Introduction |
|
xi | |
|
Active Directory: The Directory Service for Microsoft Windows Networks |
|
|
1 | (28) |
|
Introducing Active Directory |
|
|
2 | (8) |
|
Active Directory as the Directory Service for the Operating System |
|
|
2 | (5) |
|
Active Directory as a Directory Service for Applications |
|
|
7 | (2) |
|
Active Directory Is an Application Itself |
|
|
9 | (1) |
|
The Power of Active Directory |
|
|
9 | (1) |
|
Introduction to Multinational Mega Corporation and Heartland Hospital |
|
|
10 | (1) |
|
The Building Blocks of Active Directory |
|
|
10 | (13) |
|
|
10 | (4) |
|
|
14 | (1) |
|
The Active Directory Schema |
|
|
15 | (1) |
|
Active Directory Classes, Objects, and Attributes |
|
|
16 | (3) |
|
Replication and Partitions |
|
|
19 | (2) |
|
Searching and Global Catalog Servers |
|
|
21 | (2) |
|
|
23 | (1) |
|
|
24 | (1) |
|
|
25 | (2) |
|
MNC/Heartland Hospital Case Projects |
|
|
27 | (2) |
|
|
27 | (2) |
|
Installing Active Directory |
|
|
29 | (38) |
|
Understanding the Domain Name System |
|
|
30 | (11) |
|
|
30 | (1) |
|
|
30 | (3) |
|
|
33 | (3) |
|
The DNS Name Resolution Process |
|
|
36 | (4) |
|
Common Errors and Misconceptions About DNS |
|
|
40 | (1) |
|
Using DNS with Active Directory |
|
|
41 | (7) |
|
|
41 | (1) |
|
|
41 | (1) |
|
Resolving Names to IP Addresses |
|
|
42 | (1) |
|
Installing Microsoft DNS Server in Windows Server 2003 |
|
|
42 | (6) |
|
Installing Active Directory |
|
|
48 | (13) |
|
Exploring Available Options in the Active Directory Installation Wizard |
|
|
48 | (1) |
|
Gathering the Required Information |
|
|
48 | (2) |
|
Running the Active Directory Installation Wizard |
|
|
50 | (11) |
|
|
61 | (1) |
|
|
62 | (1) |
|
|
62 | (2) |
|
Multinational Mega Corporation Case Projects |
|
|
64 | (3) |
|
An Active Directory Design Philosophy |
|
|
67 | (16) |
|
Introducing Design Philosophy |
|
|
68 | (1) |
|
|
69 | (2) |
|
|
71 | (1) |
|
Making Active Directory Design Decisions |
|
|
72 | (2) |
|
Design to Support the Organization's Goals |
|
|
72 | (1) |
|
Gaining Executive Sponsorship with Documented Value |
|
|
72 | (1) |
|
Designing for the Future and the Present |
|
|
73 | (1) |
|
Designing to Support the Delegation of Authority |
|
|
73 | (1) |
|
Designing to Support the Application of Group Policy |
|
|
74 | (1) |
|
|
74 | (1) |
|
Starting a Design Project |
|
|
74 | (3) |
|
Microsoft Solutions Framework (MSF) |
|
|
75 | (1) |
|
Microsoft Operations Framework (MOF) |
|
|
76 | (1) |
|
|
77 | (1) |
|
|
78 | (1) |
|
|
79 | (1) |
|
|
80 | (2) |
|
|
82 | (1) |
|
Practical Active Directory Design Decisions |
|
|
83 | (34) |
|
|
84 | (9) |
|
What Makes a Good DNS Name? |
|
|
84 | (2) |
|
Choosing How DNS Names for Internet and Active Directory Will Be Related |
|
|
86 | (5) |
|
Best Practices for Choosing a DNS Name |
|
|
91 | (2) |
|
|
93 | (1) |
|
Characteristics of a Forest |
|
|
93 | (1) |
|
|
93 | (1) |
|
Understanding and Implementing Trust Relationships |
|
|
94 | (7) |
|
Two-Way, Transitive Trusts |
|
|
94 | (2) |
|
|
96 | (2) |
|
Explicit Inter-Forest Trusts |
|
|
98 | (3) |
|
|
101 | (4) |
|
|
102 | (1) |
|
|
103 | (1) |
|
Is It a Security Boundary? |
|
|
104 | (1) |
|
Which Works Better: Single or Multiple Domains? |
|
|
104 | (1) |
|
Using a Dedicated Forest Root |
|
|
104 | (1) |
|
Designing Organizational Units |
|
|
105 | (1) |
|
Best Practices for Designing OUs |
|
|
106 | (2) |
|
|
108 | (1) |
|
|
109 | (1) |
|
|
110 | (2) |
|
Heartland Hospital Case Projects |
|
|
112 | (5) |
|
Managing Directory Objects: Users, Groups, and Resources |
|
|
117 | (44) |
|
Creating and Managing User Objects |
|
|
118 | (21) |
|
User Classes, Properties, and Schema |
|
|
118 | (1) |
|
Creating Users with Active Directory Users and Computers |
|
|
118 | (5) |
|
Setting Additonal Attributes |
|
|
123 | (14) |
|
|
137 | (2) |
|
Creating Users Programmatically |
|
|
139 | (1) |
|
|
139 | (10) |
|
|
139 | (1) |
|
|
140 | (4) |
|
Groups as Members of Other Groups |
|
|
144 | (1) |
|
|
145 | (1) |
|
|
146 | (3) |
|
Creating Resource Objects |
|
|
149 | (2) |
|
|
149 | (1) |
|
|
150 | (1) |
|
|
150 | (1) |
|
Organizing Objects in the Directory |
|
|
151 | (3) |
|
Organizing and Controlling with OUs |
|
|
151 | (2) |
|
Moving Objects between OUs |
|
|
153 | (1) |
|
Moving Objects between Domains |
|
|
153 | (1) |
|
|
154 | (1) |
|
|
154 | (1) |
|
|
155 | (2) |
|
Heartland Hospital Case Projects |
|
|
157 | (4) |
|
Securing and Protecting the Network |
|
|
161 | (42) |
|
Security Concepts in Active Directory |
|
|
162 | (8) |
|
|
163 | (2) |
|
Kerberos Tickets and Access Tokens |
|
|
165 | (1) |
|
Discretionary Access Control Lists (DACL) |
|
|
166 | (1) |
|
System Access Control Lists (SACL) |
|
|
166 | (1) |
|
|
166 | (2) |
|
|
168 | (1) |
|
|
168 | (2) |
|
Protecting Objects in Active Directory |
|
|
170 | (6) |
|
|
170 | (2) |
|
|
172 | (4) |
|
Protecting Network Resources |
|
|
176 | (10) |
|
The NT File System (NTFS) |
|
|
176 | (5) |
|
|
181 | (1) |
|
|
181 | (1) |
|
|
182 | (3) |
|
|
185 | (1) |
|
Understanding the User Authentication Process |
|
|
186 | (9) |
|
|
186 | (1) |
|
|
187 | (3) |
|
|
190 | (1) |
|
Down-Level Client Authentication |
|
|
191 | (1) |
|
Two-Factor Authentication |
|
|
192 | (1) |
|
Public Key Infrastructure for Authentication with Smart Cards |
|
|
193 | (2) |
|
|
195 | (1) |
|
|
196 | (1) |
|
|
197 | (2) |
|
Heartland Hospital Case Projects |
|
|
199 | (4) |
|
|
203 | (32) |
|
|
204 | (1) |
|
Active Directory Objects Related to Sites |
|
|
204 | (14) |
|
Naming Contexts (Partitions) |
|
|
204 | (5) |
|
|
209 | (1) |
|
|
210 | (1) |
|
|
211 | (1) |
|
|
212 | (4) |
|
|
216 | (1) |
|
|
217 | (1) |
|
Planning and Designing Sites |
|
|
218 | (4) |
|
|
218 | (1) |
|
|
219 | (3) |
|
Creating and Managing Sites |
|
|
222 | (5) |
|
Assigning Computers to Sites |
|
|
223 | (1) |
|
|
223 | (2) |
|
Modifying the Default-First-Site-Name Site |
|
|
225 | (1) |
|
|
225 | (1) |
|
Configuring Site Link Bridges |
|
|
226 | (1) |
|
|
227 | (1) |
|
|
227 | (1) |
|
|
228 | (2) |
|
Heartland Hospital Case Projects |
|
|
230 | (5) |
|
Active Directory Replication |
|
|
235 | (22) |
|
|
236 | (2) |
|
|
236 | (1) |
|
|
236 | (2) |
|
|
238 | (2) |
|
Active Directory Partitions |
|
|
238 | (1) |
|
|
238 | (1) |
|
|
239 | (1) |
|
|
240 | (1) |
|
|
240 | (1) |
|
Managing Active Directory Replication |
|
|
240 | (5) |
|
|
241 | (2) |
|
|
243 | (2) |
|
Monitoring Active Directory Replication |
|
|
245 | (3) |
|
|
248 | (2) |
|
|
248 | (1) |
|
|
249 | (1) |
|
|
249 | (1) |
|
|
249 | (1) |
|
|
250 | (1) |
|
Troubleshooting Active Directory Replication |
|
|
250 | (1) |
|
|
251 | (1) |
|
|
251 | (2) |
|
|
253 | (3) |
|
Heartland Hospital Case Project |
|
|
256 | (1) |
|
Active Directory Maintenance and Data Recovery |
|
|
257 | (26) |
|
Active Directory File Structure |
|
|
258 | (1) |
|
|
258 | (1) |
|
|
259 | (1) |
|
|
259 | (1) |
|
|
259 | (1) |
|
|
259 | (1) |
|
|
259 | (1) |
|
How Data is Written to Active Directory |
|
|
259 | (1) |
|
|
260 | (1) |
|
Defragmenting the Database |
|
|
260 | (3) |
|
|
261 | (1) |
|
|
261 | (2) |
|
Moving the Active Directory Database |
|
|
263 | (1) |
|
Backing up Active Directory |
|
|
263 | (2) |
|
Recovering Active Directory |
|
|
265 | (6) |
|
|
265 | (1) |
|
Repairing Active Directory |
|
|
265 | (1) |
|
Restoring Active Directory |
|
|
266 | (5) |
|
Reinstalling Active Directory |
|
|
271 | (1) |
|
|
271 | (6) |
|
Changing the Holder of Operations Master Roles |
|
|
273 | (4) |
|
|
277 | (1) |
|
|
277 | (1) |
|
|
278 | (3) |
|
Heartland Hospital Case Projects |
|
|
281 | (2) |
|
Using Active Directory as a Tool to Enforce Corporate Policy |
|
|
283 | (36) |
|
|
284 | (4) |
|
|
284 | (1) |
|
|
285 | (3) |
|
|
288 | (9) |
|
|
288 | (3) |
|
Modifying Group Policy Priority |
|
|
291 | (4) |
|
Controlling Group Policy Application with Permissions |
|
|
295 | (1) |
|
Windows Management Instrumentation Filters |
|
|
296 | (1) |
|
Desktop Management with Group Policy |
|
|
297 | (4) |
|
|
297 | (1) |
|
|
297 | (3) |
|
|
300 | (1) |
|
Application Distribution with Group Policy |
|
|
301 | (4) |
|
|
301 | (2) |
|
|
303 | (2) |
|
Security Management with Group Policy |
|
|
305 | (5) |
|
|
305 | (1) |
|
|
306 | (1) |
|
|
306 | (1) |
|
|
306 | (1) |
|
|
306 | (1) |
|
|
306 | (1) |
|
Wireless Network Policies |
|
|
306 | (1) |
|
|
307 | (1) |
|
|
307 | (1) |
|
|
308 | (2) |
|
Troubleshooting Group Policy |
|
|
310 | (2) |
|
|
310 | (2) |
|
|
312 | (1) |
|
|
312 | (2) |
|
|
314 | (3) |
|
Heartland Hospital Case Projects |
|
|
317 | (2) |
|
Interoperability Between Active Directory and Other Directories |
|
|
319 | (18) |
|
Lightweight Directory Access Protocol |
|
|
320 | (6) |
|
A Common Protocol for Directory Access |
|
|
320 | (1) |
|
LDAP and Active Directory |
|
|
321 | (1) |
|
|
322 | (1) |
|
Lightweight Directory Interchange Format |
|
|
323 | (1) |
|
Querying Active Directory Using LDAP |
|
|
324 | (2) |
|
Active Directory Services Interface |
|
|
326 | (3) |
|
A Common Programming Mechanism for Directory Access |
|
|
326 | (1) |
|
Administrative Uses for ADSI |
|
|
326 | (3) |
|
Microsoft Metadirectory Services |
|
|
329 | (1) |
|
|
329 | (1) |
|
Active Directory Connector |
|
|
330 | (1) |
|
|
330 | (1) |
|
Configuring Connection Agreements |
|
|
330 | (1) |
|
|
331 | (1) |
|
|
331 | (1) |
|
|
332 | (2) |
|
Heartland Hospital Case Projects |
|
|
334 | (3) |
|
Upgrading a Windows NT or Windows 2000 Domain |
|
|
337 | (24) |
|
Active Directory Functionality Levels |
|
|
338 | (11) |
|
Windows 2000 Mixed Domains |
|
|
339 | (1) |
|
Windows 2000 Native Domains |
|
|
340 | (2) |
|
Windows 2003 Interim Domains |
|
|
342 | (1) |
|
Windows 2003 Native Domains |
|
|
342 | (3) |
|
|
345 | (1) |
|
Windows 2003 Interim Forests |
|
|
346 | (1) |
|
|
346 | (3) |
|
Upgrading Windows NT Domains |
|
|
349 | (4) |
|
|
349 | (1) |
|
Keeping the Existing Domain Structure |
|
|
350 | (2) |
|
Creating a New Domain Structure |
|
|
352 | (1) |
|
|
352 | (1) |
|
Upgrading Windows 2000 Domains |
|
|
353 | (1) |
|
Adding Windows Server 2003 Domain Controllers |
|
|
353 | (1) |
|
Restructuring Existing Domains |
|
|
353 | (1) |
|
|
354 | (1) |
|
|
355 | (1) |
|
|
356 | (2) |
|
Sacred Heart Hospital Case Projects |
|
|
358 | (3) |
Glossary |
|
361 | (10) |
Index |
|
371 | |