Active Directory Technical Overview

1
Active Directory Technical Overview

• Nguyen An Que
• Technology Manager, Core InfraMicrosoft
  VietnamQue.Nguyen_at_microsoft.com

2
AD Overview

• Introduction
• AD directory database for
• Users Computers
• Printers
• Servers
• System configurations.
• Usage
• User logon
• Granting permissions
• File Share/Printer Share
• Application access
• Client OS remote deployment (Windows Deployment
  Service)
• Group Policies
• Remote Software (Update) deployment
• Office (Outlook Profile automatic creation),
  Dictionary, VN keyboard, inhouse apps
• Desktop lockdown
• My Document redirection, Volume Shadow Copy
• Infrastructure for
• Exchange, SharePoint, ConfigMgr 2007, OpsMgr
  2007, ISA...

3
Application Platform IO
Business Productivity IO
Core IO
4
Core IO exampleIdentity Access Management

• No AD for Authentication for 80 users
• Users operate in admin mode

• AD for Authentication and Authorization
• Users operate in admin mode
• Desktops and servers not controlled by Group
  Policy

• AD Group Policy and Security templates used to
  manage desktops servers for security and
  configurations
• Information Protection Infrastructure using RMS

• Centrally manage users provisioning across
  heterogeneous systems using ILM
• Federated Identity Management across
  organizational boundaries using ADFS

5
Logical design
External DNS mycompany.com.vn
Internal DNS mycompany.com
Empty Forest Root
400 users
400 users
200 users
north.mycompany.com
south.mycompany.com
central.mycompany.com
AD domain north\user0001south\user1000 Email
domainuser001_at_mycompany.com.vnuser1000_at_mycompan
y.com.vn
Workstation Logon Screen UsernamePasswordLogon
To (north, central, or south)
6
La?ng Son
Ha Nô?i
HAN-DC-01 02 DC, GCnorth.mycompany.com
Ha Tây
Ha?i Phong
Physical design,Site design Server placement
Ða Nang
HCM
7
(No Transcript)