Lecture 11 active directory
0 likes342 views
Active Directory is a directory service that provides centralized management of users, groups, computers, and other network resources. A server running Active Directory Domain Services is called a domain controller and authenticates users, enforces security policies, and manages software updates. Active Directory consists of multiple directory services including Domain Services, Lightweight Directory Services, Certificate Services, Federation Services, and Rights Management Services that provide functions like single sign-on, certificate issuance, and rights management.
Lecture 11 active directory
- 1. Microsoft Certified Solutions Expert Lecture No.11 Active Directory Domain Controller Copyrights By Tanveer Malik
- 2. Active Directory • Active Directory (AD) is a directory service that Microsoft developed for Windows domain networks. • It is included in most Windows Server operating systems as a set of processes and services. Initially, Active Directory was only in charge of centralized domain management. • Starting with Windows Server 2008, however, Active Directory became an umbrella title for a broad range of directory-based identity-related services. Copyrights By Tanveer Malik
- 3. Active Directory • A server running Active Directory Domain Services (AD DS) is called a Domain Controller. • It authenticates and authorizes all users and computers in a Windows domain type network assigning and enforcing security policies for all computers and installing or updating software. • For example, when a user logs into a computer that is part of a Windows domain, Active Directory checks the submitted password and determines whether the user is a system administrator or normal user. Copyrights By Tanveer Malik
- 4. Copyrights By Tanveer Malik
- 5. Active Directory Services • Active Directory Services consist of multiple directory services. The best known is Active Directory Domain Services, commonly abbreviated as AD DS or simply AD. • Domain Services • Lightweight Directory Services • Certificate Services • Federation Services • Rights Management Services Copyrights By Tanveer Malik
- 6. Domain Services • Active Directory Domain Services (AD DS) is the Feature of every Windows domain network. • It stores information about members of the domain, including devices and users, verifies their aspect and defines their access rights. • The server running this service is called a domain controller. Copyrights By Tanveer Malik
- 7. Lightweight Directory Services • Active Directory Lightweight Directory Services, formerly known as Active Directory Application Mode. • it is a light-weight implementation of AD DS. AD LDS runs as a service on Windows Server. • It does not require the creation of domains or domain controllers. • It provides a Data Store for storage of directory data and a Directory Service with an LDAP Directory Service Interface. Copyrights By Tanveer Malik
- 8. Certificate Services • It can create, validate and revoke public key certificates for internal uses of an organization. • These certificates can be used to encrypt files emails, network traffic Copyrights By Tanveer Malik
- 9. Federation Services • Active Directory Federation Services (AD FS) is a single sign-on service. • With an AD FS infrastructure in place, users may use several web-based services (e.g. internet forum, blog, online shopping, webmail) Copyrights By Tanveer Malik
- 10. Rights Management Services • It is a server software for information rights management shipped with Windows Server. • It uses encryption and a form of selective functionality denial for limiting access to documents such as corporate e-mails, Microsoft Word documents, and web pages, and the operations authorized users can perform on them.