215

Name that Group 216

Delegate Administrative Control 216

Scenario One 218

Scenario Two 219

Profiles vs. Policies 220

System Policies of NT 4 221

GPOs, GPCs, and GPTs 222

The Default Application of Policy 226

Overriding and Blocking of Inheritance 226

Filtering Group Policies 228

Inner Workings of a Group Policy 229

Method of Group Policy Application 233

How Many Policies for the GPO? 235

Organizing Your Organizational Units 236

Minimize Block Policy and Override Features 237

Are You Counting Time, or Making Your Time Count? 238

LDAP Data Interchange Format (LDIF) 253

Comma Separated Variable Import/Export Utility (CSVDE.EXE) 253

Automatic and Manual Topologies 256

From the Top, Down 258

Extensible Storage Engine (ESE) 258

Database Layer 259

The Directory Service Agent 259

Deleted Objects?Where Do They Go? 260

From Origination to Replication 261

Sequence Numbers: The Nightmare Begins 261

Up-To-Date Vector (UTD Vector) 264

High Watermark Vector 266

Collisions: They Will Occur 266

Replication Partitions 268

Special Masters 269

Intra-Site Replication 271

Inter-Site Replication 272

Manual Modifications 273

Network Monitor 274

Performance Monitor 275

Logon Traffic 287

Replication Traffic 288

Distributed File System (DFS) Topology 288

File Replication Service (FRS) 288

Site Aware Applications 289

Replication Latency 290

Replication Efficiency 290

Replication Cost 290

Intra-Site Replication 291

Inter-Site Replication 293

Placing the Domain Controllers (DC) 295

Connectivity 296

Available Bandwidth 297

Replication Traffic 298

Transport 299

Member Sites 300

Cost 300

Frequency 300

Schedule 300

Transports 303

Bridgehead Servers 304

Inter-Site Topology Generator 304

Least-Cost Spanning Tree 305

Placing the Global Catalog (GC) Server 306

Placing the Operation Masters 307

What Will the Team Handle? 325

What Roles Will the Team Members Play? 326

Vision 329

Scope 329

The Vision/Scope Document 329

Address Your Risks 330

Hardware and Software 331

Network Details 332

The Users within the Organization 333

The Goal 334

Design Your Naming Strategy 334

Design Your Domain (or Multiple Domain) Strategy 335

Design a Group Policy 337

Design Your Site Topology 337

Designing Your Schema 338

Planning for Growth 338

A Kerberos Transaction 355

Kerberos Vocabulary 356

Kerberos and Transitive Trusts 357

NT 4 Permissions 360

File Permissions under Windows 2000 363

How Does EFS Work? 369

Password Policy 371

Account Lockout Policy 371

Audit Policy 372

User Rights Assignment 373

Security Options 374

How Do Smart Cards Work? 375

The IPSec Monitor 377

Performance Console and Replication 389

Task Manager 390

NETSVC 396

DSASTAT 396

DNSCMD 396

MOVETREE 397

The Right Tool for the Job 397

Active Directory Restoration 402

Object Classes 416

Objects 416

Attributes 417

Syntax 418

Object Identifiers (OIDs) 419

Object Classes and Attributes Defined in the Schema 419

Static 422

Low-Latency 422

Transient 422

Installing Software Applications 423

Scripting 423

Using the Active Directory Schema Manager 423

Modifying a Class 425

Creating a New Class 426

Modifying an Attribute 427

Creating a New Attribute 428

Deactivating a Class or an Attribute 429

Indexing an Attribute 429

Replicating an Attribute to the Global Catalog 429

System Checks on the Schema 430

Time Interval Before Changes Take Effect 431

The Planning Team 445

The Vision and the Scope 447

Managing Risks 449

The Administrative Delegation Model 450

Physical Locations 453

The Current Business Practices 454

The Security Requirements 455

Future Growth of the Company 456

Existing Network Connections 457

Delegation of Administrative Authority 458

Group Policies 459

The Domain Structure 460

Schema Policy 461

Site Topology 462

The Naming Strategy 462

Designing the Active Directory Structure 475

Choose a Migration Path 475

Develop a Domain Upgrade or a Restructure Strategy 476

Plan the Deployment of the Migration Strategy 476

Defining the Existing Domain Arrangement 477

What Will Be Achieved from the Migration? 481

The Active Directory Design 482

Evaluating the Migration Paths 482

How Many Forests Are in the Design? 486

What Is the Site Topology of the Design? 487

What Are the Security and Administration Plans in the Design? 489

The Current Operating System 490

The Recovery Plan 491

Domain Upgrade Order 492

Upgrading Domain Controllers 493

Mixed Mode or Native Mode? 494

Post-Upgrade Tasks 495

Inter-Forest Restructuring 497

Intra-Forest Restructuring 501

Installing the Active Directory Connector 516

Creating Connection Agreements 519

Manage Your Objects Centrally 531

Troubleshoot Your Connector 533

Do You Need the ADC? 535

Some Questions You Need to Resolve 536

A Review of the Scenario Models 538

Final Issues 541