Implementing An Active Directory Infrastructure

By Author: iris
Total Articles: 286
Comment this article

A new object called the InetOrgPerson, which is designated as an Internet
administrator.
Global catalog replication improvements.
The free it certification ability to deactivate a schema class or attribute, creating defunct schema
objects.
Improved replication as well as the ability to replicate linked values.
The four domain functional levels are
Windows 2000 mixed
Windows 2000 native
Windows Server 2003 interim
Windows Server 2003
The default functional level for a new domain is Windows 2000 mixed. This is basically the same as the Windows 2000 mixed mode domain, except that you can have Windows Server 2003 domain controllers along with Windows NT 4 and Windows 2000 domain controllers.
When raising the domain functional level to Windows 2000 native, you must have only Windows 2000 and Windows Server 2003 domain controllers. When running Windows 2000 native functional level, you have the added capabilities of
Using universal security groups
Nesting groups
Using SID History
The Windows Server ...
... 2003 interim domain functional level is intended for upgrading a domain directly from Windows NT 4 to Windows Server 2003. It does not support Windows 2000 domain controllers, only those running free Microsoft practice tests and Windows Server 2003.
The Windows Server 2003 domain functional level supports only domain controllers running Windows Server 2003. Keep in mind that when you raise a domain's functional level, you cannot install any domain controllers using unsupported operating systems. For example, a Windows Server 2003 functional level domain cannot have a Windows NT 4 or a Windows 2000 domain controller added to it. The additional features avail?able within the Windows Server 2003 functional level are
Domain controller renaming, using the domain controller rename tool
Updating the logon timestamp
Ability to convert groups
Use of SID History
Universal groups enabled for both distribution groups and security groups
Full nesting of groups
Within an Active Directory forest, you already have an established Kerberos transitive, two-way trust relationship between each parent and child domain. Transitive means that when DomainA trusts DomainB, and DomainB trusts DomainC, then DomainA also trusts DomainC. Two-way means that when DomainA trusts DomainB, then DomainB also trusts DomainA. There are no automatic trusts with any other entity, whether another forest, an external Windows NT 4 domain, or a Kerberos realm. In addition, in large forests with several domains, the trust relationships must be resolved up to the root domain and back down and can cause a delay. To overcome these issues, you can establish the following microsoft exam papers types of trust relationships:
Explicit external trusts
Forest trusts
Shortcut trusts