Windows 2000 Active Directory

Larger Cover

By Alistair G. Lowe-Norris

Publisher: O'Reilly Media

Released: January 2000

Pages: 648

The most important change in Windows 2000 is the inclusion of Active Directory, a fully qualified directory service. It's so important that if you're a systems administrator, you're likely to find coming to grips with Active Directory to be one of your biggest headaches. But it doesn't have to be that way, thanks to Windows 2000 Active Directory.

Written by a participant in the Windows 2000 Rapid Deployment Program, Windows 2000 Active Directory delivers the practical, hands-on information you need to manage your site. Instead of filling pages with a screen-by-screen description of the graphical user interface, it focuses on the tasks you need to perform to manage your organization's directory effectively. The heavy emphasis on scripting with the ADSI will help you automate tasks to achieve greater reliability and save time.

Windows 2000 Active Directory is divided into three sections:

The Basics, which provides an overview of the Active Directory technology and a detailed introduction to AD features.
Design, which describes mapping your organization's typology into the Active Directory schema; specific topics include the AD namespace and DNS, AD objects such as sites and domains, replication, group policies, and migration issues.
Scripting, which covers the powerful capabilities of the Active Directory Services Interface (ADSI), including ADSI's use with ActiveX Data Objects (ADO), Active Server Pages (ASP), and Visual Basic (VB).

Windows 2000 Active Directory is a practical guide to the new technology for the overworked system or network administrator. Whether you're working regularly in the Windows 2000 environment or just evaluating Windows 2000 in order to understand the design issues involved, this book builds the solid foundation you need to understand Active Directory and use it effectively.

The Basics
1. Chapter 1 A Brief Introduction
  1. Major Features
  2. How Objects Are Stored in Active Directory
  3. Uniquely Identifying Objects
  4. Summary
2. Chapter 2 Active Directory Overview
  1. A Simple View of How It All Works
  2. A More Detailed View of How It All Works
  3. Windows NT Versus Windows 2000
  4. Summary
3. Chapter 3 Active Directory Schema
  1. The Structure of the Schema
  2. Attribute Classes (Attribute-Schema Objects)
  3. The Syntax of Attributes
  4. Object Classes (Class-Schema Objects)
  5. Summary
4. Chapter 4 Active Directory Replication
  1. Sites
  2. Data Replication
  3. Summary
5. Chapter 5 TCP/IP and DDNS
  1. How TCP/IP and DDNS Are Used
  2. How You Already Use TCP/IP and DNS
  3. Integrated DNS
  4. How DNS Affects Design
  5. Summary
Designing the Directory Hierarchy
1. Chapter 6 Designing the Namespace
  1. The Complexities of a Design
  2. Where to Start
  3. Overview of the Design Process
  4. Domain Namespace Design
  5. Design of the Internal Domain Structure
  6. Other Design Considerations
  7. Design Examples
  8. Designing for the Real World
  9. Summary
2. Chapter 7 Sites and Replication Topologies
  1. Intrasite and Intersite Topologies
  2. Designing Sites and Links for Replication
  3. Examples
  4. Summary
3. Chapter 8 Profiles and Group Policy Primer
  1. A Profile Primer
  2. Capabilities of GPOs
  3. Summary
4. Chapter 9 Designing Organization-Wide Policies
  1. How Windows 2000 GPOs Work
  2. Using the Group Policy Editor Tool
  3. Using GPOs to Help Design the Organizational Unit Structure
  4. Debugging Group Policies
  5. Summary
5. Chapter 10 Active Directory Security: Permissions and Auditing
  1. Using Windows 2000’s GUI to Examine Permissions
  2. Using Windows 2000’s GUI to Examine Auditing
  3. Designing Permission Schemes
  4. Designing Auditing Schemes
  5. Real-World Examples
  6. Summary
6. Chapter 11 Designing Schema Changes
  1. Nominating Responsible People in Your Organization
  2. Thinking of Changing the Schema
  3. Managing and Modifying the Schema
  4. Wreaking Havoc with Your Schema
  5. Summary
7. Chapter 12 Windows NT 4.0 Migration
  1. Consolidating, Migrating, and Upgrading from NT
  2. The Principles of Upgrading Windows NT Domains
  3. Summary
8. Chapter 13 Directory Interoperability
  1. Background to Interoperability with Other Directory Services
  2. Solutions for Interoperability with Other Directory Services
  3. Exchange and the Active Directory Connector
  4. A Word About Windows 2000 and Unix
  5. Summary
Scripting the Active Directory with ADSI
1. Chapter 14 Scripting with ADSI
  1. What Are All These Buzzwords?
  2. Writing and Running ADSI Scripts Under Windows 2000
  3. ADSI
  4. Simple Manipulation of ADSI Objects
  5. Summary
2. Chapter 15 IADs and the Property Cache
  1. The IADs Properties
  2. Manipulating the Property Cache
  3. Checking for Errors in VBScript
  4. Summary
3. Chapter 16 Users
  1. Creating a Standard User Account
  2. Creating a Fully Featured User Account
  3. Creating Many User Accounts
  4. Creating an Account Unlocker Utility
  5. Automatically Creating Exchange Mailboxes for Users
  6. Summary
4. Chapter 17 Manipulating Persistent and Dynamic Objects
  1. The Interface Methods and Properties
  2. Manipulating Services with ADSI
  3. Creating and Manipulating Shares with ADSI
  4. Enumerating Sessions and Resources
  5. Manipulating Print Queues and Print Jobs
  6. Summary
5. Chapter 18 Permissions and Auditing
  1. How to Create an ACE Using ADSI
  2. A Simple ADSI Example
  3. A Complex ACE Example
  4. Creating Security Descriptors
  5. Listing ACEs to a File for All Objects in an OU and Below
  6. Adding Many USER Groups to DRUP Groups
  7. Summary
6. Chapter 19 Extending the Schema and the GUI
  1. Modifying the Schema with ADSI
  2. Extending Active Directory GUI to Meet Business and Organizational Needs
  3. Summary
7. Chapter 20 Enhancing ADSI via an ASP or VB Interface
  1. VBScript Limitations and Solutions
  2. How to Avoid Problems When Using ADSI and ASP
  3. Combining VBScript and HTML
  4. Binding to Objects via Authentication
  5. Migrating Your ADSI Scripts from VBScript to VB
  6. Summary
8. Chapter 21 Scripting Fast Searches Using ADO
  1. The First Search
  2. Other Ways of Connecting and Retrieving Results
  3. Understanding Search Filters
  4. Incorporating Searches into Active Server Pages
  5. A Significant Problem
  6. A More Advanced Search Function—SearchAD
  7. Summary

Colophon

Title:

Windows 2000 Active Directory

By:

Alistair G. Lowe-Norris

Publisher:

O'Reilly Media

Formats:

Print
Safari Books Online

Print:

January 2000

Pages:

648

Print ISBN:

978-1-56592-638-7

| ISBN 10:

1-56592-638-2

Colophon

Our look is the result of reader comments, our own experimentation, and feedback from distribution channels. Distinctive covers complement our distinctive approach to technical topics, breathing personality and life into potentially dry subjects. The animal on the cover of Windows 2000 Active Directory is a domestic cat (felis silvetris) and her kitten. The domestic cat is a descendant of the African wild cat, which first inhabited the planet almost a million years ago. Other early forerunners to the cat existed as many as 12 million years ago.

The domestic cat is one of the most popular house pets in the world. There are hundreds of breeds of domestic cats, which weigh anywhere from five to thirty pounds, with an average of twelve pounds. The cat is slightly longer than it is tall, with its body typically being longer than its tail. Domestic cats can be any of eighty different colors and patterns. They often live to be fifteen to twenty years old; ten years for a human life is about equal to sixty years for a cat.

The cat's gestation period is approxiately two months, and each litter may contain three to seven kittens. Mother cats teach their kittens to eat and to use litter boxes. Kittens can leave their mother's side ideally at the age of twelve weeks, and are considered full-grown at the age of about three years. Maureen Dempsey was the production editor and proofreader for Windows 2000 Active Directory. Norma Emory was the copyeditor. Colleen Gorman and Jane Ellin provided quality control. Sebastian Banker and Anna Snow provided production support. Ellen Troutman-Zaig wrote the index.

Hanna Dyer designed the cover of this book, based on a series design by Edie Freedman. The cover image is a 19th-century engraving from the Dover Pictorial Archive. Kathleen Wilson produced the cover layout with QuarkXPress 3.32 using Adobe's ITC Garamond font.

Alicia Cech designed the interior layout based on a series design by Nancy Priest. Mike Sierra implemented the design in FrameMaker 5.5. The text and heading fonts are ITC Garamond Light and Garamond Book. The illustrations that appear in the book were produced by Robert Romano and Rhon Porter using Macromedia FreeHand 8 and Adobe Photoshop 5. The colophon was written by Nicole Arigo.

Whenever possible, our books use RepKover, a durable and flexible lay-flat binding. If the page count exceeds RepKover's limit, perfect binding is used.

Description

Table of Contents

Product Details

Colophon