Wednesday, May 7, 2008

Notes on AD

dc promo - how to install and uninstall Active directory

 

net share - command line, network shares

 

ntds.dit - active directory database c:\windows\NTDS

 

on first install of AD in AD user and computers, view menu|advanced features

 

netdom - set and revoke trusts or AD domains and trusts

trust = can give access to resources in another forest.  Can allow forestes to share resources

or trusting each other

 

Transitive and non-transitive

A trusts B

B trusts C

 

if trans - then A trusts C - it transitivates (is that a word?)

if no trans - than A does not trust C

 

shortcut Trust is used to shorten the path to the resource

 

External Trust = a trust between external domains

 

Forest trust - acts almost like one forest accept that you can

have seperate schemas

 

AD container units = OU

Ou's can hold objects like users, computers, and other ou's

 

Ldifde is an ldap text file that you set up prior to the impoirt process and

use this to import users into AD

 

F5 to refresh AD users and computers

 

 

 

 

Realm Trust - kerberos authenticates - a forest trusts all users

within a kerberos realm

 

 

0 comments: