Serviceswindowsserver

WindowsServer2003ActiveDirectoryCS526SemesterProjectSpring2006PatriciaC.
MarquezMicrosoftActiveDirectoryistheWindowsServer2003directoryservice.
Directoryservicesenablethemanagementofnetworkresourceinformation.
ActiveDirectoryusestheLightweightDirectoryAccessProtocol(LDAP).
LDAPdefinesthedirectoryaccessmethodsandemploystheX.
500directorystandard.
IntroductionDevelopanapplicationtoprogrammaticallyqueryandmodifythedirectorydatausingActiveDirectoryServiceInterfaces(ADSI).
InstallWindowsServer2003ConfiguretheserverasadomaincontrollerConfiguretheserverasaDNSserverInstallActiveDirectoryCreateaDirectoryInformationTreeConfigureaWindowsXPclienttoaccessthedirectoryviaadirectory-enabledapplication.
GoalsAdirectoryserviceisatypeofserviceusedtomanagenetworkresourceinformationsuchasusers,printers,files,applications,andevenotherservices.
Theinformationisstoredinaspecialtypeofdatabase.
Thedatarepositoryisreferredtoasadirectorybecauseofitshierarchicalstructure.
TheX.
500Standarddefinesthearchitectureandfeaturesofadirectoryservice.
Thisincludesthedatamodel,namespace,functionalmodel,andauthenticationmethods.
Directorydataisaccessedusingtheclient/servermodel.
Directoryservicesareidealforlargedistributedenvironments.
Distributedapplicationscanbedirectory-enabledtoaccessdirectorydatausingassociatedAPIs.
OverviewofDirectoryServicesAnopenindustrystandardfordirectoryaccess.
Definesastandardmethodforqueryingandupdatinginformationinadirectoryincludingthetransportandformatofmessages.
Lessresource-intensivethanDAPbecause:ItrunsdirectlyoverTCP/IPinsteadofrequiringtheentireOSIprotocolstacktooperate.
ItusesasimplifiedversionoftheX.
500directorydatamodel.
LDAPprovidesAPIsforCandJava.
LightweightDirectoryAccessProtocolTheMicrosoftWindowsServerdirectoryserviceItsprimaryprotocolisLDAPThedatamodelisderivedfromtheX.
500datamodelResourcesarerepresentedasobjects.
ThedatabasecanholdabillionobjectsProvidesaccesscontrolandauthenticationSupportsintersiteandintrasitereplicationProvidesitsownAPI:ActiveDirectoryServiceInterfaces(ADSI)ActiveDirectoryHighlightsCLIENTSActiveDirectoryDataStoreINTERFACESWindowsServer2003SecuritySubsystemExtensibleStorageEngineLDAPREPLMAPISAMApplicationsReplicationOutlookClientsWindowsNT4PrimarydatafileWorkingFilesTransactionsLogsPhysicalArchitectureDIRECTORYSERVICELOGON/ACCESSCONTROLMECHANISMSAUTHENTICATIONMECHANISMSDirectoryServiceModuleLSAServerNTLMAuthenticationProviderKDCKerberosSSLNETLOGONSecurityAccountsManagerWindowsServer2003SecuritySubsystemBuildingblocksinclude:ForestsDomainsOrganizationalUnitsGroupsObjects:users,computers,printers,etceteraTrustrelationshipsSitesReplicationLogicalArchitectureForestwithDomainTreesandTrustRelationshipAforestisalogicalgroupingofdomaintreesAdomaintreeisalogicalgroupingofdomainsDomainwithOrganizationalUnitTreeSolutionstoActiveDirectorylimitations:NoeasywaytorearrangethestructureofexistingforestsNoeasywaytomergeoneforestwithanothertoformasingleforestNoeasywaytosplitdomainsoffaforesttoformanewforestResearchusingDirectoryServicesMarkupLanguage(DSML)toaccessmydirectory.
FutureResearchKouti,Sakari,andMikaSeitsonen.
InsideActiveDirectory–ASystemAdministrator'sGuide.
Addison-Wesley,2002Stanek,WilliamR.
MicrosoftWindowsServer2003InsideOut.
MicrosoftPress,2004Tuttle,Steven,AmiEhlenberger,RamakrishnaGorthi,JayLeiserson,RichardMacbeth,NathanOwen,SunilRanahandola,MichaelStorrs,andChunhuiYang.
UnderstandingLDAP–DesignandImplementation.
IBMRedbooks,2004KeyReferencesQuestions