

•	Table of Contents
•	Index
•	Reviews
•	Reader Reviews
•	Errata

Active Directory, 2nd Edition
By Robbie Allen, Alistair G. Lowe-Norris

Publisher	: O'Reilly
Pub Date	: April 2003
ISBN	: 0-596-00466-4
Pages	: 686

Preface

Intended Audience

Contents of the Book

Conventions in This Book

How to Contact Us

Acknowledgments

Part I: Active Directory Basics

Chapter 1. A Brief Introduction

Section 1.1. Evolution of the Microsoft NOS

Section 1.2. Windows NT Versus Active Directory

Section 1.3. Windows 2000 Versus Windows Server 2003

Section 1.4. Summary

Chapter 2. Active Directory Fundamentals

Section 2.1. How Objects Are Stored and Identified

Section 2.2. Building Blocks

Section 2.3. Summary

Chapter 3. Naming Contexts and Application Partitions

Section 3.1. Domain Naming Context

Section 3.2. Configuration Naming Context

Section 3.3. Schema Naming Context

Section 3.4. Application Partitions

Section 3.5. Summary

Chapter 4. Active Directory Schema

Section 4.1. Structure of the Schema

Section 4.2. Attributes (attributeSchema Objects)

Section 4.3. Attribute Syntax

Section 4.4. Classes (classSchema Objects)

Section 4.5. Summary

Chapter 5. Site Topology and Replication

Section 5.1. Site Topology

Section 5.2. Data Replication

Section 5.3. Summary

Chapter 6. Active Directory and DNS

Section 6.1. DNS Fundamentals

Section 6.2. DC Locator

Section 6.3. Resource Records Used by Active Directory

Section 6.4. Delegation Options

Section 6.5. Active Directory Integrated DNS

Section 6.6. Using Application Partitions for DNS

Section 6.7. Summary

Chapter 7. Profiles and Group Policy Primer

Section 7.1. A Profile Primer

Section 7.2. Capabilities of GPOs

Section 7.3. Summary

Part II: Designing an Active Directory Infrastructure

Chapter 8. Designing the Namespace

Section 8.1. The Complexities of a Design

Section 8.2. Where to Start

Section 8.3. Overview of the Design Process

Section 8.4. Domain Namespace Design

Section 8.5. Design of the Internal Domain Structure

Section 8.6. Other Design Considerations

Section 8.7. Design Examples

Section 8.8. Designing for the Real World

Section 8.9. Summary

Chapter 9. Creating a Site Topology

Section 9.1. Intrasite and Intersite Topologies

Section 9.2. Designing Sites and Links for Replication

Section 9.3. Examples

Section 9.4. Summary

Chapter 10. Designing Organization-Wide Group Policies

Section 10.1. How GPOs Work

Section 10.2. Managing Group Policies

Section 10.3. Using GPOs to Help Design the Organizational Unit Structure

Section 10.4. Debugging Group Policies

Section 10.5. Summary

Chapter 11. Active Directory Security: Permissions and Auditing

Section 11.1. Using the GUI to Examine Permissions

Section 11.2. Using the GUI to Examine Auditing

Section 11.3. Designing Permission Schemes

Section 11.4. Designing Auditing Schemes

Section 11.5. Real-World Examples

Section 11.6. Summary

Chapter 12. Designing and Implementing Schema Extensions

Section 12.1. Nominating Responsible People in Your Organization

Section 12.2. Thinking of Changing the Schema

Section 12.3. Creating Schema Extensions

Section 12.4. Wreaking Havoc with Your Schema

Section 12.5. Summary

Chapter 13. Backup, Recovery, and Maintenance

Section 13.1. Backing Up Active Directory

Section 13.2. Restoring a Domain Controller

Section 13.3. Restoring Active Directory

Section 13.4. FSMO Recovery

Section 13.5. DIT Maintenance

Section 13.6. Summary

Chapter 14. Upgrading to Windows Server 2003

Section 14.1. New Features in Windows Server 2003

Section 14.2. Differences With Windows 2000

Section 14.3. Functional Levels Explained

Section 14.4. Preparing for ADPrep

Section 14.5. Upgrade Process

Section 14.6. Post-Upgrade Tasks

Section 14.7. Summary

Chapter 15. Migrating from Windows NT

Section 15.1. The Principles of Upgrading Windows NT Domains

Section 15.2. Summary

Chapter 16. Integrating Microsoft Exchange

Section 16.1. Quick Word about Exchange Server 2003

Section 16.2. Preparing Active Directory for Exchange 2000

Section 16.3. Exchange 5.5 and the Active Directory Connector

Section 16.4. Summary

Chapter 17. Interoperability, Integration, and Future Direction

Section 17.1. Microsoft's Directory Strategy

Section 17.2. Interoperating with Other Directories

Section 17.3. Integrating Applications and Services

Section 17.4. Summary

Part III: Scripting Active Directory with ADSI, ADO, and WMI

Chapter 18. Scripting with ADSI

Section 18.1. What Are All These Buzzwords?

Section 18.2. Writing and Running Scripts

Section 18.3. ADSI

Section 18.4. Simple Manipulation of ADSI Objects

Section 18.5. Further Information

Section 18.6. Summary

Chapter 19. IADs and the Property Cache

Section 19.1. The IADs Properties

Section 19.2. Manipulating the Property Cache

Section 19.3. Checking for Errors in VBScript

Section 19.4. Summary

Chapter 20. Using ADO for Searching

Section 20.1. The First Search

Section 20.2. Other Ways of Connecting and Retrieving Results

Section 20.3. Understanding Search Filters

Section 20.4. Optimizing Searches

Section 20.5. Advanced Search Function—SearchAD

Section 20.6. Summary

Chapter 21. Users and Groups

Section 21.1. Creating a Simple User Account

Section 21.2. Creating a Full-Featured User Account

Section 21.3. Creating Many User Accounts

Section 21.4. Modifying Many User Accounts

Section 21.5. Account Unlocker Utility

Section 21.6. Creating a Group

Section 21.7. Adding Members to a Group

Section 21.8. Evaluating Group Membership

Section 21.9. Summary

Chapter 22. Manipulating Persistent and Dynamic Objects

Section 22.1. The Interface Methods and Properties

Section 22.2. Creating and Manipulating Shares with ADSI

Section 22.3. Enumerating Sessions and Resources

Section 22.4. Manipulating Print Queues and Print Jobs

Section 22.5. Summary

Chapter 23. Permissions and Auditing

Section 23.1. How to Create an ACE Using ADSI

Section 23.2. A Simple ADSI Example

Section 23.3. A Complex ACE Example

Section 23.4. Creating Security Descriptors

Section 23.5. Listing ACEs to a File for All Objects in an OU and Below

Section 23.6. Summary

Chapter 24. Extending the Schema and the Active Directory Snap-Ins

Section 24.1. Modifying the Schema with ADSI

Section 24.2. Customizing the Active Directory Administrative Snap-ins

Section 24.3. Summary

Chapter 25. Using ADSI and ADO from ASP or VB

Section 25.1. VBScript Limitations and Solutions

Section 25.2. How to Avoid Problems When Using ADSI and ASP

Section 25.3. Combining VBScript and HTML

Section 25.4. Binding to Objects Via Authentication

Section 25.5. Incorporating Searches into ASP

Section 25.6. Migrating Your ADSI Scriptsfrom VBScript to VB

Section 25.7. Summary

Chapter 26. Scripting with WMI

Section 26.1. Origins of WMI

Section 26.2. WMI Architecture

Section 26.3. Getting Started with WMI Scripting

Section 26.4. WMI Tools

Section 26.5. Manipulating Services

Section 26.6. Querying the Event Logs

Section 26.7. Querying AD with WMI

Section 26.8. Monitoring Trusts

Section 26.9. Monitoring Replication

Section 26.10. Summary

Chapter 27. Manipulating DNS

Section 27.1. DNS Provider Overview

Section 27.2. Manipulating DNS Server Configuration

Section 27.3. Creating and Manipulating Zones

Section 27.4. Creating and Manipulating Resource Records

Section 27.5. Summary

Chapter 28. Getting Started with VB.NET and System.Directory Services

Section 28.1. The .NET Framework

Section 28.2. Using VB.NET

Section 28.3. Overview of System.DirectoryServices

Section 28.4. DirectoryEntry Basics

Section 28.5. Searching with DirectorySearcher

Section 28.6. Manipulating Objects

Section 28.7. Summary

Colophon

Index

[ Team LiB ]