Active Directory, 4th Edition

Designing, Deploying, and Running Active Directory

Larger Cover

Designing, Deploying, and Running Active Directory

By Brian Desmond, Joe Richards, Robbie Allen, Alistair G. Lowe-Norris

Publisher: O'Reilly Media

Released: November 2008

Pages: 866

To help you take full advantage of Active Directory, this fourth edition of this bestselling book gives you a thorough grounding in Microsoft's network directory service. With Active Directory, you'll learn how to design, manage, and maintain an AD infrastructure, whether it's for a small business network or a multinational enterprise with thousands of resources, services, and users.

This detailed and highly accurate volume covers Active Directory from its origins in Windows 2000 through Windows Server 2008. But unlike typical dry references, Active Directory presents concepts in an easy-to-understand, narrative style. With this book, you will:

Get a complete review of all the new Windows 2008 features
Learn how Active Directory works with Exchange and PowerShell
Take advantage of the updated scripting and programming chapters to automate AD tasks
Learn how to be more efficient with command-line tools
Grasp concepts easily with the help of numerous screenshots and diagrams

Ideal for administrators, IT professionals, project managers, and programmers alike, Active Directory is not only for people getting started with AD, it's also for experienced users who need to stay up-to-date with the latest AD features in Windows Server 2008. It is no wonder this guide is the bestselling AD resource available.

Active Directory Basics
1. Chapter 1 A Brief Introduction
  1. Evolution of the Microsoft NOS
  2. Windows NT Versus Active Directory
  3. Windows 2000 Versus Windows Server 2003
  4. Windows Server 2003 Versus Windows Server 2003 R2
  5. Windows Server 2003 R2 Versus Windows Server 2008
  6. Summary
2. Chapter 2 Active Directory Fundamentals
  1. How Objects Are Stored and Identified
  2. Building Blocks
  3. Summary
3. Chapter 3 Naming Contexts and Application Partitions
  1. Domain Naming Context
  2. Configuration Naming Context
  3. Schema Naming Context
  4. Application Partitions
  5. Summary
4. Chapter 4 Active Directory Schema
  1. Structure of the Schema
  2. Attributes (attributeSchema Objects)
  3. Attribute Properties
  4. Classes (classSchema Objects)
  5. Summary
5. Chapter 5 Site Topology and Replication
  1. Site Topology
  2. How Replication Works
  3. Summary
6. Chapter 6 Active Directory and DNS
  1. DNS Fundamentals
  2. DC Locator
  3. Resource Records Used by Active Directory
  4. Delegation Options
  5. Active Directory Integrated DNS
  6. Using Application Partitions for DNS
  7. Aging and Scavenging
  8. Summary
7. Chapter 7 Read-Only Domain Controllers
  1. Prerequisites
  2. Password Replication Policies
  3. The Client Logon Process
  4. RODCs and Write Requests
  5. The W32Time Service
  6. Application Compatibility
  7. RODC Placement Considerations
  8. RODCs and Replication
  9. Administrator Role Separation
  10. Summary
8. Chapter 8 Group Policy Primer
  1. Capabilities of GPOs
  2. How Group Policies Work
  3. Managing Group Policies
  4. Troubleshooting Group Policy
  5. Summary
9. Chapter 9 Fine-Grained Password Policies
  1. Understanding Password Setting Objects
  2. Scenarios for Fine-Grained Password Policies
  3. Creating Password Setting Objects
  4. Managing Password Settings Objects
  5. Delegating Management of PSOs
  6. Summary
Designing an Active Directory Infrastructure
1. Chapter 10 Designing the Namespace
  1. The Complexities of a Design
  2. Where to Start
  3. Overview of the Design Process
  4. Domain Namespace Design
  5. Design of the Internal Domain Structure
  6. Other Design Considerations
  7. Design Examples
  8. Designing for the Real World
  9. Summary
2. Chapter 11 Creating a Site Topology
  1. Intrasite and Intersite Topologies
  2. Designing Sites and Links for Replication
  3. Examples
  4. Additional Resources
  5. Summary
3. Chapter 12 Designing Organization-Wide Group Policies
  1. Using GPOs to Help Design the Organizational Unit Structure
  2. Summary
4. Chapter 13 Active Directory Security: Permissions and Auditing
  1. Permission Basics
  2. Using the GUI to Examine Permissions
  3. Using the GUI to Examine Auditing
  4. Designing Permission Schemes
  5. Designing Auditing Schemes
  6. Real-World Examples
  7. Summary
5. Chapter 14 Designing and Implementing Schema Extensions
  1. Nominating Responsible People in Your Organization
  2. Thinking of Changing the Schema
  3. Creating Schema Extensions
  4. Summary
6. Chapter 15 Backup, Recovery, and Maintenance
  1. Backing Up Active Directory
  2. Restoring a Domain Controller
  3. Restoring Active Directory
  4. Working with Snapshots
  5. FSMO Recovery
  6. Restartable Directory Service
  7. DIT Maintenance
  8. Summary
7. Chapter 16 Upgrading to Windows Server 2003
  1. New Features in Windows Server 2003
  2. Differences with Windows 2000
  3. Functional Levels Explained
  4. Preparing for ADPrep
  5. Upgrade Process
  6. Post-Upgrade Tasks
  7. Summary
8. Chapter 17 Upgrading to Windows Server 2003 R2
  1. New Active Directory Features in Windows Server 2003 Service Pack 1
  2. Differences with Windows Server 2003
  3. New Active Directory Features in Windows Server 2003 R2
  4. Preparing for ADPrep
  5. Service Pack 1 Upgrade Process
  6. R2 Upgrade Process
  7. Summary
9. Chapter 18 Upgrading to Windows Server 2008
  1. New Features in Windows Server 2008
  2. Differences with Windows Server 2003
  3. Preparing for ADPrep
  4. Windows Server 2008 Upgrade Process
  5. Summary
10. Chapter 19 Integrating Microsoft Exchange
  1. A Quick Word about Exchange/AD Interaction
  2. Preparing Active Directory for Exchange
  3. Mail-Enabling Objects
  4. Summary
11. Chapter 20 Active Directory Lightweight Directory Service (a.k.a. ADAM)
  1. ADAM Terms
  2. Differences Between AD and ADAM V1.0
  3. ADAM R2 Updates
  4. Active Directory Lightweight Directory Services Updates
  5. AD LDS Installation
  6. Tools
  7. ADAM Schema
  8. Using ADAM
  9. Summary
Scripting Active Directory with ADSI, ADO, and WMI
1. Chapter 21 Scripting with ADSI
  1. What Are All These Buzzwords?
  2. ADSI
  3. Simple Manipulation of ADSI Objects
  4. Summary
2. Chapter 22 IADs and the Property Cache
  1. The IADs Properties
  2. Manipulating the Property Cache
  3. Checking for Errors in VBScript
  4. Summary
3. Chapter 23 Using ADO for Searching
  1. The First Search
  2. Understanding Search Filters
  3. Optimizing Searches
  4. Advanced Search Function: SearchAD
  5. Summary
4. Chapter 24 Users and Groups
  1. Creating a Simple User Account
  2. Creating a Full-Featured User Account
  3. Creating Many User Accounts
  4. Modifying Many User Accounts
  5. Account Unlocker Utility
  6. Creating a Group
  7. Adding Members to a Group
  8. Evaluating Group Membership
  9. Summary
5. Chapter 25 Permissions and Auditing
  1. How to Create an ACE Using ADSI
  2. A Simple ADSI Example
  3. A Complex ADSI Example
  4. Creating Security Descriptors
  5. Listing the Security Descriptor of an Object
  6. Summary
6. Chapter 26 Extending the Schema and the Active Directory Snap-ins
  1. Modifying the Schema with ADSI
  2. Customizing the Active Directory Administrative Snap-ins
  3. Summary
7. Chapter 27 Scripting with WMI
  1. Origins of WMI
  2. WMI Architecture
  3. Getting Started with WMI Scripting
  4. WMI Tools
  5. Manipulating Services
  6. Querying the Event Logs
  7. Monitoring Trusts
  8. Monitoring Replication
  9. Summary
8. Chapter 28 Scripting DNS
  1. DNS Provider Overview
  2. Manipulating DNS Server Configuration
  3. Creating and Manipulating Zones
  4. Creating and Manipulating Resource Records
  5. Summary
9. Chapter 29 Programming the Directory with the .NET Framework
  1. Why .NET?
  2. Choosing a .NET Programming Language
  3. Choosing a Development Tool
  4. .NET Framework Versions
  5. Directory Services Programming Landscape
  6. .NET Directory Services Programming by Example
  7. Summary
10. Chapter 30 PowerShell Basics
  1. Exploring the PowerShell
  2. Working with the Pipeline
  3. Cmdlets
  4. Building PowerShell Scripts
  5. Using WMI
  6. Summary
11. Chapter 31 Scripting Active Directory with PowerShell
  1. Becoming Familiar with .NET
  2. Understanding Client-Side Processing
  3. Building the Lab Build Script
  4. Working with Forests and Domains
  5. Understanding Group Policy
  6. Summary
12. Chapter 32 Scripting Basic Exchange 2003 Tasks
  1. Notes on Managing Exchange
  2. Exchange Management Tools
  3. Mail-Enabling Versus Mailbox-Enabling
  4. Exchange Delegation
  5. Mail-Enabling a User
  6. Mail-Disabling a User
  7. Creating and Mail-Enabling a Contact
  8. Mail-Disabling a Contact
  9. Mail-Enabling a Group (Distribution List)
  10. Mail-Disabling a Group
  11. Mailbox-Enabling a User
  12. Mailbox-Disabling a User (Mailbox Deletion)
  13. Purging a Disconnected Mailbox
  14. Reconnecting a Disconnected Mailbox
  15. Moving a Mailbox
  16. Enumerating Disconnected Mailboxes
  17. Viewing Mailbox Sizes and Message Counts
  18. Viewing All Store Details of All Mailboxes on a Server
  19. Dumping All Store Details of All Mailboxes on All Servers in Exchange Org
  20. Summary
13. Chapter 33 Scripting Basic Exchange 2007 Tasks
  1. Exchange Scripting Notes
  2. Managing Users
  3. Managing Groups
  4. Summary

Colophon

Title:

Active Directory, 4th Edition

By:

Brian Desmond, Joe Richards, Robbie Allen, Alistair G. Lowe-Norris

Publisher:

O'Reilly Media

Formats:

Print
Ebook
Safari Books Online

Print:

November 2008

Ebook:

November 2008

Pages:

866

Print ISBN:

978-0-596-52059-5

| ISBN 10:

0-596-52059-X

Ebook ISBN:

978-0-596-15690-9

| ISBN 10:

0-596-15690-1

Brian Desmond

Brian Desmond spends his days focused on Active Directory for some of the world's largest companies. A Microsoft MVP since 2004, Brian brings extensive knowledge of how Active Directory works and how to successfully run Active Directory deployments large and small.

View Brian Desmond's full profile page.
Joe Richards

Joe Richards is a consultant/admin/tool writer and Microsoft MVP for Windows Server Directory Services. Joe updated the second edition of Active Directory Cookbook for O'Reilly.

View Joe Richards's full profile page.
Robbie Allen

Robbie Allen is the coauthor of Active Directory, 2nd Edition and the author of the Active Directory Cookbook. Visit Robbie's web site at www.robbieallen.com.

View Robbie Allen's full profile page.
Alistair G. Lowe-Norris

Alistair G. Lowe-Norris is an Architectural Enterprise Strategy Consultant for Microsoft UK. During the writing of the first version of this book he worked for Leicester University as the project manager and technical lead of the Rapid Deployment Program for Windows 2000. During his time there, Leicester was part of Microsoft's U.K. and U.S. Rapid Deployment Programs for Windows 2000, and was responsible for rolling out what turned out to be one of the world's largest deployments of Windows 2000 preceding release of the final product. Since 1998 he has been the technical editor and a monthly columnist for the Windows Scripting Solutions magazine and a technical editor and author for Windows & .Net Magazine (previously Windows NT Magazine and Windows 2000 Magazine). In addition he is an author and editor for various other publications and online sites worldwide. He holds various Microsoft and other accreditations and has been using Windows 2000 and its descendents daily since October 1997. He lives in Leicester, UK.

View Alistair G. Lowe-Norris's full profile page.

Description

Table of Contents

Product Details

About the Author

Colophon

Recommended for You

Customer Reviews

REVIEW SNAPSHOT®

by PowerReviews

O'Reilly Media Active Directory

5.0

(based on 1 review)

Reviews

Reviewed by 1 customer

Displaying review 1

10/30/2010

(1 of 1 customers found this review helpful)

5.0

Everything you need for Active Directory

By sw1

from Bend, OR

About Me Sys Admin

Pros

Accurate
Easy to understand
Well-written

Cons

Best Uses

Expert
Intermediate
Novice

Comments about O'Reilly Media Active Directory:

I got the opportunity to review Active Directory 4th Edition by Brian Desmond. This is an excellent resource for Active Directory. It is well written and is for all levels of administrators. The author covers all the different flavors of Windows from the past (Window 2000) to the present (Windows Server 2008). Desmond does a great job of providing real world examples including very detailed screenshots. He does an excellent job of breaking down the differences in functionality between Windows 2000 up to Windows Server 2008. I also liked that he took time to discuss the interaction AD has with Exchange 2007, as well as how PowerShell can be used to create and run scripts within AD. I honestly believe there is a little bit of everything in this book regarding AD. If Active Directory had any interaction with the kitchen sink it would be in this book. Active Directory 4th Edition is a awesome tool to have in your tool belt to manage your Active Directory environment.

Displaying review 1

Save a Tree - Go Digital what is this?

Ebook: $43.99

Formats: APK, DAISY, ePub, Mobi, PDF

Print & Ebook: $60.49

Print: $54.99

Safari Books Online - Read now >

Active Directory Basics

Chapter 1 A Brief Introduction

Chapter 2 Active Directory Fundamentals

Chapter 3 Naming Contexts and Application Partitions

Chapter 4 Active Directory Schema

Chapter 5 Site Topology and Replication

Chapter 6 Active Directory and DNS

Chapter 7 Read-Only Domain Controllers

Chapter 8 Group Policy Primer

Chapter 9 Fine-Grained Password Policies

Designing an Active Directory Infrastructure

Chapter 10 Designing the Namespace

Chapter 11 Creating a Site Topology

Chapter 12 Designing Organization-Wide Group Policies

Chapter 13 Active Directory Security: Permissions and Auditing

Chapter 14 Designing and Implementing Schema Extensions

Chapter 15 Backup, Recovery, and Maintenance

Chapter 16 Upgrading to Windows Server 2003

Chapter 17 Upgrading to Windows Server 2003 R2

Chapter 18 Upgrading to Windows Server 2008

Chapter 19 Integrating Microsoft Exchange

Chapter 20 Active Directory Lightweight Directory Service (a.k.a. ADAM)

Scripting Active Directory with ADSI, ADO, and WMI

Chapter 21 Scripting with ADSI

Chapter 22 IADs and the Property Cache

Chapter 23 Using ADO for Searching

Chapter 24 Users and Groups

Chapter 25 Permissions and Auditing

Chapter 26 Extending the Schema and the Active Directory Snap-ins

Chapter 27 Scripting with WMI

Chapter 28 Scripting DNS

Chapter 29 Programming the Directory with the .NET Framework

Chapter 30 PowerShell Basics

Chapter 31 Scripting Active Directory with PowerShell

Chapter 32 Scripting Basic Exchange 2003 Tasks

Chapter 33 Scripting Basic Exchange 2007 Tasks

Colophon

Brian Desmond

Joe Richards

Robbie Allen

Alistair G. Lowe-Norris

About O'Reilly

Community

More O'Reilly Sites

Partner Sites

Shop O'Reilly