Active Directory Field Guide

* Task-based, advanced solutions * Discusses non-traditional or out-of-band solutions * Written from real-world knowledge * Focuses on solutions relevant to consultants Contents......Page 6 About the Author......Page 10 About the Technical Reviewer......Page 11 Acknowledgments......Page 12 Introduction......Page 13 CHAPTER 1: Installing Active Directory......Page 16 Creating the Logical Structure......Page 17 Creating the Physical Design......Page 27 Installing Active Directory......Page 35 Scripting the AD Installation......Page 39 Scripting a Bare Metal Install......Page 44 Troubleshooting Network Connectivity......Page 46 Troubleshooting Name Resolution......Page 48 Summary......Page 51 Additional Resources......Page 52 CHAPTER 2: Integrating the Network Infrastructure......Page 53 Deploying DNS......Page 54 Creating the DNS Infrastructure......Page 58 Configuring Forwarders......Page 63 Securing DNS......Page 66 Integrating with Third-Party DNS......Page 70 Using DHCP......Page 71 Configuring DHCP Scopes......Page 73 Integrating DHCP with DNS......Page 80 Supporting WINS and NetBIOS......Page 82 Installing a WINS Server......Page 83 Specifying Client Options for WINS......Page 85 Configuring WINS Replication......Page 86 Summary......Page 89 Additional Resources......Page 90 CHAPTER 3: Daily Administration......Page 91 Creating Users......Page 92 Performing Bulk Operations......Page 95 Configuring User Accounts......Page 98 Delegating Administrative Authority......Page 106 Managing Groups......Page 108 Configuring Groups......Page 109 Leveraging Group Nesting......Page 111 Creating Groups......Page 113 Configuring User Profiles......Page 114 Configuring EFS......Page 122 Recovering Encrypted Files......Page 123 Additional Resources......Page 125 CHAPTER 4: Deploying Group Policy......Page 126 Group Policy Management Console......Page 127 Migrating Group Policy Settings......Page 130 Modeling Group Policy......Page 132 Using Organizational Units......Page 133 Configuring Policy Inheritance......Page 134 Customizing Policy Inheritance......Page 135 Controlling the Desktop......Page 138 Configuring Lockdown (Kiosk) Workstations......Page 139 Using Software Restriction Policies......Page 140 Securing Client Operating Systems......Page 147 Creating an Installation Package......Page 154 Understanding Deployment Options......Page 155 Using Advanced Techniques......Page 158 Controlling the Registry and File System......Page 159 Summary......Page 160 Additional Resources......Page 161 CHAPTER 5: Active Directory Security......Page 162 Understanding IP Security Vulnerabilities......Page 163 Creating an IPSec Policy......Page 165 Managing IPSec from the Command Line......Page 170 Strengthening TCP/IP Stack Security......Page 174 Securing Domain Controllers......Page 177 Configuring User Rights......Page 182 Enabling Restricted Groups......Page 184 Configuring Authentication Protocols......Page 186 Controlling Anonymous Access to Active Directory......Page 188 Creating an Audit Policy......Page 189 Monitoring User Activity......Page 193 Collecting Auditing Information......Page 194 Additional Resources......Page 197 Managing Multiple Domains and Forests......Page 199 Delegating Authority......Page 200 Managing Trust Relationships......Page 205 Managing Active Directory Sites......Page 214 Configuring Replication......Page 217 Using Application Directory Partitions......Page 224 Troubleshooting Replication Issues......Page 226 Summary......Page 229 Additional Resources......Page 230 CHAPTER 7: Active Directory Migrations......Page 231 Upgrading from Windows NT 4.0......Page 232 Performing In-Place Upgrades......Page 233 Restructuring an NT 4.0 Environment......Page 246 Securing the Migration Process......Page 248 Migrating User Profiles......Page 250 Using the Active Directory Migration Tool......Page 251 Migration Scenarios......Page 252 Performing an Interforest Migration......Page 254 Additional Resources......Page 262 CHAPTER 8: Disaster Recovery......Page 263 Using Alternate Startup Modes......Page 264 Using the Recovery Console......Page 267 Backing Up and Restoring Active Directory......Page 270 Using Windows Backup......Page 271 Using Automated System Recovery......Page 272 Performing Active Directory Restores......Page 275 Creating a Test Network......Page 287 Additional Resources......Page 292 CHAPTER 9: Scripting and Schem(a)ing......Page 293 So What's This Schema Business (and Why Do I Care)?......Page 294 Using Active Directory Application Mode......Page 306 Getting Started......Page 311 More Scripting Tricks to Make Your Life Better......Page 322 Additional Resources......Page 329 A......Page 331 D......Page 333 G......Page 335 L......Page 337 M......Page 338 N......Page 339 R......Page 340 S......Page 341 V......Page 342 Z......Page 343

Active Directory Field Guide is ideal for Windows and Active Directory administrators and consultants. It contains valuable descriptions of higher-level skills, tasks, and tools, including migration, large-scale deployment, security, and disaster recovery, and provides bold, nontraditional solutions.

Author Laura E. Hunter is a Microsoft "Most Valuable Professional," and this book is based on her real-world knowledge. It will help you save time and increase your network efficiency. Full of task-based, advanced solutions, it will also function as an indispensable reference guide.

Table of Contents

1. Installing Active Directory
2. Integrating the Network Infrastructure
3. Daily Administration
4. Deploying Group Policy
5. Active Directory Security
6. Managing Large-Scale Deployments
7. Active Directory Migrations
8. Disaster Recovery
9. Scripting and Schem(a)ing