Managing an Active Directory Infrastructure
This chapter is from the book
This chapter is from the book
This chapter is from the book
Objectives
This chapter covers the following Microsoft-specified objectives for the Planning and Implementing an Active Directory Infrastructure and Managing and Maintaining an Active Directory Infrastructure sections of the Windows Server 2003 Active Directory Infrastructure exam:
Implement an Active Directory directory service forest and domain structure.
-
Establish trust relationships. Types of trust relationships might include external trusts, shortcut trusts, and crossforest trusts.
Business requirements may dictate the need to use more than one forest in your enterprise. You need to understand how to create trust relationships with external forests and when to use external trusts or forest trusts. You should also understand when to use shortcut trusts within multiple-domain forests.
Manage an Active Directory forest and domain structure.
-
Manage trust relationships.
-
Manage schema modifications.
-
Add or remove a UPN suffix.
This objective is intended to make sure you can manage several components of the Active Directory forest and domain structure. You should be aware of the different types of trust relationships you can configure within and between forests. You should also understand how to work with the Active Directory schema and how to use UPN suffixes to facilitate management and user logon in multiple-domain enterprises.
Implement an Active Directory site topology.
-
Configure site links.
-
Configure preferred bridgehead servers.
This objective evaluates your knowledge of how Active Directory handles networks that are distributed among different physical locations separated by low-speed WAN links. You need to understand how to create and configure sites, site link bridges, and bridgehead servers, and how the Inter-site Topology Generator and Knowledge Consistency Checker operate.
Manage an Active Directory site.
-
Configure replication schedules.
-
Configure site link costs.
-
Configure site boundaries.
This objective is intended to make sure you know how to manage several components of the links between Active Directory sites. You should understand the factors that affect intrasite and intersite replication and when to modify replication schedules and site link costs.
Outline
Introduction
- Active Directory Trust Relationships
- Trust Relationships Within an Active Directory Forest
- Interforest Trust Relationships
- Establishing Trust Relationships
- Creating an External Trust
- Creating a Forest Trust
- Creating a Shortcut Trust
- Managing Trust Relationships
- Validating Trust Relationships
- Changing the Authentication Scope
- Configuring Name Suffix Routing
- Removing a Crossforest Trust Relationship
- Understanding Trust Relationships
- Active Directory Forest and Domain Structure
- Managing Schema Modifications
- Installing the Schema Snap-In
- Using the Schema Snap-In
- Deactivating Schema Objects
- Adding or Removing a UPN Suffix
- Understanding the Directory Forest and Domain Structure
- Managing Schema Modifications
- Active Directory Site Topology
- Creating Sites
- Configuring Sites
- Adding Domain Controllers
- Specifying a Licensing Server
- Configuring Site Boundaries
- Configuring Site Links
- Site Link Bridges
- Knowledge Consistency Checker
- Inter-Site Topology Generator
- Preferred Bridgehead Servers
- Configuring Replication Schedules
- What Does Active Directory Replicate?
- How Does Active Directory Replication Work?
- Intrasite Replication
- Intersite Replication
- Manually Forcing Replication
- Configuring Site Link Costs
- Chapter Summary
- Exercises
- Review Questions
- Exam Questions
- Answers to Exercises
- Answers to Review Questions
- Answers to Exam Questions
Study Strategies
This chapter builds on the foundations of the preceding chapter by covering the administration of forests and sites, as well as the Active Directory schema. As you work your way through the chapter, you should pay attention to the following:
-
Understand the different types of trust relationships available and when you should use them. In addition, you should know the differences between incoming and outgoing trust directions.
-
Understand the importance of schema modifications and the potential consequences of making such modifications.
-
Understand the ways you can create sites, site links, and site link bridges, and the importance of the Knowledge Consistency Checker and the Inter-Site Topology Generator.
-
Understand the way Active Directory replication works and its importance in keeping all domain controllers up to date.
-
Know the differences between intrasite and intersite replication and the way site topology affects replication.
Introduction
Now that you have created an Active Directory forest with a child domain and configured global catalog servers and operations masters, it is time to examine several issues related to multisided and multiforest Active Directory deployments. In this chapter, we cover several issues related to management of trust relationships among Active Directory forests, as well as schema modifications. We then turn our attention to creating, configuring, and managing sites, including replication and site links.