Daily summary-AD domain service

AD Domain Services

This chapter talks about the relationship and concept of active directory, domain controller and domain.

Active directory

1. It is a service of Windows 2. Is a directory database that centrally stores user accounts, groups, computers, and

Information about objects such as shared folders

Advantages: 1. Centralized management

two。 Convenient access to network resources

3. Expandability

Domain

1. An implementation form of active Directory

two。 The core management unit in the active directory

3. Consists of domain controllers and member computers

Domain controller

1. A computer with an active directory installed

two。 Domain administrators can control the behavior of each domain user

Relationship: a domain controller is a computer with active Directory installed, and it and the domain member machine make up the domain environment.

Second, the structure of the domain

Divided into physical structure and logical structure

Logical structure:

1. Single domain (only one domain is established in the network)

two。 Domain tree (multiple domains with consecutive namespaces)

3. Domain forest (consisting of one or more domain trees that do not form a continuous namespace, also known as a forest or forest structure)

4. A container within an organizational unit (OU) domain

Physical structure:

1. Site (corresponding to the high-speed and stable IP subnet, I feel that the site can be regarded as an unlimited LAN)

two。 Domain controller (mentioned in the physical structure of the domain, self-feeling is because it is physical)

Function of domain controller: responsible for information synchronization on each DC in the case of multi-domain control

Third, the functional level of the active directory

If different operating system versions are installed on multiple domain controllers in the same domain, the functions of the active directory provided by them will also be different.

The function level is to keep the function consistency of the active directory in the same scope.

4. AD lightweight Directory Service (AD LDS)

Purpose: to provide directory services for applications that read more frequently, such as CRM and HR

Features: independent of dependent domain and domain controller

One computer can run multiple AD LDS instances at the same time

Can run on the same network as AD DS at the same time

Support both domain and workgroup users

V. the difference between a working group and a domain

1. Different management modes

two。 Peer-to-Peer Network and Cramp S structure

3. Domain environment is a prerequisite for deploying many Microsoft services