Learn Active Directory Management in a Month of Lunches

402 Pages·2016·19.2 MB·English

by  Siddaway R.

Learn Active Directory Management
in a Month of Lunches
ii
Learn Active Directory Management
in a Month of Lunches
RICHARD SIDDAWAY
MANNING
SHELTER ISLAND
For online information and ordering of this and other Manning books, please visit
www.manning.com. The publisher offers discounts on this book when ordered in quantity.
For more information, please contact
Special Sales Department
Manning Publications Co.
20 Baldwin Road
PO Box 261
Shelter Island, NY 11964
Email: [email protected]
©2014 by Manning Publications Co. All rights reserved.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in
any form or by means electronic, mechanical, photocopying, or otherwise, without prior written
permission of the publisher.
Many of the designations used by manufacturers and sellers to distinguish their products are
claimed as trademarks. Where those designations appear in the book, and Manning
Publications was aware of a trademark claim, the designations have been printed in initial caps
or all caps.
Recognizing the importance of preserving what has been written, it is Manning’s policy to have
the books we publish printed on acid-free paper, and we exert our best efforts to that end.
Recognizing also our responsibility to conserve the resources of our planet, Manning books are
printed on paper that is at least 15 percent recycled and processed without elemental chlorine.
Manning Publications Co. Development editor: Suzie Pitzen
20 Baldwin Road Copyeditor: Jodie Allen
PO Box 261 Proofreader: Melody Dolab
Shelter Island, NY 11964 Typesetter: Marija Tudor
Cover designer: Leslie Haimes
ISBN: 9781617291197
Printed in the United States of America
1 2 3 4 5 6 7 8 9 10 – MAL – 19 18 17 16 15 14
To my children, Robert and Alexander
You make me so proud

brief contents
PART 1 MANAGING ACTIVE DIRECTORY DATA .......................... 1
1 ■ Before you begin 3
2 ■ Creating user accounts 11
3 ■ Managing user accounts 26
4 ■ Managing groups 37
5 ■ Troubleshooting users and groups 53
6 ■ Managing computer accounts 64
7 ■ Managing organizational units 76
PART 2 MANAGING GROUP POLICY ....................................... 91
8 ■ Creating Group Policies 93
9 ■ Managing Group Policies 107
10 ■ Fine-grained password policies 125
PART 3 MANAGING THE ACTIVE DIRECTORY SERVICE............ 139
11 ■ Creating domain controllers 141
12 ■ Managing domain controllers 155
vii
viii BRIEF CONTENTS
13 ■ Protecting AD data 171
14 ■ Security: Default groups and delegation 189
15 ■ Managing DNS 205
16 ■ Managing sites and subnets 223
17 ■ AD replication 244
18 ■ Managing AD trusts 260
PART 4 MAINTENANCE AND TROUBLESHOOTING................... 273
19 ■ Troubleshooting your AD 275
20 ■ Maintaining and monitoring Active Directory 295
21 ■ Future work and final exam 311
22 ■ Into the cloud 323
contents
preface xix
about this book xx
about the author xxii
acknowledgments xxiii
PART 1 MANAGING ACTIVE DIRECTORY DATA . ............ 1
1 Before you begin 3
1.1 AD core deliverables 4
Authentication 4 ■ Authorization 5 ■ AD definitions 6
1.2 Is this book for you? 7
1.3 How to use this book 8
1.4 Creating your lab environment 9
1.5 Being immediately effective 10
2 Creating user accounts 11
2.1 Creating new user accounts 13
Creating a new user with ADAC 15 ■ Creating a new user with
ADUC 16 ■ Creating a new user with PowerShell 18
2.2 User creation from a template 19
ix