Active Directory Cookbook

by Hunter, Laura E.

• ISBN13: 9780596521103
• ISBN10: 0596521103
• Edition: 3rd
• Format: Paperback
• Copyright: 2008-12-01
• Publisher: Oreilly & Associates Inc

Summary

If you need practical hands-on support for Active Directory, the new edition of this Cookbook provides quick solutions to more than 300 problems you might encounter when deploying, administering, and automating Active Directory to manage users in Windows Server 2008 and Exchange 2007. You'll find recipes for the Lightweight Directory Access Protocol (LDAP), ADAM, multi- master replication, Domain Name System (DNS), Group Policy, the Active Directory Schema, and many other features.

Author Biography

Laura E. Hunter is an Architect with the Oxford Computer Group, specializing in Microsoft Identity and Access Management technologies. Her specialties include Active Directory design and implementation, troubleshooting, and security topics. Laura is a Microsoft MVP for Windows Server-Networking.

Laura's previous experience includes a position as an AD Architect for a global engineering firm, IT Project Leader with the University of Pennsylvania, and the Director of Computer Services for the Salvation Army.

She also operates as an independent technical speaker and writer. Laura has a Bachelor's Degree in American History and a Master's Degree in Computer Science from the University of Pennsylvania.

Robbie Allen is the coauthor of Active Directory, 2nd Edition and the author of the Active Directory Cookbook. Visit Robbie's web site at www.robbieallen.com.

Table of Contents

Preface

Who Should Read This Book?

WhatG++s in This Book?

Conventions Used in This Book

Using Code Examples Safari-½ Books Online

We'd Like Your Feedback!

Acknowledgments

Getting Started

Approach to the Book

Where to Find the Tools

Getting Familiar with LDIF

Programming Notes

Replaceable Text

Where to Find More Information

Forests, Domains, and Trusts

Introduction

Creating a Forest

Removing a Forest

Creating a Domain

Removing a Domain

Removing an Orphaned Domain

Finding the Domains in a Forest

Finding the NetBIOS Name of a Domain

Renaming a Domain

Raising the Domain Mode to Windows 2000 Native Mode

Viewing and Raising the Functional Level of a Windows Server 2003 or 2008 Domain

Raising the Functional Level of a Windows Server 2003 or 2008 Forest

Using AdPrep to Prepare a Domain or Forest for Windows Server 2003 or 2008

Determining Whether AdPrep Has Completed

Checking If a Windows Domain Controller Can Be Upgraded to Windows Server 2003 or 2008

Creating an External Trust

Creating a Transitive Trust Between Two AD Forests

Creating a Shortcut Trust Between Two AD Domains

Creating a Trust to a Kerberos Realm

Viewing the Trusts for a Domain

Verifying a Trust

Resetting a Trust

Removing a Trust

Enabling SID Filtering for a Trust

Enabling Quarantine for a Trust

Managing Selective Authentication for a Trust

Finding Duplicate SIDs in a Domain

Adding Additional Fields to Active Directory Users and Computers

Domain Controllers, Global Catalogs, and FSMOs

Introduction

Promoting a Domain Controller

Promoting a Read-Only Domain Controller

Performing a Two-Stage RODC Installation

Modifying the Password Replication Policy

Promoting a Windows Server 2003 Domain Controller from Media

Promoting a Windows Server 2008 Domain Controller from Media

Demoting a Domain Controller

Automating the Promotion or Demotion of a Domain Controller

Troubleshooting Domain Controller Promotion or Demotion Problems

Verifying the Promotion of a Domain Controller

Removing an Unsuccessfully Demoted Domain Controller

Renaming a Domain Controller

Finding the Domain Controllers for a Domain

Finding the Closest Domain Controller

Finding a Domain ControllerG++s Site

Moving a Domain Controller to a Different Site

Finding the Services a Domain Controller Is Advertising

Restoring a Deleted Domain Controller

Resetting the TC

Table of Contents provided by Publisher. All Rights Reserved.