Download to read offline
ACTIVE-DIRECTORY and m365 hybrid identity.ppt
- 1.
- 2. ACTIVE DIRECTORY • MicrosoftDirectory service • Initially released in 1999 • Originally designed for Windows 2000 Server • Enhanced with Windows Server 2008 and Windows server 2012
- 3. Active Directory isa Directory Service which Contains Information of All User Accounts and Shared Recourses on a Network. A directory service (DS) is a software application- or a set of applications - that stores and organizes information about a computer network's users and network resources. •Active Directory is a Centralized Hierarchical Directory Database •Allows network administrators to manage users' access to the resources •Act as an abstraction layer between users and shared resources ACTIVE DIRECTORY
- 4. What Is ActiveDirectory? Directory service functionality Organize Manage Control Centralized management Single point of administration Active Directory Resources
- 5. 1.Provide User Logonand Authentication Services 2.To organize and manage: User Accounts Computers Groups and Network Resources 3 Enables authorized Users to easily locate: Network Resources PURPOSE OF ACTIVE DIRECTORY
- 6. 1.Fully Integrated Security 2.EasyAdministration using Group Policy 3.Scalable to any Size Network 4.Flexible FEATURES OF ACTIVE DIRECTORY NEW FEATURES IN ACTIVE DIRECTORY Provide file shares. Authenticate users Control access to services and shares Provide services, such as Email, Access to the internet, Print services etc.
- 7. How Directory ServiceEvolved Server (Directory System Agent) Directory Info Base Directory Info Tree Backup Server Client (Directory User Agent) DAP DOP Directory Organization Management Protocol Earlier we had no DATABASE Standard So ITU & ISO introduced X.500
- 8. DAP Directory AccessProtocol is based on OSI Layers LDAP Lightweight Directory Access Protocol based on TCP/IP Layer DAP was introduced in BANYAN VINES It named the Database as STREET TALK LDAP was first Introduced in NOVELL Novell named it NDS ( Network Directory Services
- 9. Logical Structure ofActive Directory FOREST TREE Parent/Root Child/Branch
- 10. Domains: Trees, Forests,Trusts, and Outs Active Directory is made up of one or more domains. Creating the initial domain controller in a network also creates the domain—you cannot have a domain without at least one domain controller. Each domain in the directory is identified by a DNS domain name. You use the Active Directory Domains and Trusts tool to manage domains. Domains: Trees, Forests Active Directory is made up of one or more domains. Creating the initial domain controller in a network also creates the domain—you cannot have a domain without at least one domain controller. Each domain in the directory is identified by a DNS domain name. You use the Active Directory Domains and Trusts tool to manage domains.
- 11. • In theWindows 2003 operating system, a tree is a set of one or more domains with contiguous names. • If more than one domain exists, you can combine the multiple domains into hierarchical tree structures. • The first domain created is the root domain of the first tree. • Additional domains in the same domain tree are child domains. • A domain immediately above another domain in the same domain tree is its parent. TREE
- 12.
- 13. • Multiple domaintrees within a single forest do not form a contiguous namespace; that is, they have noncontiguous DNS domain names. • Although trees in a forest do not share a namespace, a forest does have a single root domain, called the forest root domain. • The forest root domain is, by definition, the first domain created in the forest. • The two forest-wide predefined groups—Enterprise administrators and Schema administrators—reside in this domain. FOREST
- 14. (Forest/Tree Root) CISCO.COM MCSE.COM (TreeRoot) Tree Forest CCNA.CISCO.COM (Child Domain) Tree FOREST
- 15. Physical Components ofActive Directory Domain Controllers Sites
- 16. zoom.com India USA WAN Link Sites Subnetsare associated with sites A site can span multiple domains A domain can Span multiple sites