Atjaunināt sīkdatņu piekrišanu

E-grāmata: Learn Active Directory Management in a Month of Lunches

4.04/5 (54 ratings by Goodreads)
  • Formāts: 400 pages
  • Izdošanas datums: 11-Mar-2014
  • Izdevniecība: Manning Publications
  • Valoda: eng
  • ISBN-13: 9781638353553
Citas grāmatas par šo tēmu:
  • Formāts - EPUB+DRM
  • Cena: 39,56 €*
  • * ši ir gala cena, t.i., netiek piemērotas nekādas papildus atlaides
  • Ielikt grozā
  • Pievienot vēlmju sarakstam
  • Šī e-grāmata paredzēta tikai personīgai lietošanai. E-grāmatas nav iespējams atgriezt un nauda par iegādātajām e-grāmatām netiek atmaksāta.
  • Formāts: 400 pages
  • Izdošanas datums: 11-Mar-2014
  • Izdevniecība: Manning Publications
  • Valoda: eng
  • ISBN-13: 9781638353553
Citas grāmatas par šo tēmu:

DRM restrictions

  • Kopēšana (kopēt/ievietot):

    nav atļauts

  • Drukāšana:

    nav atļauts

  • Lietošana:

    Digitālo tiesību pārvaldība (Digital Rights Management (DRM))
    Izdevējs ir piegādājis šo grāmatu šifrētā veidā, kas nozīmē, ka jums ir jāinstalē bezmaksas programmatūra, lai to atbloķētu un lasītu. Lai lasītu šo e-grāmatu, jums ir jāizveido Adobe ID. Vairāk informācijas šeit. E-grāmatu var lasīt un lejupielādēt līdz 6 ierīcēm (vienam lietotājam ar vienu un to pašu Adobe ID).

    Nepieciešamā programmatūra
    Lai lasītu šo e-grāmatu mobilajā ierīcē (tālrunī vai planšetdatorā), jums būs jāinstalē šī bezmaksas lietotne: PocketBook Reader (iOS / Android)

    Lai lejupielādētu un lasītu šo e-grāmatu datorā vai Mac datorā, jums ir nepieciešamid Adobe Digital Editions (šī ir bezmaksas lietotne, kas īpaši izstrādāta e-grāmatām. Tā nav tas pats, kas Adobe Reader, kas, iespējams, jau ir jūsu datorā.)

    Jūs nevarat lasīt šo e-grāmatu, izmantojot Amazon Kindle.

Summary

Learn Active Directory Management in a Month of Lunches is a practical, hands-on tutorial designed for IT pros new to Active Directory. It skips the theory and concentrates on the day-to-day administration tasks you need to know to keep your network running smoothly. Just set aside an hour a day for a month—lunchtime would be perfect—and you'll be comfortable and productive with Active Directory before you know it.

About the Book

At the heart of your Windows network is Active Directory, the control center for administration, security, and other core management functions. If you're new to Active Directory administration—or if you find yourself unexpectedly thrust into that role—you'll need to get up to speed fast.

Learn Active Directory Management in a Month of Lunches is a hands-on tutorial designed for IT pros new to Active Directory. Without assuming previous administration experience, the book starts by walking you through the most important day-to-day system management tasks. You'll learn how to administer AD both from the GUI tools built into Windows and by using PowerShell at the command line. Along the way, you'll touch on best practices for managing user access, setting group policies, automating backups, and more.

This book assumes no prior experience with Active Directory or Windows administration. Examples are based in Windows Server 2012

Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.

What's Inside

  • ADM tasks you'll need every day
  • GUI and command line techniques
  • Content tested by new administrators
  • Well-illustrated, clearly explained examples

About the Author

Richard Siddaway is an experienced all-around Windows administrator with two decades of experience. He's the author of PowerShell in Practice andPowerShell and WMI, and coauthor of PowerShell in Depth.

Table of Contents

    PART 1 MANAGING ACTIVE DIRECTORY DATA
  1. Before you begin
  2. Creating user accounts
  3. Managing user accounts
  4. Managing groups
  5. Troubleshooting users and groups
  6. Managing computer accounts
  7. Managing organizational units
  8. PART 2 MANAGING GROUP POLICY
  9. Creating Group Policies
  10. Managing Group Policies
  11. Fine-grained password policies
  12. PART 3 MANAGING THE ACTIVE DIRECTORY SERVICE
  13. Creating domain controllers
  14. Managing domain controllers
  15. Protecting AD data
  16. Security: Default groups and delegation
  17. Managing DNS
  18. Managing sites and subnets
  19. AD replication
  20. Managing AD trusts
  21. PART 4 MAINTENANCE AND TROUBLESHOOTING
  22. Troubleshooting your AD
  23. Maintaining and monitoring Active Directory
  24. Future work and final exam
  25. Into the cloud
Preface xix
About this book xx
About the author xxii
Acknowledgments xxiii
PART 1 MANAGING ACTIVE DIRECTORY DATA
1(90)
1 Before you begin
3(8)
1.1 AD core deliverables
4(3)
Authentication
4(1)
Authorization
5(1)
AD definitions
6(1)
1.2 Is this book for you?
7(1)
1.3 How to use this book
8(1)
1.4 Creating your lab environment
9(1)
1.5 Being immediately effective
10(1)
2 Creating user accounts
11(15)
2.1 Creating new user accounts
13(6)
Creating a new user with ADAC
15(1)
Creating a new user with ADUC
16(2)
Creating a new user with PowerShell
18(1)
2.2 User creation from a template
19(2)
2.3 User creation in bulk
21(2)
2.4 Creating managed service accounts
23(1)
2.5 Lab
24(1)
Complete the Try It Now sections
24(1)
Create these accounts
24(1)
PowerShell parameters
25(1)
2.6 Ideas for on your own
25(1)
3 Managing user accounts
26(11)
3.1 Modifying user account properties
27(5)
Using GUI tools to modify user accounts
28(2)
Using PowerShell to modify user accounts
30(1)
Copying attributes from another account
31(1)
3.2 Enabling or disabling user accounts
32(1)
3.3 Deleting user accounts
32(2)
3.4 Lab
34(2)
Complete the Try It Now sections
34(1)
Modify one value out of a multivalue attribute?
35(1)
Bulk modification of user accounts
35(1)
Renaming an account
36(1)
3.5 Ideas for on your own
36(1)
4 Managing groups
37(16)
4.1 Group types
38(2)
4.2 Group lifecycle
40(6)
Creating groups
40(4)
Changing group scope
44(2)
Deleting a group
46(1)
4.3 Managing group membership
46(3)
Using GUI tools to manage group membership
46(2)
Using PowerShell to manage group membership
48(1)
4.4 Lab
49(3)
Complete the Try It Now sections
49(1)
Create six new groups
50(1)
Change group scope
51(1)
Add group members
51(1)
Remove a user from group
51(1)
Nest groups
51(1)
Delete user account
52(1)
Add computer account to group
52(1)
4.5 Ideas for on your own
52(1)
5 Troubleshooting users and groups
53(11)
5.1 Troubleshooting first steps
54(3)
Step 1 Is the account disabled?
55(1)
Step 2 Check account status
55(1)
Step 3 Has the account expired?
56(1)
5.2 Password expiry
57(1)
5.3 Password reset
58(1)
5.4 Unlocking a user account
59(2)
5.5 Group membership
61(1)
5.6 Lab
62(1)
Complete any Try It Now sections
62(1)
Account expiry
63(1)
Account lockout
63(1)
Disable an account
63(1)
5.7 Ideas for on your own
63(1)
6 Managing computer accounts
64(12)
6.1 Creating an AD computer account
65(4)
Creating a computer account using AD AC
65(1)
Creating a computer account using ADUC
66(2)
Creating a computer account using PowerShell
68(1)
6.2 Joining a computer to the domain
69(1)
Using GUI tools to join a machine to the domain
69(1)
Using PowerShell to join a machine to the domain
70(1)
6.3 Managing the secure channel
70(2)
6.4 Deleting a computer account
72(1)
6.5 Lab
73(2)
Create computer accounts
73(1)
Create computer accounts in bulk
73(1)
Searching for computer accounts
74(1)
Managing the secure channel
75(1)
Deleting computer accounts
75(1)
6.6 Ideas for on your own
75(1)
7 Managing organizational units
76(15)
7.1 OU concepts
77(1)
7.2 Creating an OU with the GUI tools
78(2)
Creating an OU with ADAC
78(1)
Creating an OU with ADUC
79(1)
7.3 Creating an OU with PowerShell
80(2)
7.4 Protecting OUs from accidental deletion
82(2)
7.5 Managing OUs
84(3)
Renaming an OU
84(1)
Adding a description to the OU
84(1)
Changing the Managed By setting
85(1)
Deleting an OU
86(1)
7.6 Moving objects between OUs
87(1)
7.7 Lab
88(2)
Creating OUs
88(1)
Renaming OUs
88(1)
Setting descriptions and Managed By
89(1)
Moving objects between OUs
89(1)
Deleting an OU
90(1)
7.8 Ideas for on your own
90(1)
PART 2 MANAGING GROUP POLICY
91(48)
8 Creating Group Policies
93(14)
8.1 Group Policy basic concepts
93(1)
8.2 Creating a Group Policy
94(5)
Creating a GPO with the GPMC
95(1)
Creating a GPO with PowerShell
96(1)
Creating Starter GPOs
97(2)
8.3 Modifying GPOs
99(4)
Computer versus user configuration
100(1)
Designating a GPO for users or computers
101(1)
Configuring GPO settings
101(2)
8.4 Setting Group Policy preferences
103(2)
8.5 Lab
105(1)
Complete the Try It Now sections
105(1)
Configuring a Starter GPO
105(1)
Creating a GPO from a Starter GPO
106(1)
8.6 Ideas for on your own
106(1)
9 Managing Group Policies
107(18)
9.1 Applying or removing a GPO
108(6)
Creating a link
108(2)
Discovering links
110(3)
Removing links
113(1)
9.2 Modifying GPO application
114(6)
GPO application order
114(2)
Blocking and overriding
116(2)
Filtering options
118(2)
9.3 Modeling GPO results
120(1)
9.4 Customizing GPO Refresh settings
121(1)
9.5 Lab
122(2)
Complete the Try It Now sections
122(1)
Create additional OUs and GPOs
123(1)
Resultant set of policies
123(1)
9.6 Ideas for on your own
124(1)
10 Fine-grained password policies
125(14)
10.1 Fine-grained password policy concepts
125(2)
10.2 Creating fine-grained password policies
127(3)
Creating a PSO using ADAC
128(1)
Creating a PSO using PowerShell
129(1)
10.3 Determining policies that exist in the domain
130(2)
Determining policies using ADAC
130(1)
Determining policies using PowerShell
131(1)
10.4 Applying PSOs to users and groups
132(2)
Applying a PSO using ADAC
132(1)
Applying a PSO using PowerShell
133(1)
Removing a PSO
134(1)
10.5 Testing the results of a policy applied to a user using PowerShell
134(1)
10.6 Lab
135(2)
Complete the Try It Now sections
135(1)
Create a PSO
136(1)
Apply fine-grained password policies
136(1)
Determine a resultant policy
136(1)
Delete a policy
137(1)
10.7 Ideas for on your own
137(2)
PART 3 MANAGING THE ACTIVE DIRECTORY SERVICE
139(134)
11 Creating domain controllers
141(14)
11.1 Creating writable domain controllers
142(7)
Installing AD Domain Services role
143(2)
Performing the domain controller promotion
145(4)
11.2 Read-Only Domain Controllers
149(5)
Creating an RODC
149(2)
Managing an RODC
151(1)
Managing the RODC password policy with PowerShell
152(2)
11.3 Lab
154(1)
Complete the Try It Now sections
154(1)
Create a domain controller
154(1)
Create a RODC
154(1)
11.4 Ideas for on your own
154(1)
12 Managing domain controllers
155(16)
12.1 Discovering domain controllers
155(4)
Finding domain controllers
156(1)
Testing the availability of a domain controller
157(1)
Services
158(1)
12.2 Global catalog
159(4)
Finding global catalogs
159(1)
Creation of a global catalog
160(2)
Removal
162(1)
12.3 FSMO roles
163(6)
Discovering FSMO role holders
164(2)
Transferring
166(2)
Seizing FSMO roles
168(1)
12.4 Lab
169(1)
Complete the Try It Now sections
169(1)
Global catalog promotion
170(1)
FSMO role transfer
170(1)
12.5 Ideas for on your own
170(1)
13 Protecting AD data
171(18)
13.1 Protection from accidental deletion
172(2)
Using the GUI
172(1)
Using PowerShell
173(1)
13.2 Snapshots
174(5)
Creating a snapshot
174(1)
Viewing existing snapshots
175(1)
Mounting snapshots
176(1)
Accessing the data from a snapshot
177(2)
Dismounting a snapshot
179(1)
13.3 AD Recycle Bin
179(3)
Installing the AD Recycle Bin
179(1)
Searching for and restoring a user account
180(1)
Restoring a user account
181(1)
Searching for and restoring an OU
182(1)
13.4 Backup and restore
182(5)
Backing up a domain controller
183(1)
Restoring the AD database
184(3)
13.5 Lab
187(1)
Complete the Try It Now sections
187(1)
Practice adding and removing protection from accidental deletion
187(1)
Compare an object in live Active Directory and a snapshot
187(1)
Restore an OU full of accounts from the AD Recycle Bin
188(1)
Restore from backup
188(1)
13.6 Ideas for on your own
188(1)
14 Security: Default groups and delegation
189(16)
14.1 Default groups
190(10)
Builtin container
191(4)
Users container
195(5)
14.2 Delegation
200(3)
14.3 Lab
203(1)
Complete the Try It Now sections
203(1)
Default group containers
204(1)
Add an account to a default group
204(1)
Use the Delegation of Control wizard
204(1)
14.4 Ideas for on your own
204(1)
15 Managing DNS
205(18)
15.1 Overview of DNS and Active Directory
205(2)
Using Microsoft DNS
206(1)
Using non-Microsoft DNS
207(1)
15.2 DNS server administration
207(7)
Viewing DNS server settings
207(1)
Creating zones
208(3)
Creating forwarders
211(3)
15.3 DNS records
214(4)
Viewing records
214(1)
Adding records
215(3)
Deleting records
218(1)
15.4 Testing DNS servers
218(3)
Testing systems can find a DNS server
219(1)
Testing SRV records
220(1)
15.5 Lab
221(1)
Complete the Try It Now sections
221(1)
Create another DNS zone
222(1)
Examine zone contents
222(1)
15.6 Ideas for on your own
222(1)
16 Managing sites and subnets
223(21)
16.1 AD site and subnet concepts
223(2)
Best practices for managing AD topology
225(1)
16.2 AD sites
225(5)
Viewing current sites
226(1)
Creating an AD site
227(3)
16.3 Subnets
230(3)
Viewing subnets
230(1)
Creating subnets
231(1)
Deleting subnets
232(1)
16.4 Site links
233(8)
Viewing site links
233(3)
Creating site links
236(1)
Removing sites from site links
237(1)
Modifying site links
237(3)
Site link bridges
240(1)
16.5 Lab
241(2)
Complete the Try It Now exercises
241(1)
Map your AD topology
242(1)
Bring a new location into your environment
242(1)
16.6 Ideas for on your own
243(1)
17 AD replication
244(16)
17.1 How replication works
245(7)
Intrasite replication
245(3)
Naming contexts
248(2)
Intersite replication
250(1)
Global catalog replication
251(1)
17.2 Configuring replication
252(1)
17.3 Testing and forcing replication
253(5)
Testing replication using Repadmin
253(1)
Testing replication using PowerShell
254(3)
Forcing replication using Repadmin
257(1)
Forcing replication with AD Sites and Services
257(1)
17.4 Lab
258(1)
Complete the Try It Now sections
258(1)
Paper replication exercise
258(1)
Application partitions
258(1)
Replication times
259(1)
Partitions
259(1)
PowerShell cmdlets
259(1)
17.5 Ideas for on your own
259(1)
18 Managing AD trusts
260(13)
18.1 Trust concepts
261(5)
Administering trusts
261(1)
Shortcut trusts
262(1)
External trusts
263(1)
Forest trusts
264(1)
Terminology
265(1)
18.2 Creating trusts
266(4)
Create a trust in your domain
266(3)
Create a trust in a remote domain
269(1)
18.3 Managing trusts
270(2)
Verifying trusts
270(1)
Resetting trusts
270(1)
Removing trusts
271(1)
18.4 Lab
272(1)
Complete the Try It Now exercises
272(1)
Repeat the exercises
272(1)
18.5 Ideas for on your own
272(1)
PART 4 MAINTENANCE AND TROUBLESHOOTING
273(64)
19 Troubleshooting your AD
275(20)
19.1 User problems
276(7)
Logon problems: Many users
276(2)
One user can't log on
278(1)
Logon scripts
279(2)
User rights
281(2)
19.2 Computer-related problems
283(3)
Logon workstation restrictions
284(1)
Failure to discover a domain controller
285(1)
19.3 Replication
286(6)
Replication data
287(2)
Event logs
289(3)
19.4 Lab
292(1)
Complete the Try It Now exercises
292(1)
Automation
293(1)
19.5 Ideas for on your own
293(2)
20 Maintaining and monitoring Active Directory
295(16)
20.1 Microsoft Operations Framework reliability workbooks
296(1)
20.2 Monitoring
297(7)
Testing availability
298(2)
Checking services
300(1)
Viewing permissions
301(1)
Testing user passwords
302(2)
20.3 Maintenance
304(5)
Clean up old accounts
304(3)
Disk space monitoring
307(1)
Test domain time synchronization
308(1)
20.4 Lab
309(1)
Complete the Try It Now sections
309(1)
Old accounts
310(1)
Review the workbook
310(1)
20.5 Ideas for on your own
310(1)
21 Future work and final exam
311(12)
21.1 Extension topics
312(6)
AD Certificate Services
312(2)
AD Rights Management Service
314(1)
AD Federation Services
315(2)
AD Lightweight Services
317(1)
21.2 Final exam
318(3)
Scenario
318(1)
Activities
319(2)
21.3 Ideas for on your own
321(2)
22 Into the cloud
323(14)
22.1 What is a cloud?
324(2)
Cloud types
324(1)
Service models
325(1)
22.2 Active Directory in the cloud
326(3)
All infrastructure in the cloud
326(1)
Infrastructure on multiple clouds
327(1)
Infrastructure in data center and cloud
328(1)
22.3 Windows Azure Active Directory
329(2)
What is WAAD?
329(1)
Using WAAD
330(1)
WAAD compared to Active Directory
331(1)
22.4 Working with WAAD
331(4)
Portals for WAAD
331(2)
PowerShell for WAAD
333(2)
22.5 Afterword
335(2)
Appendix A Searching Active Directory 337(14)
Appendix B Migrations and upgrades 351(12)
index 363
AUTHOR BIO





Richard Siddaway is an experienced all-around Windows administrator with two decades of experience. He is interested in automation techniques, including automating job creation and submission on mainframes. He has been working with Active Directory since it first appeared and has been speaking and writing about automating the management of AD for a number of years.