Understanding and Designing Your Active Directory Infrastructure Book

	Introduction	1
	Who This Book Is For	1
	Conventions Used in This Book	2
1	An Introduction to Windows 2000 and Active Directory	5
	Windows 2000 Overview	6
	Windows 2000 Professional	6
	Windows 2000 Server	6
	Windows 2000 Advanced Server	7
	Windows 2000 Datacenter Server	7
	What Is Windows 2000 Active Directory?	8
	Definition of an Active Directory	9
	Complementary Components of Active Directory	11
	Benefits of Active Directory	15
	Summary	16
	Case Study	17
2	Novell NDS and Windows NT 4.0 Directory Services	19
	Novell NetWare and NDS	20
	Historical Overview of NetWare	21
	NetWare 3.x	21
	NetWare 4.x	21
	NetWare 5.x	22
	Understanding NDS	22
	NDS Structure and Replication Topology	23
	NDS Objects: [Root]	23
	NDS Replication Topology	28
	NDS Versus Active Directory	30
	Security Principles	30
	Replication Partitioning	31
	Windows NT 4.0 Directory Services	31
	Domains	31
	Windows NT Server Roles	32
	Trust Relationships	33
	Directory Database Size	35
	Domain Models	35
	Single Domain Model	35
	Single Master Domain Model	35
	Multiple Master Domain Model	36
	Complete Trust Domain Model	37
	Summary	38
	Case Study	39
3	Describing Active Directory Components	41
	Domain Namespace	42
	Possible DNS Names	44
	Internal Versus External Namespace	44
	Domains	47
	Administrative Boundaries	48
	Domain Security Policies	48
	Creating Domains	48
	Creating Multiple Domains	50
	Trees	51
	Creating Trees	52
	Forests	52
	Creating Forests	53
	Active Directory Sites	54
	Creating Sites	55
	Summary	57
	Case Study	58
4	Planning Active Directory	59
	Migration Considerations	60
	Upgrading the Domain to Windows 2000	61
	Parallel Migration	64
	Mixed Mode or Native Mode Domains	67
	Server Migration	68
	Client Migration	70
	User and Group Migration	71
	Administration Considerations	72
	Understanding the Administrative Differences Between NT and 2000	72
	How OUs Play a Role	74
	Delegate Control	76
	Security	79
	Group Policies	81
	Security Considerations	82
	Access to AD	83
	Administration of AD	84
	Shares and Printers in AD	84
	Searching AD	85
	Installation Considerations	85
	Using the Remote Installation Service	86
	Software Installation through Group Policy	86
	Political Considerations	86
	Administrative Concerns	87
	Domain Namespace Concerns	88
	Access to AD Content Concerns	88
	Schema Concerns	89
	World Trade and Access Concerns	89
	Summary	90
	Case Study	90
5	Interaction with Other Network Services	93
	Domain Name System (DNS)	94
	DNS Zones	96
	Using Non-Windows 2000 DNS Servers	98
	Installing the DNS Server	98
	Dynamic Host Configuration Protocol (DHCP)	104
	The DHCP Conversation	105
	Defining DHCP Scopes	106
	Defining DHCP Options	106
	Installing the DHCP Server	107
	Authorizing the DHCP Server in Active Directory	108
	Creating Scopes	109
	Dynamic DNS: The Interaction of DNS and DHCP	110
	Remote Installation Services (RIS)	112
	RIS Requirements	112
	Installing and Configuring RIS	113
	Authorizing the RIS Server in Active Directory	114
	Prestaging Computers	114
	Summary	114
	Case Study	115
6	Creating the Components Within the Active Directory	117
	Managing the Active Directory Users and Computers	118
	Default Active Directory Configuration	118
	Active Directory Objects	119
	Organizational Units: Understanding the Concept	120
	Creating Organizational Units	120
	Placement in Active Directory	124
	Planning Organizational Units	125
	Managing User Accounts	125
	Types of Logon Names	126
	Manipulating Users Accounts	127
	Creating User Templates	129
	User Account Basics	129
	Profile Details	133
	Home Directory Details	133
	Remote Access Services Details	134
	Terminal Server Details	135
	Placement in Active Directory	138
	Understanding Groups	139
	Group Types	139
	Group Scope	140
	Creating Groups	141
	Group Basics	142
	Group Nesting Capabilities	144
	Group Placement in Active Directory	144
	Planning Groups	144
	Understanding Computers in Active Directory	145
	Creating Computers	145
	Computer Basics	146
	Placement in Active Directory	148
	Managed Computers	149
	Using Printers in Active Directory	150
	Publishing a Printer	150
	Security of Printers in Active Directory	152
	Planning Printers	153
	Using Shared Folders	153
	Creating a Share	153
	Security of Shares in Active Directory	154
	Planning Shares	154
	Using Contacts in Active Directory	154
	Creating a Contact	154
	Contact Basics	155
	Planning Contacts	158
	Summary	158
	Case Study	159
7	Supporting Active Directory Environments	161
	Using Flexible Single Master Operations (FSMOs)	162
	What Are FSMOs?	162
	Where Should You Locate FSMOs?	163
	Planning for Your FSMOs	164
	Delegating Control	164
	Using the Wizard	165
	Viewing the Delegation Results	168
	Deleting Delegate Control	170
	Using Group Policy Objects (GPO)	170
	Understanding GPOs	171
	Creating a Group Policy	171
	User and Computer Application	172
	Parts of the Group Policy	173
	Editing a Group Policy	175
	Security of a Group Policy	175
	Application of the Group Policy in AD	176
	Custom Group Policies	179
	Setting User Rights	179
	Scripting	180
	Windows Scripting Host	180
	ADSI	181
	Interoperability with Other Systems	182
	Downlevel Clients (Windows 9X and Windows NT Workstation)	182
	Windows NT 4 Servers and Domains	183
	NetWare and NDS	185
	Services for Unix	186
	Summary	187
	Case Study	188
8	Migration Planning and Migration Tools	189
	Migration Preparation	190
	Server Hardware Upgrades and Server Replacements	190
	Analyzing Your Active Directory Design	191
	In-Place Upgrade or Domain Restructure	192
	Mixed Mode Versus Native Mode	192
	Post Migration Cleanup	196
	In-Place Upgrade	197
	Domain Restructure	198
	Upgrade and Restructure	198
	Parallel Restructure Model	199
	Using Active Directory Migration Tool	201
	Reporting Wizard	202
	User Account Migration Wizard	206
	Group Migration Wizard	213
	Active Directory Migration Tool Version 2	219
	ClonePrincipal	219
	Benefits of ClonePrincipal	221
	Disadvantages of ClonePrincipal	222
	MoveTree	222
	Benefits of MoveTree	223
	Prerequisites of MoveTree	223
	Netdom	225
	Computer Account Management	225
	Trust Management	225
	ADSI MMC Snap-in	226
	NetIQ Suite of Migration Tools	226
	NetIQ NetWare Migrator	227
	Server Consolidator	227
	Migration Assessor	228
	Exchange Migrator	228
	Additional Migration Utilities	256
	Aelita Controlled Migration Suite	256
	EastLane Migrator and Server Consolidator	257
	Desktop Migration	257
	NetWare Migration	258
	Summary	258
	Case Study	259
	Existing Windows NT 4.0 Domain Environment	259
	Migration Plan	259
	Migration Tools	260
9	Trips and Traps: Troubleshooting AD	261
	Using Domain Modes	262
	In Mixed Mode	263
	In Native Mode	264
	What Doesn't Change	265
	Directory and File Replication	266
	Active Directory Replication	266
	The File Replication Service (FRS)	275
	Group Policy	278
	How to Tell That Things Are Going Wrong	278
	Dos and Don'ts of Group Policy	279
	Group Policy Mergers and Acquisitions	280
	Tools That Help	282
	Hacking Group Policies	284
	Software Installation	288
	Where to Specify the Install	289
	Who Has Installation Rights	289
	How to Tell What Went Wrong	289
	Summary	291
10	Introducing .NET and the Next Generation of Windows	293
	The .NET Initiative	294
	.NET Experiences	295
	Clients	296
	Services	296
	Servers	297
	Tools	297
	Windows: The Next Generation	298
	Windows XP	298
	Windows .NET Server	300
	Summary	303