Active Directory

Preface

1. A Brief Introduction
-Evolution of the Microsoft NOS
-Summary

2. Active Directory Fundamentals
-How Objects Are Stored and Identified
-Building Blocks
-Summary

3. Active Directory Management Tools
-Management Tools
-Customizing the Active Directory Administrative Snap-ins
-Active Directory PowerShell Module
-Best Practices Analyzer
-Active Directory-Based Machine Activation
-Summary

4. Naming Contexts and Application Partitions
-Domain Naming Context
-Configuration Naming Context
-Schema Naming Context
-Application Partitions
-Summary

5. Active Directory Schema
-Structure of the Schema
-Attributes (attributeSchema Objects)
-Attribute Properties
-Classes (classSchema Objects)
-Summary-

6. Site Topology and Active Directory Replication
-Site Topology
-How Replication Works
-Common Replication Problems
-Summary

7. Searching Active Directory
-The Directory Information Tree
-Searching the Database
-Attribute Data Types
-Optimizing Searches
-Summary

8. Active Directory and DNS
-DNS Fundamentals
-DNSSEC
-DC Locator
-Resource Records Used by Active Directory
-Delegation Options
-Active Directory-Integrated DNS
-Using Application Partitions for DNS
-Aging and Scavenging
-Managing DNS with Windows PowerShell
-Summary

9. Domain Controllers
-Building Domain Controllers
-Virtualization
-Read-Only Domain Controllers
-Summary

10. Authentication and Security Protocols
-Kerberos
-Authentication Mechanism Assurance
-Managed Service Accounts
-Summary

11. Group Policy Primer
-Capabilities of Group Policy Objects
-How Group Policies Work
-Managing Group Policies
-Troubleshooting Group Policy
-Summary

12. Fine-Grained Password Policies
-Understanding Password Settings Objects
-Scenarios for Fine-Grained Password Policies
-Creating Password Settings Objects
-Managing Password Settings Objects
-Delegating Management of PSOs
-Summary

13. Designing the Active Directory Structure
-The Complexities of a Design
-Where to Start
-Overview of the Design Process
-Domain Namespace Design
-Design of the Internal Domain Structure
-Other Design Considerations
-Design Examples
-Recognizing Nirvana's Problems
-Summary

14. Creating a Site Topology
-Intrasite and Intersite Topologies
-Designing Sites and Links for Replication
-Design Examples
-Additional Resources
-Summary

15. Planning for Group Policy
-Using GPOs to Help Design the Organizational Unit Structure
-Design Examples
-Summary

16. Active Directory Security: Permissions and Auditing
-Permission Basics
-Using the GUI to Examine Permissions
-Using the GUI to Examine Auditing
-Designing Permissions Schemes
-Designing Auditing Schemes
-Real-World Active Directory Delegation Examples
-The AdminSDHolder Process
-Dynamic Access Control
-Summary

17. Designing and Implementing Schema Extensions
-Nominating Responsible People in Your Organization
-Thinking of Changing the Schema
-Creating Schema Extensions
-Summary

18. Backup, Recovery, and Maintenance
-Backing Up Active Directory
-Restoring a Domain Controller
-Restoring Active Directory
-Working with Snapshots
-Active Directory Recycle Bin
-FSMO Recovery
-Restartable Directory Service
-DIT Maintenance
-Summary

19. Upgrading Active Directory
-Active Directory Versions
-Functional Levels
-Beginning the Upgrade
-Known Issues
-Summary

20. Active Directory Lightweight Directory Services
-Common Uses for AD LDS
-AD LDS Terms
-Differences Between AD and AD LDS
-AD LDS Installation
-Tools
-The AD LDS Schema
-Using AD LDS
-Summary

21. Active Directory Federation Services
-Introduction to Federated Identity
-Understanding ADFS Components
-Deploying ADFS
-Relying Party Trusts
-Claims Rules and the Claims Pipeline
-Customizing ADFS
-Troubleshooting ADFS
-Summary

Appendix A: Programming the Directory with the .NET Framework

Index