Module 12: Implementing an Active Directory ® Domain Services Infrastructure.
-
Upload
maud-townsend -
Category
Documents
-
view
230 -
download
3
Transcript of Module 12: Implementing an Active Directory ® Domain Services Infrastructure.
![Page 1: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/1.jpg)
Module 12: Implementing an Active Directory® Domain Services
Infrastructure
![Page 2: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/2.jpg)
Module Overview
• Overview of the AD DS Domain
• Planning a Group Policy Strategy
![Page 3: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/3.jpg)
Lesson 1: Overview of the AD DS Domain
• Overview of the Current AD DS Domain Design
• Overview of the Required AD DS Domain Design
• Overview of the AD DS Site Design
![Page 4: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/4.jpg)
Overview of the Current AD DS Domain Design
Forest Root Domain
Asia.WoodgroveBank.comEMEA.WoodgroveBank.com
WoodgroveBank.com
![Page 5: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/5.jpg)
Overview of the Required AD DS Domain Design
Contoso.com
Separate Tree
Contoso.com will join the WoodgroveBank forest in a separate tree
Forest Root Domain
Asia.WoodgroveBank.com
WoodgroveBank.com
EMEA.WoodgroveBank.com
![Page 6: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/6.jpg)
Overview of the AD DS Site DesignLondon_Site
NYC-Branch-Office
Miami_Site
Tokyo_Site
New Site
Contoso
New Site
NYC-Head-Office
Two new sites will be created
•Contoso site
•NYC-Branch-Office site
![Page 7: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/7.jpg)
Lesson 2: Planning a Group Policy Strategy
• Overview of Domain Controller Deployment
• Overview of Forest Trust Relationship
• Overview of the AD DS Group Policy Object Design
![Page 8: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/8.jpg)
Overview of Domain Controller Deployment
London_Site
RODC
RODCNYC-DC3
NYC-Branch-Office
Miami_Site
Tokyo_Site
New
Contoso
New
NYC_Site
ContosoDC
![Page 9: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/9.jpg)
Lab A: Deploying Active Directory Domain Services
• Exercise 1: Installing a Read-only Domain Controller (RODC) onto Server Core, and Creating a Branch Office Site
• Exercise 2: Creating a Domain in a Separate Tree and Separate Site
Logon information
Virtual machine NYC-DC1, NYC-DC1, NYC-DC3, NYC-SRV1
User name Administrator
Password Pa$$w0rd
Estimated time: 120 minutes
![Page 10: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/10.jpg)
Lab A: Review
• How do sites control logon traffic?
• What is the advantage of having separate trees in the forest for Woodgrove Bank?
![Page 11: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/11.jpg)
Overview of Forest Trust Relationship
Forest Root Domain
Asia.WoodgroveBank.com
WoodgroveBank.com
EMEA.WoodgroveBank.com
Fabrikam.com
Forest Root Domain
Contoso.com
Forest TrustSeparate Tree
The Fabrikam.com forest will have a forest trust relationship with the WoodgroveBank forest
![Page 12: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/12.jpg)
Lab B: Configuring Forest Trust Relationships
• Exercise: Upgrading the Fabrikam Domain, and Creating a Forest Trust with Woodgrove Bank
Logon information
Virtual machine NYC-DC1, VAN-DC1, NYC-SRV1, NYC-RAS
User name Administrator
Password Pa$$w0rd
Estimated time: 60 minutes
![Page 13: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/13.jpg)
Lab B Review
• What tasks must be performed before a Windows Server 2008 can be added to a Windows 2003 domain as a member server?
• What tasks must be performed before a Windows Server 2008 can be added to a Windows 2003 domain as a domain controller?
![Page 14: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/14.jpg)
Overview of the AD DS Group Policy Object Design
ITAdmins
WoodgroveBank.com
ExecutivesTorontoNYCMiami
BranchManagers BranchManagers BranchManagers
Investments Workstations
CustomerService Computers
Users
CustomerService CustomerService
Marketing
Workstations
Investments
Marketing
Workstations
![Page 15: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/15.jpg)
Lab C: Designing a Group Policy Strategy
• Exercise 1: Planning Group Policy
• Exercise 2: Implementing the Corporate Desktop Policy
Logon information
Virtual machine NYC-DC1
User name Administrator
Password Pa$$w0rd
Estimated time: 30 minutes
![Page 16: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/16.jpg)
Lab C: Review
• How would you ensure that a policy will always be applied?
• How would you exempt certain users or computers from being affected by a GPO?
![Page 17: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/17.jpg)
Module Review and Takeaways
• Considerations
![Page 18: Module 12: Implementing an Active Directory ® Domain Services Infrastructure.](https://reader031.fdocuments.net/reader031/viewer/2022032308/56649f4c5503460f94c6cc70/html5/thumbnails/18.jpg)
Course Evaluation