C LASSIC NT HAS MANY ECCENTRICITIES—big and small—that limit its scalability and functionality. Many of these eccentricities stem from NT's clumsy, flat-file,Registry-based account management system. What is lacking in classic NT is a true directory service capable of handling the management chores for a network containing hundreds of thousands, if not millions, of users, computers,groups, printers, shared folders, network appliances, and so forth.The hallmark of modern Windows is an enterprise-class directory service called Active Directory. We're going to spend thenext six chapters learning to configure, deploy, manage, and fix Active Directory. The purpose of this chapter is to introduceyou to the components of Active Directory and how they fit together.
We'll also take an initial look at the tools providedby Microsoft to access and modify the contents of Active Directory.New Features in Windows Server 2003Microsoft has done quite a bit of tuning on Active Directory in Windows Server 2003 to improve scalability and speed and to correcta couple of key deficiencies. Some of these updates might not make much sense until you read further, but here is a synopsisto use for reference. The first three features require having Windows Server 2003 on every domain controller:.Site scalability.The calculations for determining replication topology between sites have been streamlined. This corrects a problem where large organizationswith hundreds of sites might experience replication failure because the topology calculations cannot be completed in the timeallotted to them.Backlink attribute replication.Group members are now replicated as discrete entities instead of replicating the entire group membership list as a single unit. This correctsa problem where membership changes made to the same group on different domain controllers in the same replication intervaloverwrite each other.Federations.A new trust type called Forest was added to simplify transitive trust relationships between root domains in different forests. Using Forest trusts, it ispossible to build a federation of independent Active Directory forests.
This feature does not implement true “prune and graft” in Active Directory, butit goes a long way toward simplifying operations within affiliated organizations.Simplified domain logon.Universal group membership can be cached at non-global catalog servers. This permits users to log on even if connectivity to a global catalog serveris lost. Hoyle board games 2007 free download full version. This enhancement is coupled with a feature in XP where the domainname result of cracking a User Principal Name (UPN)is cached locally.
This permits a user at an XP desktop to log on with the format [email protected] even if a global catalog server is not available.Application naming contexts.Windows Server 2003 introduces the capability to create new naming contexts to hold DNS record objects for Active Directory Integrated zones. One naming context holds domain zone records and one holds the msdcsrecords used throughout a forest. These naming contexts make it possible to target replication of DNS zones only to domain controllers that are running DNS.Eliminate piling onto new domain controllers.There is potential for a problem when an NT4 primary domain controller (PDC) is upgraded to Windows Server 2003.
In this circumstance,all existing Windows 2000 and XP desktops will use the newly promoted PDC as a logon server. In Windows Server 2003, domaincontrollers can be configured to respond to modern Windows clients as if they were still classic NT domain controllers untilsufficient domain controllers are available to handle local authentication. This feature is also available in Windows 2000SP2 and later.DNS diagnostics.Proper DNS configuration is critical for proper Active Directory operation. The Domain Controller promotion utility now performs a suite of DNS diagnostics to ensure that a suitable DNS server is available to register the service locator resource records associated with a Windows domain controller.Fewer global catalog rebuilds.Adding or removing an attribute from the Global Catalog no longer requires a complete synchronization cycle. This minimizes the replication traffic caused by adding an attributeto the GC.Management console enhancements.The Active Directory Users and Computers console now permits drag-and-drop move operations and modifying properties on multiple objects at thesame time.
There is also the capability of creating and storing custom LDAP queries to simplify managing large numbers of objects. The new MMC 2.0 console includes scripting support that can eliminatethe need to use the console entirely.Real-time LDAP.Support was added for RFC 2589, “LDAPv3: Extensions for Dynamic Directory Services.” This permits putting time-sensitive informationin Active Directory, such as a user's current location.
Dn Distinguished Name Active Directory
Dynamic entries automatically time out and are deleted if they arenot refreshed.Enhanced LDAP security.Support was added for digest authentication as described in RFC 2829, “Authentication Methods for LDAP.” This makes it easier to integrate Active Directory into non-Windows environments.
Distinguished Name Active Directory Format
If you want a graphical tool to find the DN of an Active Directory object then the free Microsoft tool LDP.exe should do the trick. Batman begins pc game download.