Active Directory Administration for Windows Server 2012 & Windows Server 2012 R2 PDF
Preview Active Directory Administration for Windows Server 2012 & Windows Server 2012 R2
Active Directory Administration: The Personal Trainer Windows Server 2012 & Windows Server 2012 R2 William R. Stanek PUBLISHED BY Stanek & Associates PO Box 362 East Olympia, WA 98540-0362 Copyright © 2015 William R. Stanek All rights reserved. No part of the contents of this book may be reproduced, stored or transmitted in any form or by any means without the express written permission of the publisher. United States of America Stanek & Associates is a trademark of William R. Stanek. All other marks are property of their respective owners. The example names for companies, organizations, persons and other named elements used in the book are fictitious. No association with any real company, organization, person or other named element is intended or should be inferred. This book expresses the author’s views and opinions. The information contained herein is provided without any express, statutory or implied warranties. Neither the authors, the publishers, the resellers nor distributors will be held liable for any damages caused or alleged to be caused either directly or indirectly by this book. Cover Design: Creative Designs Ltd. Editorial Development: Andover Publishing Solutions Technical Review: L & L Technical Content Services You can provide feedback related to this book by emailing the author at [email protected]. Please use the name of the book as the subject line. Contents at a Glance Introduction Chapter 1. Active Directory Essentials Chapter 2. Installing New Forests, Domain Trees, and Child Domains Chapter 3. Deploying Writeable Domain Controllers Chapter 4. Deploying Read-Only Domain Controllers Chapter 5. Configuring, Maintaining, and Troubleshooting Global Catalog Servers Chapter 6. Configuring, Maintaining, and Troubleshooting Operations Masters Chapter 7. Managing Active Directory Sites, Subnets, and Replication Chapter 8. Managing Trusts and Authentication Chapter 9. Maintaining and Recovering Active Directory Appendix A. Active Directory Utilities Reference About the Author Table of Contents Introduction What’s This Book About? What Do I Need to Know? How Is This Book Organized? What Conventions Are Used in This Book? Other Resources Chapter 1. Active Directory Essentials Understanding Directory Services Introducing Active Directory Active Directory Domains DNS Domains Domain Controllers Active Directory Objects Active Directory Schema Active Directory Components Physical Components Logical Components Domains Trees Forests Organizational Units Managing Active Directory Working with Active Directory Active Directory Administration Tools Graphical Administration Tools Command-Line Tools Chapter 2. Installing New Forests, Domain Trees, and Child Domains Preparing for Active Directory Installation Working with Directory Containers and Partitions Establishing or Modifying Your Directory Infrastructure Establishing Functional Levels Active Directory Enhancements for Windows Server 2008 and R2 Active Directory Enhancements for Windows Server 2012 and R2 Deploying Windows Server 2012 and R2 Creating Forests, Domain Trees, and Child Domains Installing the AD DS Binaries Creating New Forests Creating New Domain Trees Creating New Child Domains Chapter 3. Deploying Writeable Domain Controllers Preparing to Deploy or Decommission Domain Controllers Adding Writeable Domain Controllers Installing Additional Writeable Domain Controllers Adding Writeable Domain Controllers Using Replication Adding Writeable Domain Controllers Using Installation Media Decommissioning Domain Controllers Preparing to Remove Domain Controllers Global catalog server Bridgehead server Operations master Removing Additional Domain Controllers Removing the Last Domain Controller Forcing the Removal of Domain Controllers Stopping Active Directory Domain Services Restarting a Domain Controller in Directory Services Restore Mode Performing Forced Removal of Domain Controllers Cleaning Up Metadata in the Active Directory Forest Cleaning Up Server Metadata Cleaning Up DNS Records Confirming Removal of Deleted Server Objects Chapter 4. Deploying Read-Only Domain Controllers Preparing to Deploy Read-Only Domain Controllers Understanding RODC Installation Options Adding RODCs Without Staging Using Staged Installations Stage 1: Creating the RODC Account and Preparing for Installation Stage 2: Attaching the RODC and Finalizing Installation Performing Staged Installations Using Windows PowerShell Decommissioning RODCs Forcing the Removal of RODCs Setting Password Replication Policy Password Replication Policy Essentials Allowing and Denying Accounts Managing Credentials on RODCs Identifying Allowed or Denied Accounts Resetting Credentials Delegating Administrative Permissions Chapter 5. Configuring, Maintaining, and Troubleshooting Global Catalog Servers Working with Global Catalog Servers Deploying Global Catalog Servers Adding Global Catalog Servers Monitoring and Verifying Global Catalog Promotion Identifying Global Catalog Servers Restoring Global Catalog Servers Removing Global Catalog Servers Controlling SRV Record Registration Managing and Maintaining Universal Group Membership Caching Universal Group Membership Caching Essentials Enabling Universal Group Membership Caching Monitoring and Troubleshooting Universal Group Membership Caching Managing and Maintaining Replication Attributes Understanding Global Catalog Search and the Partial Attribute Set
The list of books you might like
