Active Directory

Sobre este curso

hello and welcome to Virtual Academy and our course today introduction to Active Directory my name is Christopher Chapman I’m a Microsoft certified trainer and IT planner in the

product development group here at Microsoft in Microsoft learning working on server and system center technologies today we’re going to discuss Active Directory and its role at well various

roles I guess there’s a better way to put it in the IT realm my background I’m an IT pro with background in helpdesk support network administration systems administration and then gradually moved

into projects and project management I’ve done work in SharePoint exchange Active Directory as it pertains to today especially migrations from other products centralization of non managed

networks various projects across the IT portfolio my contact information is on this slide right here feel free to send me emails with any questions after today I can’t promise a specific response time

but hopefully I will be able to get back to you in a reasonable amount of time you can also find me on Twitter here at the bottom at Christopher MSL today we’re going to cover the roles of Active

Directory and how each of them works what they do what they provide and in some cases how they interact we’ll go over a quick introduction of each of these roles really it is what they are

and what they do and then we’ll dive into each one a little bit deeper in an individual module per role domain services certificate services Federation services rights management services and

finally lightweight directory services our target audience for this is any IT professionals interested in potentially gaining more knowledge we also have a target here for people new to IT new to

technology new to Active Directory or even already in an IT role in a health s core support position looking to move into something bigger better faster and more suggested prerequisites the

Microsoft technology associate track is a terrific track for people who are new to technology or new specifically to Microsoft technologies who would like to move into going through some courses

getting some certifications as first steps into further knowledge of an IT career our Windows operating system fundamentals server administration

fundamentals and networking security fundamental courses are great starting points for really any IT career in progress or future we’re going to jump right in introduction this again is an

overview of those five roles provided by Active Directory and then we’ll cover those in more details in subsequent modules later today Active Directory isn’t what it used to be I put this up

here as a reminder to myself still people to this day use the term Active Directory to define what is Active Directory domain services what used to be Active Directory was that one

specific service the centralized management of users and computers across your IT organization using the tools provided when the technology was introduced it has changed and Active

Directory now as a definition is a portfolio of technologies it is a collection of services server roles and features used to manage Identity and Access for and to resources on the

network the five roles are covered here domain Federation rights management lightweight directory and certificate with some brief descriptions of what they provide Active Directory being the

overarching technology definition for all of them tying them all together in some cases directly and in others merely complementary in a complementary fashion Active Directory domain services users

computers and policies is what we’re going to manage this is what we’re going to be working with in this role Active Directory certificate services service client server and user identification

verification of identification and in some cases slightly more advanced security topics and non-repudiation verification of contents we may not cover those in great detail today but

it’s what’s provided Federation services resource access across traditional boundaries the allowing of resources in my organization to be accessed by security principles in other

organizations without needing some of the traditional trust mechanisms eighty rights management services a way for me to maintain the security of the data in my organization both within and

outside of that organization and lightweight directory services I don’t have a description here only because it really is just a copy of the structure of Active Directory domain services and

we’ll cover that later in subsequent modules what is the first one Active Directory domain services this is potentially the biggest I’m going to fight call it most important but most

prolific role in the Active Directory suite a directory service is both the directory information source and the service that makes the information available and usable in this case

information about servers users clients network devices applications and in this case I specified email servers because there’s a very close tied Active Directory and Exchange in the Microsoft

portfolio this information is both about and provided to each of these categories by Active Directory domain services manageability security and interoperability all provided in a

centralized much more easily managed method than without this technology scalable secure and manageable infrastructure for user and resource management it is all of those things in

one package this is why we use Active Directory domain services it lets me manage essentially as many objects users computers printers shares as I can cram into it given that I have the hardware

to support it in a centralized manner all from a single console potentially it also allows me however to delegate that administration out to other administrators in my organization its

stores manages information about network resources in the previous slide we saw servers clients users network applications various pieces of information it provides support for

directory enabled applications such as Microsoft Exchange Server in this case there is a direct connection to Active Directory by exchange server and it allows for centralized management and

then the delegation of that centralized out to other potential business units or administrators Active Directory certificate services is the Microsoft implementation of public key

infrastructure and I felt like putting the definition of that on here because I didn’t largely leave it at that PKI is a set of hardware software people policies and procedures needed to create

manage distribute use store and revoke digital certificates I like that mouthful of information we’re actually going to go into great detail about all of those things in the

specific module related to Active Directory certificate services and user entities users or computers certificate stores responsible for apposite or ease and revocation requests certificate

retrieval and certificate revocation are all bits and pieces of the ADCs story we’re going to cover each of these pieces in more detail in the future as well what does it do it provides

customizable services for issuing and managing digital certificates at the end of the day certificate services I hate to oversimplify just does one thing and this is it issues and manages

certificates it’s that simple it does this in a number of different ways and with a number of different tools all the tools listed here certification authorities certification web enrolment

online responders network device enrollment services certificate enrollment web service and the certificate enrollment policy web service are all the pieces used to

manage those certificates they’re issuing in their management Active Directory Federation services a software component that facilitates the cross-organizational access of systems

and applications this lets me as an IT administrator either share my resources out to the world or let my users access resources in someone else’s organization depending on which side of this equation

I happen to be on it provides simplified secured identity Federation and web single sign-on capabilities the real beauty of Federation services there are other ways to do this built into

Microsoft technology what FS lets us do is make it seamless I log in once that’s all I have to do i access an application via the web that application is actually going to use my credentials in my

organization to authenticate and authorize me into that application in another organization enables the creation of trust relationships provides access to applications and provide

single sign-on between two different directories for web-based applications a DRMs rights management services is an information protection technology it works with applications to safeguard our

digital information what this allows for if I’m an author it allows me to create content as simple as a word document or even an email it allows me to protect that word document or email using those

in this case a BRMS aware applications word or outlook it lets me set what can be done with that data after it’s been created I type up my word document I type up my email I tell that application

protect this document and don’t let somebody do something with it print it copy it forward it on to another mail recipient if it’s an email in particular and then that protection

follows that document anywhere the recipient of that information having access to my RMS infrastructure through various means both public and private will be able to verify that that

document is indeed accessible to them but then again be restricted with what they can do with it allows individuals and administrators to specify access permissions to documents workbooks and

presentations I it’s not necessarily limited to just these three pieces of information again I mentioned emails you can expand this out to other bits of data prevent sensitive information from

being printed forwarded or copied by unauthorized people access and usage restrictions are enforced no matter where the information is located if I create a word document I protect it with

RMS I email it to someone outside of Microsoft or outside of my organization they are still subject to the restrictions of that document and even then given that they can access the RMS

infrastructure through some other means in the first place our last one Active Directory lightweight directory services is essentially Active Directory domain

services in an empty shell template form it’s both the directory information source and the service that makes it available and usable this is the same definition we used earlier in a DDS same

options except without a couple of the key pieces that a DDS provides when those users network devices applications and email servers I can use Active Directory lightweight directory services

to store replicate access information the same information that I could track an actor director domain services names locations application information specific to that application I can use

ad LDS to access and use that information directory service provides flexible support for directory enabled applications without the dependencies and domain related restrictions of a DDS

actor/director domain services is a management tool for an organization it comes with the overhead of that requirement it’s a management tool lightweight directory services is merely

an information store but it is a structured information store based on the structure of a TBS provide directory services for directory enabled applications without incurring the

overhead of domains and forests no requirement for a single schema throughout a forest I can customize ad LDS as much as I’d like thank you for sticking around that’s the end of our

first module we’re going to be back in a few minutes to talk about these technologies in greater depth and go into them in more detail you