IS-451M-Exam 2-Lecture 7

What is the difference between a single-domain structure and a multi-domain structure?

A single-domain structure is usually easier and less expensive than a multidomain structure May not always be a better solution

What is a tree?

A tree is a grouping of domains that share a common naming structure. It can consist of a parent domain and possibly one or more child domains. (If they have different names, they have different trees.)

How can you search for Active Directory objects?

Active Directory objects can be searched for using the Find Users, Contacts, and Groups dialog box

What is a "ORGANIZATIONAL UNIT" primarily contain?

An OU is a primary container object for organizing and managing resources in a domain

What does Authentication confirm?

Authentication confirms a users identity

What can be delegated by "ORGANIZATIONAL UNIT"?

Authority of an OU can be delegated

What's the main difference between "adding a domain controller to an existing domain" vs. "installing the first domain controller" ?

Biggest difference is that you select "Add a domain controller to an existing domain" instead of "Add a new forest"

How are computer accounts created?

Computer accounts are created automatically when AD is installed on a server

What replication occurs between two or more sites?

Intersite replication

What replication occurs between domain controllers in the same site?

Intrasite replication

What is the information stored in each attribute called?

The Attribute Value

What is the core logical structure in AD?

The Domain Object is core logical structure in AD.

What is a domain?

The core structural unit of an Active Directory. It contains OUs and represents administrative, security, and policy boundaries.

What is the first domain referred to?

The first domain is the forest root and is referred to as the forest root domain

What is Active Directory Replication?

The process of "maintaining a consistent database of information" when the database is "distributed among several locations"

What does the Active Directory "SCHEMA" define?

The schema defines the type, organization, and structure of data stored in the AD database

How are Trust Relationships established?

Trust relationships are established automatically between all domains in the forest

If there is is no trust between domains, is access across domains still possible?

When there is no trust between domains, no access across domains is possible.

In Active Directory, a trust relationship defines what?

defines whether and how security principals from one domain can access network resources in another domain

BUILTIN - folder object holds...

it holds default groups created by Windows

What does permission define?

permissions define which resources users can access and what level of access they have

What is a Shared Folder leaf object?

represents a shared folder on a computer in the network

What is a Printer leaf object?

represents a shared printer in the domain

What does Knowledge Consistency Checker (KCC) run on?

runs on all DCs to determine the replication topology

MANAGED SERVICE ACCOUNTS - is created specifically for services to...

services to access domain resources

What do rights define?

specifies what types of actions a user can perform on a computer or network

What is the role of the "Directory Service"?

stores information about a computer network and offers features for retrieving and managing that information. (Generally an admin tool, users use it to find resources, centralized management tool, so it requires careful planning to set up).

USERS - stores two default...

stores two default users (Administrator and Guest) and several default groups

COMPUTERS - is the default location for...

the default location for computer accounts created when a new computer or server becomes a domain member

The computer account object's name must match?

the name of the computer that the account represents

What are the some common characteristics that all domains in a forest share?

-A single schema -Forest-wide administrative accounts -Operations masters -Global Catalog -Trusts between domains -Replication between domains

What are the two windows created default user accounts called?

-Administrator and Guest

What is the physical structure of a site look like for an Active Directory?

-An Active Directory site is simply a physical location in which domain controllers communicate and replicate information regularly

What other could be possible Active Directory leaf objects?

-Contact -Printer -Shared Folder

What tasks can you perform using the ADAC?

-Create and manage users, group, and computer accounts -Manage OUs. -Connect to other domain controllers in the same or a different domain. -Change the domain's functional level and enable the AD Recycle Bin.

What does Active Directory leaf object usually represent? (Silly actor, next race go phone on.)

-Security account -Network resource -GPO

What is a domain controller responsible for in an active directory?

-Storing a copy of the domain data and replicating changes to that data to all other domain controllers in the domain. -Providing data search and retrieval functions for users attempting to locate objects in the directory. -Providing authentication and authorization services for users who log on to the domain and attempt to access network resources

What is an "OBJECT" in a Active Directory Schema?

-a grouping of information that describes a network resource

What do User Account objects contain?

-group memberships, account restrictions, profile path, and dial-in permissions

What can you explore Active Directory Services in?

1. Active Directory Administrative Center (ADAC) or 2. Active Directory Users and Computers MMC

What are the two variations of adding a domain to an existing forest?

1. Add a child domain - you're adding a domain that shares at least the top-level and second-level domain name structure as an existing domain in the forest 2. Add a new tree - you're adding a new domain with a separate naming structure from any existing domains in the forest

What are the 5 "FOLDER OBJECTS" created by the default? (Bring computers for system project meeting shortly after us.)

1. Builtin 2. Computers 3. Foreign Security Principals 4. Managed Service Accounts 5. Users

What are the windows I should see when installing Active Directory Services?

1. Click on Server Manager, 2. Deployment Configuration Window, 3. The Domain Controller Options Window, 4. DNS Options Window 5. Specifying Active Directory Paths, 6. Review Options, 7. Prerequisites Check Window.

Functions the forest root domain usually handles?

1. DNS server 2. Global catalog server 3. Forest-wide administrative accounts 4. Operations masters

What are the 5 types of Active Directory partition? (Did she go crazy after dumping chuck?)

1. Domain directory partition 2. Schema directory partition 3. Global catalog partition 4. Application directory partition 5. Configuration partition

Global Catalog servers perform the following vital functions:

1. Facilitates domain and forest-wide searches 2. Facilitates logon across domains - Users can log on to computers in any domain by using their user principal name (UPN) 3. Hold universal group membership information

What are the 6 features that the "Active Directory Services" use? (Hello Officer, can birds detect dumb shrimp swimming for peanut butter apples)

1. Hierarchical organization 2. Centralized but distributed database 3. Scalability 4. Security 5. Flexibility 6. Policy-based administration

What are the four organizing components that make up the logical structure of an Active Directory? (Organizations under drugs think funny)

1. Organizational Units (OUs) 2. Domains 3. Trees 4. Forests

What is two different structures of the Active Directory structure?

1. Physical Structure 2. Logical Structure

What are the 5 operations master roles referred to as Flexible Single Master Operation (FSMO) roles? (She is doing nothing right & is doing Pilates during conferences everyday.

1. Schema Master 2. Infrastructure master 3. Domain Naming master 4. RID master 5. PDC Emulator master

Why do most small and medium businesses choose a single domain?

1. Simplicity 2. Lower costs 3. Easier management 4. Easier access to resources

What does the Active Directory "SCHEMA ATTRIBUTE" define?

Schema attributes define what type of information is stored in each object

What does the Active Directory "SCHEMA CLASSES" define?

Schema classes define the types of objects that can be stored in Active Directory

What do Security Account objects include?

Security account objects include users, groups, and computers

What is the Operations Master?

Several operations in a forest require having a single domain controller, called the Operations Master, whose sole responsibility is the function.

What are the four questions you should know before adding a new domain controller?

Should you install DNS? Should the DC be a global catalog (GC) server? Should this be a read only domain controller (RODC)? In which site should the DC be located?

Why does each domain object have a Group Policy Object linked to it?

So that it that can affect all objects in the domain

What does a Computer Account object represent?

computer account object represents a computer that's a domain controller or domain member

FOREIGN SECURITY PRINCIPALS - contains user accounts from...

contains user accounts from other domains added as members of the local domain's groups

What is a Forest?

A collection of one or more Active Directory trees that provide a common Active Directory environment. -All domains in all trees can communicate and share information. -Can consist of a single tree with a single domain, or it can contain several trees, each with a hierarchy of parent and child domains

What does an "CONTAINER OBJECT" contain?

A container object contains other objects.

What is a "CONTAINER OBJECT" used for?

A container object is used to organize and manage users and resources on the network. Can also act as administrative and security boundaries

What do Group objects represent and is this easier than what?

A group object represents a collection of users with common permissions or rights. It is easier than assigning permissions and rights to individual users.

What is each section of an Active Directory database called? And how many types are there?

Directory partition, There are 5 types.

If you are removing a DC from the forest, you have to make sure that , ___ roles are not removed from the network as well?

FSMO roles.

What does the Domain Directory Partition type contain?

It contains all objects in a domain, including users, groups, computers, OUs, and so forth

What does the Schema Directory Partition type contain?

It contains information needed to define AD objects and object attributes.

What does the Configuration Partition type contain?

It contains the configuration information that can affect the entire forest

What does the Global Catalog Partition type contain?

It contains the global catalog, which is a partial replica of all objects in the forest

What does the Application Directory Partition type contain? and what is it used by?

It is used by applications and services. And it contains information that benefits from automatic Active Directory replication and security.

How many domain controllers does Microsoft recommend you to have and why?

Microsoft recommends at least two DCs in every domain For fault tolerance and load balancing

What replication is used by AD for replacing AD objects?

Multimaster replication

When do you need to use more than one domain?

Need for differing account policies Need for different name identities Replication control Need for internal versus external domains Need for tight security

How is the "ORGANIZATIONAL UNIT"?

Nesting OUs can build a hierarchical Active Directory structure that mimics the corporate structure for easier object management

What do Network Resource objects include?

Network resource objects include servers, domain controllers, file shares, printers, etc.

Are trusts and permissions the same thing?

No! -Trusts do not equal permissions -Permissions are still required to access resources, even if a trust relationship exists

What objects are in an OU?

OU contains Active Directory objects, such as: User accounts Groups Computer accounts Printers Shared folders Applications Servers Domain controllers

What is an OU?

OU is an Organizational unit that is an Active Directory container used to organize a network's users and resources into logical administrative units

What does an "ORGANIZATIONAL UNIT" organize multiple objects into?

OUs can organize multiple objects into logical administrative groups that can be configured with specific policies relevant to that group

The first domain controller in the forest typically takes the role of what?

Operations Master

What are the three "CONTAINER OBJECTS" found in Active Directory?

Organizational Units Folder Objects Domain objects

What is "Active Directory" based on originally and what is it based on now and why?

Originally, X.500, a suite of protocols the International Telecommunication Union (ITU) developed, is the basis for its hierarchical structure and for how Active Directory. Now, LDAP is a lighter weight of X.500 that doesn't use the OSI model but not uses the TCP/IP model. Now that it uses LDAP it is able to integrate with UNIX/LINUX Operating systems.

What does Active Directory Domain Services refer to?

Windows Active Directory service

Which year of windows server was the active directory first introduced?

Windows Active Directory was first used in Windows 2000 Server

What is a Contact leaf object?

a person associated with the company but not a network user