AD Practical Guide PDF

2 -
..

...
Active Directory Practical Guide

By Alaa Amin me9000@hotmail.com
3 -
AD Replication ... 4
AD Partition 6
Practical Guide ... 7
Routing ....8
RIP V2 .... 20
DCPROMO.... 25
Domain Function Level ........31
Additional Domain Controller .....33
Working With AD Sites and Services .... 35
SIT LINK COST..39
Windows Deploying Service 41
SITE LINK BRIDGE ...53
Operations Master Roles .. 55
Read Only Domain Controller .73
Child Domain 93
AD Trust And Relationship ... 102
Tree Root Domain 116
Forest Trust ..130

4 -
ACTIVE DIRECTORY REPLICATION
,
Forest
Forest Domain Tree
Windows Server Active Directory Role New Domain

Forest Domain Tree -:
Forest Tree Domain Tree Domain
Tree Domain
Domain
-:
Root Domain First -1 The Primary Domain
domain Tree -:
Forest -
( Domain naming Master Role ) -
Global Catalog by default -

5 -
Default first site name -
Additional Domain -2
Domain
Domain .
)RODC( Read Only Domain -3
Domain
Domain .
Child Domain - 4
Domain Domain Domain

Child .
Forest Domain Tree Domain
-:
Replication Active Directory

Additional Domain Child Domain
Replication .. Active Directory
Active Directory
Active Directory Windows

Server

..... Network Administrator
.

6 -
Ad partition
: Active Directory
Domain partition -1
Configuration partition -2
Schema partition -3
Application partition -4
Domain partition
Computer Objects ,. User Objects Groups. Container

Active Directory User and Attributes
Computer Consol
Configuration Partition
Sites Active Directory

Active Directory Site and Services Consol Forest Domain Controllers
Schema Partition
ADUser and Computer Consol Attributes Objects

Domain Schema Master Domain Controller
Schema Partition Controllers
Application partition
Active Directory
. Active Directory Integrated Exchange Server

7 -
Practical Guide
)Domain name : target.org (win srvr 2012
Dns ip is 10.10.10.2 /8
)Branch in Cairo has 172.16.1.2/16 (win srvr 2008
)Branch in Doha has 192.168.1.2/24 (win srvr 2008
Real Ip For Routing is 66.249.64.231/8
-:

8 -
ROUTING
R
Router outing
-:
router router ip
.
Microsoft routing Hyper V

( ) Hyper V
: router Microsoft vmware

Hyper V permeatal Cisco router
Routers :-

9 -

01 -

00 -

02 -
-:
-1 IP router router
( )E1 IP ( )E2 Static IP

-2 routing LAN Routing router

( )
router
.

03 -
router router
IP -:

04 -
router 2 subnet 3 :-
Sub No Location IP Router No

1 Riyadh 10.10.10.2 R1
2 Doha 1.2.168.1.2 R2
3 Internet 66.24..64.231 Act Link
( )R1 ( )R2 ()Act Link
-:
05 -
Static routers
Route router 1 router 2
Subnet .
-:

06 -
-:

07 -

08 -
-: subnet 4 router 3
Sub No Location IP Router No

1 Riyadh 10.10.10.2 R1
2 Doha 1.2.168.1.2 R2
3 Cairo 1.2.16.1.2 R3
4 Internet 66.24..64.231 Act Link

09 -
routers router
:
Sub No Location IP Router No Link with

1 Riyadh 10.10.10.2 R1 R2,R3
2 Doha 1.2.168.1.2 R2 R1,R3
3 Cairo 1.2.16.1.2 R3 R1,R2

21 -
RIPV2
( (Routing Information Protocol RIP v2

Static Route -:

20 -
router
( )Join Domain * -:

22 -
* AD Sites and Services

23 -

24 -

Active Directory -:

25 -
DCPROMO

26 -

27 -

28 -

29 -

31 -

2112 2118

2112

))Raise Domain Function Level

30 -
Raise Domain Function Level

32 -
-: 2118 2112 Function level
Raise Forest
Import-Module Name ActiveDirectory
Get-ADForest | Format-Table Name , ForestMode
Set-ADForestMode Identity target.org ForestMode Windows2008Forest
Raise Domain
Get-ADDomain identity target.org
Set-ADDomainMode identity target.org DomainMode Windows2008Domain
. Domain/ forest

33 -
ADD DOMAIN
Active Directory

34 -
Default-Site-First-Name

35 -
Additional Domain Primary

Domain Primary Domain
Replication Server.
Replication Sites:
INTRA Site Replication )(Site
INTER Site Replication -:
SIT AND SERVICE

User Active Directory

11 3 ( )
INTER Site Replication MSTP or RPC
11
INTRA Site Replication . KCC
Replication
Active Directory Sites and Services .

36 -

37 -

38 -

39 -
SITE LINK COST
Cost Site Link

321 ) 1024 line speed (Log
112
Site Link Cost Site
Link Cost )3.. = 1024 112(Log
321 3..
! ..
-:
Replication Updates .

41 -
(WDS) Windows Deployment Service

Windows Deployment Service

WDS

40 -
WDS

42 -
WDS
IP
WDS .

43 -

44 -

45 -

46 -

47 -

48 -

49 -

51 -
Replication Test
Replication

50 -

Replication Site link .
Replication

52 -

53 -
Site Link Bridge
Site Link Replication .

Site Link Bridge .
Replication C
-:
Link Replication
Link
Replication ( )Site A Updates
Replication (. )Site B
Site Link Bridge Site B/C . Site A

54 -
Replication
Parent Domain

55 -
Operations Master Roles

) (Roles Forest Forest-Wide
Operations Master Roles Domain Domain-Wide Operations Master Roles
Flexible Single Master Operation ()FSMO
Role DC Domain
Domain Controllers Servers Server .
Rols -:
1- Domain naming Master Role
2- Schema Master Role
)3- RID Master Role (Relative ID Master Role
)4- PDC Master Role (Primary Domain Controller
5- Infrastructure Master Role
Forest Schema Master Domain Naming Master -:
Domain Naming Master Role
Role Domain Name Forest

Tree Forest Level Domain Forest Parent
Domain Domain
Replication Role
Schema Master Role
Role Clases Attributes Forest

Domain naming Master Role Domain
Objects . Attributes
Role -:
56 -
Start run regsvr32 schmmgmt.dll
Start run mmc
From Consol File add/remove snap in

57 -

58 -
RID Master Role
Object AD user group computer DC

RID Master Object Security ID
Active directory Alaa RID Master ID S-
1-5-21-895771394-4047885310-268483753-1006. NTFS
AD
AD
RID Master Security ID .
Role
Active Directory Users and Computers R.click on domain Operation master

59 -
PDC Emulator Role
Role Synchronize
Domain Machine Connect
PDC Emulator
Domain Browser
Domain Group Policy
Role RID Role

61 -
Infrastructure Master Role
Role Objects

Infrastructure Master Modification .
Role RID Role PDC Role
Tow Rolls Domain

Forest
Child Tree Additional
Rolls

Parent Domain Controller Online
Parent Domain Controller Offline

60 -
FSMO Roles Server Parent Domain Controller Online

Domain Replication
Server Parent Domain ( )Target.org
Server Parent Domain Controller ( )Target.org

( )DC Domain Forest

-:
Netdom query /dyour domain name) pdc
Netdom query fsmo
Parent Domain Controller ( )Target.org

( )DC FSMO Server Server .
62 -
Schema Role

63 -

64 -

65 -

66 -
-: ) CMD( Schema
1. Open Command Prompt.

2. Type: ntdsutil
3. At the ntdsutil command prompt, type: roles
4. At the fsmo maintenance command prompt, type: connection
5. At the server connections command prompt, type: connect to server (type your server name that you
want to transfer to him )
6. At the server connections command prompt, type: quit
7. At the fsmo maintenance command prompt, type: transfer schema master

67 -
Domain Naming Master Role

68 -
-: ) CMD( Domain Naming

2. Type: ntdsutil
7. At the fsmo maintenance command prompt, type: transfer naming master

69 -
PDC , RID , Infrastructure Master Role

71 -
) CMD( PDC , RID , Infrastructure

-:

2. Type: ntdsutil
7. At the fsmo maintenance command prompt, type: transfer (RID) or (PDC) or (Ifrastructure)

70 -
Operation Master Roles

GUI Server Parent
Domain Controller Online
Parent Domain Controller
Offline
Offline Parent Domain Controller FSMO Roles
Seize :
seize
Seize role Domain Controller Domain Controller
( ) role
seize Domain Controller .
Parent Domain Controller Target.org Seize

72 -
Seize Parent Domain Controller
Seize
2. Type: ntdsutil
7. At the fsmo maintenance command prompt, type seize (role name )

73 -

: seize role Server
Format Server . Domain Naming
server1 Domain Naming Master seize role

server2
server1 Formatting Transfer role
server2 server1 .

74 -
RODC
Replication Additional Domain Domain RODC

RODC Additional Domain
Authorization
RODC Domian
Authentication RODC Domain RODC

RODC
RODC Server IP Server Name

75 -

76 -

77 -

78 -

79 -

81 -
RODC
80 -

82 -

83 -

84 -
Delegation

85 -
rodc-admin RODC

86 -
Rodc Writable Domain

RODC Writable Domain
Domain RODC
Cache RODC
RODC Users -:

87 -

88 -

89 -

91 -

90 -
User 2 -:
Rodc-admin RODC -
Rodc2 RODC Writable Domain -
RODC

-:
92 -
RODC

93 -
Child Domain
Child Domain Domain

Sub-Domain Users ,
Domain Domain Enterprise Administrator
Child Domain
Database
Additional or RODC Replication Object
Forest
Enterprise Administrator

Child Domain Child Domain Grand Child
Child domain Domain
Child Domain
Parent Domian is : Yahoo.com
Child domain is : mail.yahoo.com
Parent Domian is : google.com
Child domain is : paly.google.com
Parent Domian is : 93icrosoft.com
Child domain is : windows. microsoft.com

94 -
child Europe
Child Domain Name Eu.target.org
router Server
Child Site Subnet
Child Domain

IP Child
IP Deferent Site

95 -

96 -

97 -

98 -

99 -
Domain Domain domain

parent domain Domain

Eu Target
-:

011 -

010 -

..........

012 -
ACTIVE DIRECTORY TRUST RELATIONSHIP
Child OR Parent
TRUST RELATIONSHIP
DOMAIN CHILD IMPLICIT
Forest
EXPLICIT
) ( AD DOMAIN AND TRUSTS -:

013 -
) ( AD DOMAIN AND TRUSTS .

014 -
: -
( TRANSITIVE TRUSTS - 1 )
....... : A B C
A .... B B C
( )B/C ( )A/C ( )
( NON TRANSITIVE TRUSTS -2 )

015 -
: -
TRUST TWO WAY -1
A B 111- 111
TRUST ONE WAY -2
A B B
B A
-:
A PARENT AND CHILD TRUST -1
111- 111
TREE ROOT TRUST -2
New Tree Forest

TRANSITIVE TWO WAY .

016 -
SHORTCUT TRUST -3
TRANSITIVE TRUSTS A C
B SHORTCUT
. TRANSITIVE TWO WAY
ONE WAY .
REALM TRUST -4
TRUST KERBEROS V5
. Unix
EXTERNAL TRUST -5
TRUST Forest TRUST ONE WAY

TWO WAY TRANSITIVE ... Forest
Forest .
FOREST TRUST -6
HP Compaq Tow Domain and Two Forests

TRUST ROOT DOMAIN IN TWO FORESTS
FOREST
ONE WAY TWO WAY TRANSITIVE TRUST

017 -

PARENT AND CHILD TRUST Built in

Built in Trust

018 -

019 -

001 -

000 -

002 -

003 -

004 -
Parent / Child
Child Domain Parent Domain ...

005 -
Forest Parent Domain Additional

Child Domain RODC Domain Tree Domain
Tree
Forest Tree .
Tree Frost .

006 -
Tree Root Domain

target.org
4
Tree Domain
Tree Domain Forest
TREE
Database Tree Domain Forest

RODC / Child / Additional
( Administrator Domain )Forest Enterprise Administrator Forest
Tree Aim.com .
-:

007 -
Routing Tree Forest

008 -

009 -

021 -

020 -

022 -

023 -

024 -
Tree Forest tree 2 target.org aim.com

TREE ROOT TRUST root
khaled@aim.com
yahya@target.org .
DNS aim.com
yahya
Target.org DNS Target Tree aim.com
khaled broadcast request
DNS Target Tree

DNS aim.com
DNS :

025 -

026 -

027 -

028 -

029 -

031 -
FOREST TRUST
Forest New Forest

Target.org Forest
New Forest
Network Connection New Forest
)Domain name : ACS.com (win srvr 2012
local ip is 96.10.20.10 /24
Real Ip For Routing is 66.249.64.228/8

030 -


AD Practical Guide PDF

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

AD Practical Guide PDF

Transféré par

Droits d'auteur :

Formats disponibles

2 -

Active Directory Practical Guide

Practical Guide ... 7

Domain Function Level ........31

Additional Domain Controller .....33

Working With AD Sites and Services .... 35

SIT LINK COST..39

Windows Deploying Service 41

SITE LINK BRIDGE ...53

Operations Master Roles .. 55

Read Only Domain Controller .73

AD Trust And Relationship ... 102

Tree Root Domain 116

Forest Trust ..130

Active Directory Practical Guide

ACTIVE DIRECTORY REPLICATION

Forest Domain Tree

Windows Server Active Directory Role New Domain

Forest Domain Tree -:

Forest Tree Domain Tree Domain

Root Domain First -1 The Primary Domain

Active Directory Practical Guide

)RODC( Read Only Domain -3

Domain Domain Domain

Forest Domain Tree Domain

Replication Active Directory

Active Directory Windows

Active Directory Practical Guide

Computer Objects ,. User Objects Groups. Container

Sites Active Directory

ADUser and Computer Consol Attributes Objects

Active Directory Practical Guide

)Domain name : target.org (win srvr 2012

)Branch in Cairo has 172.16.1.2/16 (win srvr 2008

)Branch in Doha has 192.168.1.2/24 (win srvr 2008

Real Ip For Routing is 66.249.64.231/8

Active Directory Practical Guide

Microsoft routing Hyper V

: router Microsoft vmware

Active Directory Practical Guide

Active Directory Practical Guide

Active Directory Practical Guide

Active Directory Practical Guide

-2 routing LAN Routing router

Active Directory Practical Guide

Active Directory Practical Guide

Sub No Location IP Router No

( )R1 ( )R2 ()Act Link

Active Directory Practical Guide

Active Directory Practical Guide

Active Directory Practical Guide

Sub No Location IP Router No

Active Directory Practical Guide

Sub No Location IP Router No Link with

Active Directory Practical Guide

( (Routing Information Protocol RIP v2

Active Directory Practical Guide

Active Directory Practical Guide

* AD Sites and Services

Active Directory Practical Guide

Active Directory Practical Guide

Active Directory Practical Guide

Active Directory Practical Guide