What is Windows 2000 Active Directory

1
What is Windows 2000 Active Directory?
Info_at_nbsys.com
www.nbsys.com
Niel Smith Instructor/Technician
2
Administrators Dream
What is Windows 2000 Active Directory ?
www.nbsys.com
Active Directory is the database used by Windows
2000 to manage all network objects. Centralized
and automated administration provides uniform and
efficient network.
3
Lecture Topics
What is Windows 2000 Active Directory ?
www.nbsys.com

• Client Side Benefits of Group Policy
• AD Structure and Administration
• Upgrade/Migration Considerations

4
GP Software Deployment
What is Windows 2000 Active Directory ?
www.nbsys.com

5
GP Desktop-User
What is Windows 2000 Active Directory ?
www.nbsys.com

• Hide all icons on desktop
• Dont save settings at exit
• Hide these specified drives in My Computer
• Remove Run menu from Start menu
• Prohibit user from running Display control panel
• Disable and remove links to Windows Update
• Disable changes to Taskbar and Start Menu
  settings
• Disable/Remove the Shut Down command

6
GP Desktop-Network
What is Windows 2000 Active Directory ?
www.nbsys.com

• Hide My Network Places icon on desktop
• Remove the Map Network Drive and Disconnect
  Network Drive
• Tools menu Disable Internet Options menu option

7
GP Desktop-Administration
What is Windows 2000 Active Directory ?
www.nbsys.com

• Remove Search menu from Start menu
• Remove Run menu from Start menu
• Disable Task Manager
• Run only allowed Windows applications
• Remove the Documents menu from the Start menu
• Disable changes to Taskbar and Start Menu
  settings
• Hide common program groups in Start menu

8
GP Internet Explorer
What is Windows 2000 Active Directory ?
www.nbsys.com
9
GP Folder Redirection
What is Windows 2000 Active Directory ?
www.nbsys.com

• Advantages of Folder Redirection
• Data Is Always Available to Users Regardless of
  the Computer Logged on to
• Data Is Centrally Stored for Ease of Management
  and Backup
• Network Traffic Is Generated Only When Users Gain
  Access to Files
• Files Are Not Saved on the Client Computer

10
GP Disk Quotas
What is Windows 2000 Active Directory ?
www.nbsys.com
User 1 100 MB
NTFS Partition
User 2 35 MB

• Per User, Per Partition
• Warn or Enforce
• Set Locally or with GP on a NTFS 5 Partition

11
GP Scripts
What is Windows 2000 Active Directory ?
www.nbsys.com

• Group Policy Script Settings Allow You to
• Centrally Configure Scripts to Run Automatically
  at Startup and Shutdown, and When Users Log On
  and Log Off
• Manage and Configure User Environments

12
GP Security
What is Windows 2000 Active Directory ?
www.nbsys.com
13
GP Security Templates
What is Windows 2000 Active Directory ?
www.nbsys.com
14
Domains,Trees, and Forests
What is Windows 2000 Active Directory ?
www.nbsys.com
15
Directory Partitions
What is Windows 2000 Active Directory ?
www.nbsys.com
Schema
Contains definitions and rules for creating and
manipulating all objects and attributes
Forest
Configuration
Contains information about Active Directory
structure
contoso.msft
Holds information about all domain-specific
objects created in Active Directory
Domain
Active Directory Database
16
Global Catalog
What is Windows 2000 Active Directory ?
www.nbsys.com
Queries
Group membership when user logs on
17
Replication
What is Windows 2000 Active Directory ?
www.nbsys.com

• Domain Controllers
• Multiple Master

18
Sites
What is Windows 2000 Active Directory ?
www.nbsys.com

• Sites
• Optimize replication traffic
• Enable users to log on to a domain controller by
  using a reliable, high-speed connection

19
Organizational Units
What is Windows 2000 Active Directory ?
www.nbsys.com
20
Delegation
What is Windows 2000 Active Directory ?
www.nbsys.com

• Delegate at any level
• Full Control
• Specific Task
• Reset passwords
• Add users
• Etc

21
Task Pads
What is Windows 2000 Active Directory ?
www.nbsys.com
22
Group Policy and Structure
What is Windows 2000 Active Directory ?
www.nbsys.com

• Apply GP at Site, Domain, or OU level and filter
  by users or groups.
• Unless blocked child containers inherit GP
  settings from parent container.
• Slow link detection (500 kbps) disables
• Software installation
• Folder redirection

23
UpgradeExisting Root
What is Windows 2000 Active Directory ?
www.nbsys.com
24
UpgradeNew Root
What is Windows 2000 Active Directory ?
www.nbsys.com
25
Native Mode
What is Windows 2000 Active Directory ?
www.nbsys.com

• Only applies to Domain Controllers
• Can still have NT Member servers
• and NT and 9x workstations.
• Added functionality
• -Universal Groups
• -Group Nesting

26
Compatibility
What is Windows 2000 Active Directory ?
www.nbsys.com

• Hardware, Software, Systems
• www.microsoft.com/windows2000/upgrade/compat/
• Hardware
• www.microsoft.com/hcl
• Windows2000 Compatibility Mode

27
Windows 2000 Active Directory
Info_at_nbsys.com
www.nbsys.com

• Provides centralized, automated, and delegated
  administration through group polices.
• Distributed data base is scaleable and
  replication is controlled through sites.
• Uniform and efficient network
• reduces busy work
• increases productivity.