Active directory field guide

Contents......Page 6
About the Author......Page 10
About the Technical Reviewer......Page 11
Acknowledgments......Page 12
Introduction......Page 13
CHAPTER 1: Installing Active Directory......Page 16
Creating the Logical Structure......Page 17
Creating the Physical Design......Page 27
Installing Active Directory......Page 35
Scripting the AD Installation......Page 39
Scripting a Bare Metal Install......Page 44
Troubleshooting Network Connectivity......Page 46
Troubleshooting Name Resolution......Page 48
Summary......Page 51
Additional Resources......Page 52
CHAPTER 2: Integrating the Network Infrastructure......Page 53
Deploying DNS......Page 54
Creating the DNS Infrastructure......Page 58
Configuring Forwarders......Page 63
Securing DNS......Page 66
Integrating with Third-Party DNS......Page 70
Using DHCP......Page 71
Configuring DHCP Scopes......Page 73
Integrating DHCP with DNS......Page 80
Supporting WINS and NetBIOS......Page 82
Installing a WINS Server......Page 83
Specifying Client Options for WINS......Page 85
Configuring WINS Replication......Page 86
Summary......Page 89
Additional Resources......Page 90
CHAPTER 3: Daily Administration......Page 91
Creating Users......Page 92
Performing Bulk Operations......Page 95
Configuring User Accounts......Page 98
Delegating Administrative Authority......Page 106
Managing Groups......Page 108
Configuring Groups......Page 109
Leveraging Group Nesting......Page 111
Creating Groups......Page 113
Configuring User Profiles......Page 114
Configuring EFS......Page 122
Recovering Encrypted Files......Page 123
Additional Resources......Page 125
CHAPTER 4: Deploying Group Policy......Page 126
Group Policy Management Console......Page 127
Migrating Group Policy Settings......Page 130
Modeling Group Policy......Page 132
Using Organizational Units......Page 133
Configuring Policy Inheritance......Page 134
Customizing Policy Inheritance......Page 135
Controlling the Desktop......Page 138
Configuring Lockdown (Kiosk) Workstations......Page 139
Using Software Restriction Policies......Page 140
Securing Client Operating Systems......Page 147
Creating an Installation Package......Page 154
Understanding Deployment Options......Page 155
Using Advanced Techniques......Page 158
Controlling the Registry and File System......Page 159
Summary......Page 160
Additional Resources......Page 161
CHAPTER 5: Active Directory Security......Page 162
Understanding IP Security Vulnerabilities......Page 163
Creating an IPSec Policy......Page 165
Managing IPSec from the Command Line......Page 170
Strengthening TCP/IP Stack Security......Page 174
Securing Domain Controllers......Page 177
Configuring User Rights......Page 182
Enabling Restricted Groups......Page 184
Configuring Authentication Protocols......Page 186
Controlling Anonymous Access to Active Directory......Page 188
Creating an Audit Policy......Page 189
Monitoring User Activity......Page 193
Collecting Auditing Information......Page 194
Additional Resources......Page 197
Managing Multiple Domains and Forests......Page 199
Delegating Authority......Page 200
Managing Trust Relationships......Page 205
Managing Active Directory Sites......Page 214
Configuring Replication......Page 217
Using Application Directory Partitions......Page 224
Troubleshooting Replication Issues......Page 226
Summary......Page 229
Additional Resources......Page 230
CHAPTER 7: Active Directory Migrations......Page 231
Upgrading from Windows NT 4.0......Page 232
Performing In-Place Upgrades......Page 233
Restructuring an NT 4.0 Environment......Page 246
Securing the Migration Process......Page 248
Migrating User Profiles......Page 250
Using the Active Directory Migration Tool......Page 251
Migration Scenarios......Page 252
Performing an Interforest Migration......Page 254
Additional Resources......Page 262
CHAPTER 8: Disaster Recovery......Page 263
Using Alternate Startup Modes......Page 264
Using the Recovery Console......Page 267
Backing Up and Restoring Active Directory......Page 270
Using Windows Backup......Page 271
Using Automated System Recovery......Page 272
Performing Active Directory Restores......Page 275
Creating a Test Network......Page 287
Additional Resources......Page 292
CHAPTER 9: Scripting and Schem(a)ing......Page 293
So What\'s This Schema Business (and Why Do I Care)?......Page 294
Using Active Directory Application Mode......Page 306
Getting Started......Page 311
More Scripting Tricks to Make Your Life Better......Page 322
Additional Resources......Page 329
A......Page 331
D......Page 333
G......Page 335
L......Page 337
M......Page 338
N......Page 339
R......Page 340
S......Page 341
V......Page 342
Z......Page 343