Premium Essay

Active Directory Benefits

In: Computers and Technology

Submitted By jjohnson517
Words 434
Pages 2
One of the benefits of moving an organization to an Active Directory environment is the use of trees and forests. Trees are groups of one or more domains who share resources. Each domain within the tree trusts the other domains in areas of security. A domain added to a tree becomes a child of that tree root domain. These trees can then become a part of a forest. A forest is a collection of numerous trees who share a common large-scale catalog, directory outline, logical structure, and directory arrangement. Forests permit organizations to group their divisions that may need to operate self-sufficiently and use different naming patterns, but still need to communicate with the entire organization through trustworthy sites and share some of the same resources. This allows the organization to reduce costs without added complication and have greater security. (1)
Another benefit would be user management. Due to active directory’s forest design, users in one domain are known to the forest domain director. This provides for more flexibility and ease of access for users who must travel from one site to another. A user can travel from site 1 to site 2 and still be able to log in with their usual username and password and have access to all resources throughout the domain. (2)
Another useful tool within active directory is group policy. Say you have an employee or group of employees who don’t necessarily follow your rules for computer use. They change their CPU’s desktop environment, including screen savers and wallpaper (sometimes downloading these from potentially dangerous websites). They are constantly downloading music from less than secure websites and visiting websites like YouTube and Facebook, instead of doing their work. These actions, in and of themselves, can be a potential security risk. This organization can utilize the group policy editor to set

Similar Documents

Free Essay

Benefits of Active Directory

...Unit 8 Assignment 2 Benefits of Active Directory An Active Directory structure is a hierarchical arrangement of information about objects. The objects fall into two broad categories: resources (e.g., printers) and security principals (user or computer accounts and groups). Security principals are assigned unique security identifiers (SIDs). Each object represents a single entity—whether a user, a computer, a printer, or a group—and its attributes. Certain objects can contain other objects. An object is uniquely identified by its name and has a set of attributes—the characteristics and information that the object represents— defined by a schema, which also determines the kinds of objects that can be stored in Active Directory. The schema object lets administrators extend or modify the schema when necessary. However, because each schema object is integral to the definition of Active Directory objects, deactivating or changing these objects can fundamentally change or disrupt a deployment. Schema changes automatically propagate throughout the system. Once created, an object can only be deactivated—not deleted. Changing the schema usually requires planning. Sites are physical (rather than logical) groupings defined by one or more IP subnets. AD also holds the definitions of connections, distinguishing low-speed (e.g., WAN, VPN) from high-speed (e.g., LAN) links. Site definitions are independent of the domain and OU structure and are common across the...

Words: 557 - Pages: 3

Premium Essay

Unit 8 Active Directory Benefits

...Active Directory Benefits The biggest difference between these two server operating systems and Windows NT is the addition of Active Directory. Although there is a bit of a learning curve associated with implementing an Active Directory environment, the benefits of doing so far outweigh the negatives. A better representation of the network Centralization sums up my primary reason for implementing Active Directory. The Active Directory structure makes it possible for you to achieve truly centralized management of users, regardless of how big your client’s network has become. If you've worked with Windows NT before, you know that in Windows NT a domain is a completely independent entity. While it's possible to create a trust relationship between domains that exist on a common network, the domains are never truly integrated with each other because there is no higher authority that manages the domains. Seeing through the forest The situation is different with Active Directory. Whereas the domain level was the highest level of abstraction in Windows NT, the highest level of abstraction in Windows 2000 and 2003 Server is the forest, which is basically a collection of domains. Microsoft chose to call this unit a forest because you can place domains into the forest, and you can place entire trees of domains into it. A domain tree consists of a parent, child, grandchildren, and great grandchildren domains. You can have as many layers of subdomains within a domain tree as is necessary...

Words: 1131 - Pages: 5

Free Essay

Active Directory Benfits for Smaller Enterprises

...[pic] Active Directory Benefits for Smaller Enterprises Microsoft Corporation Published: September 2004 Abstract Microsoft® Active Directory® (AD) has been available since early 2000, and while most organizations have completed their AD deployment and are realizing the many business benefits of having deployed Active Directory, there are still organizations that have either not completed their deployment or have yet to take advantage of some of the important features of Active Directory that yield the greatest business benefits. This whitepaper is designed to help small and medium-sized organizations understand the business advantages that can be realized quickly and easily through the use of Windows Server 2003 and Active Directory. This paper was written based on feedback from hundreds of business executives on the reasons they chose to migrate to Active Directory, and the ongoing benefits they have realized. The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. This White Paper is for informational purposes only. MICROSOFT...

Words: 7075 - Pages: 29

Free Essay

Nt1230

...Default Server: vnsc-bak.sys.gtei.net Address: 4.2.2.2 > set type=mx > bellcs.com Server: vnsc-bak.sys.gtei.net Address: 4.2.2.2 Non-authoritative answer: bellcs.com MX preference = 0, mail exchanger = bellcs.com bellcs.com nameserver = ns2.server766.net bellcs.com nameserver = ns.server766.net bellcs.com internet address = 66.78.26.7 "Setting up a Basic DNS Server for a Domain." Setting up a Basic DNS Server for a Domain. N.p., n.d. Web. 07 Aug. 2015. "Learn Exchange Server 2000: Setting Up DNS for Internet Access." RSS. N.p., n.d. Web. 07 Aug. 2015. Unit 8 Assignment 2 What benefits do you see in moving an organization to an Active Directory environment? Four Benefits of Moving an Organization to an Active Directory Environment: 1. Using an Active Directory environment gives a better representation of the network. The active Directory structure allows the possibility of a greatly centralized management of users no matter how large the client’s network has become. In Windows NT each domain is its own independent identity. Although it is possible to have...

Words: 689 - Pages: 3

Free Essay

Dns Senario

...where to place the Active- Directory Integrated DNS Servers and what type to use. One of the branch offices is very small and (5 users) and has a very slow network connectivity. Do I need a DNS Server and, if so, which type of zone should it hosts? The second branch office is much larger (about 30 users) and has better network connectivity. Does this office need a DNS Server and, if so what type of zone would you recommend? Response: Dear IT Admin; I really appreciate the opportunity to assist you in regards to implementing Active Directory & DNS Servers in your “Windows” environment. Let me start by saying that without DNS your network will more than likely not function because clients will not be able to resolve names to (IP) addresses, also DNS enables network devices such as printers and computers to communicate on the internet or locate one another within the organizations local network. Based on the given scenario, you have made an excellent choice of configuring the “Active Directory Integrated Zones” because Active Directory has the following benefits: Fault Tolerance – Redundant copy of DNS zone information can be stored on multiple servers. Security – DACL can be modified by specified user groups. Zones are Multimaster – zones can be updated in more than one location. Efficient Replication – Zone transfers are replaced by more efficient Active Directory replication. Maintain use of secondary zones – if needed. Note: Since Active Directory-Integrated Zones follow...

Words: 320 - Pages: 2

Premium Essay

Active Directory

...Riordan Active Directory Migration Tyler Dresslar POS 421 September 3, 2012 R.Chung Riordan Active Directory Migration Introduction With regards to Riordan Manufacturing acquiring new severs with Active Directory Technology, the company must look at migrating to Windows Server 2008 R2 in order facilitate the streamlining of work for the Information Technology Department. Moving to Active Directory will save Riordan TIME and MONEY, the benefits of such a move and implementation will be explained in the following paragraphs. Microsoft Active Directory Domain Services are the foundation for distributed networks built on Windows 2000 Server, Windows Server 2003 and Microsoft Windows Server 2008 operating systems that use domain controllers. Active Directory Domain Services provide secure, structured, hierarchical data storage for objects in a network such as users, computers, printers, and services. Active Directory Domain Services provide support for locating and working with these objects. Windows 2000 Server and later operating systems provide a user interface for users and administrators to work with the objects and data in Active Directory Domain Services. Network administrators write scripts and applications that access Active Directory Domain Services to automate common administrative tasks, such as adding users and groups, managing printers, and setting permissions for network resources. Independent software vendors and end-user developers can use Active...

Words: 603 - Pages: 3

Premium Essay

Unit Exercises

...Jason Wells NT 1230 Unit 8 Assignment 2 Active Directory Benefits Multimaster replication and sites One of the benefits of an Active Directory environment is the concept of sites and multimaster replication. In Windows NT, when you make a change to the SAM (Security Accounts Manager), the change is applied directly to the PDC (Primary Domain Controller) and is later replicated to each BDC (Backup Domain Controller). In an Active Directory multimaster replication environment, each domain controller contains a copy of Active Directory, not just the information for a single domain. Therefore, when a change is made to Active Directory, the change is applied to whatever domain controller is the closest, and is then replicated to the remaining domain controllers. This prevents a designated PDC (Primary Domain Controller) from being overburdened. A better representation of the network Centralization sums up a primary reason for implementing Active Directory. The Active Directory structure makes it possible for you to achieve truly centralized management of users, regardless of how big the client’s network has become. In Windows NT a domain is a completely independent entity, and while it's possible to create a trust relationship between domains that exist on a common network, the domains are never truly integrated with each other because there is no higher authority that manages the domains. With Active Directory, this is possible. Organizational Structure The domain level...

Words: 322 - Pages: 2

Premium Essay

Server Questions

...Server question Ques 1 :-Which of the following is not a benefit of DHCP? 1.       centralized administration of IP configuration 2.       dynamic host configuration 3.       seamless IP host configuration 4.       portability of workstations ques 2:- Which of the following is not a component of DNS? 1.       DNS namespace 2.       DNS zones 3.       DNS resource records 4.       DNS relay agent Ques 3:- A starting address of 192.0.0.0 and an ending address of 223.255.255.255 is a member of which network class? 1.       Class a 2.       Class b 3.       Class c 4.       Class d Ques 4:- Which of the following is not a function of DHCP? 1.       transmitting data from one network to another 2.       bootstrapping diskless workstations 3.       automating the assigning, tracking, and reassigning of IP addresses 4.       dynamically allocating an IP address from a pool of addresses ques 5:-  If a system will be a DHCP server, what type of address should you set? 1.       automatic private IP address 2.       fixed IP address 3.       static IP address 4.       none of the above ques 6:- What is the minimum number of physical computers required to allow you to use a KMS key? 1.       20 Vista and ten Windows Server 2008 computers 2.       20 Vista and five Windows Server 2008 computers 3.       15 Vista and ten Windows Server 2008 computers 4.       25 Vista and five Windows Server 2008 computers Ques 7:- A striped volume uses which type of striping to interleave data across...

Words: 4583 - Pages: 19

Premium Essay

Windows Server Proposal for Worldwide Advertising Inc.

...Sunday, October 30, 2011 Windows Server Proposal For Worldwide Advertising Inc. Below is a project for my Windows Server Administration Course. This was the first course of the kind I have taken.  Let me know what you think.  Summary Servers are the backbone of an organization. The implementation and configuration of a server network can determine the prosperity or failure of a business. After reviewing the needs of Worldwide Advertising Inc., I have come up with what I think is the best solution.  I will be covering infrastructure server roles such as:  DHCP and DNS, which work behind the scenes, to the application servers which give life to your advertising dreams.  I have prescribed an active directory schema that will require effortless management. I have proposed a File and Sharing implementation that suites a growing enterprise as well as state of the art data storage. I have also noted some preliminary estimates of scheduling and manpower required for the solution. Deployment and Server Edition             Throughout the infrastructure the most advanced server operating system, Windows Server 2008 R2, will be used. Enterprise edition will be leveraged on all servers, because it has 4 virtual licenses per OS. To increase reliability and security Server Core will be on all servers. There will be a total of 10 servers for the Worldwide Advertising Inc. internal network. The majority of the servers will be managed from the Los Angeles main office while four servers...

Words: 2342 - Pages: 10

Free Essay

Dns Scenario

...The best location is going to be at the branches that need to utilize active directory services on a regular basis. These locations will benefit the most from having access to a domain controller with DNS services. It is important to note that Domain members will consistently utilize the DNS services to access domain resources. When the computer boots it will try to find a Domain controller to authenticate using the DNS serves. If there is not an instance of DNS created within the system then this process will traverse the site link. The site link could be very slow causing a longer boot time for that workstation and decreased productivity. Also if the site links cease to function on a network that doesn’t have an instance of DNS then the users will not be able to access the internet at all. For the small branch office with only 5 computers the authentication credentials can be accessed from the cached credentials. You will also need to ensure that non-domain DNS servers are available if the site link goes down. This is a solution you could employ if you did not want to set-up a DNS server at the smaller branch. However it would help to create a stable network by having one there as well as provide a backup in case of site link failure. The larger location will definitely need to have its on domain controller and DNS system set-up to ensue that the network will function properly. You can use active directory zones for both locations as well. Regards, IT Admin Aaron...

Words: 296 - Pages: 2

Free Essay

Active Directory

...Windows Server 2003 Active Directory Judith Che Strayer University of Maryland Author Note Judith Che, Strayer University of Maryland. Any questions regarding this article should be address to Judith Che. Strayer University Maryland, White Marsh, MD 21085. Company’s today relay on good networking in order for their business to grow and succeed. A system engineer requires the ability, knowledge, and skill to plan and manage today’s networking which faces an ever-increasing variety of applications. We need to be skilled and informed to manage a network running Windows Server 2003 Active Directory. Present day networking administrators have difficulties ensuring that network resources are available to users when access is needed and securing the network in such a way that available resources are accessible to the proper user with the proper permission. We will have to solve networking problems including troubleshooting, configuration, installation, administration, and managing element. Starting from choosing the best Windows Server 2003 Edition that will meet the company’s needs in terms of price, performance and features; work group woes, name resolution nightmares and DNS name conflicts to server security. These problems can be solved with proper planning, managing, and designing a day-to-day administration of an Active Directory domain within their Windows Server 2003 network environment. We predict that implementing a Windows Server 2003 Active Directory will beat and exceed...

Words: 5782 - Pages: 24

Free Essay

Network Solution

...Network Infrastructure Proposal Per the request of (CUSTOMER) I have written the following proposal in order to clearly depict the benefits and steps required to install a computer networking infrastructure within the hospitals main building. Summary of requirement Fifty new workstations have recently been delivered to the IT staff for new employees. The (CUSTOMER) staff continues to grow at a phenomenal rate, and now needs a common storage area for sensitive patient information, and administrative data. Instant access to critical or time sensitive information is vital to operations. Searching through various local directories, on fifty plus different machines to locate one file is no longer acceptable. Security, data integrity, and administrative control all must be considered with any solution that is implemented. Project Analysis The scope of this project will be: To install infrastructure, plenum grade Multimode fiber optic cabling (MMF), plenum grade Category six copper cabling (Cat6), and wireless access points (WAP) throughout the main building in order to build a Windows Active Directory domain. We will then network all consumable resources, storage shares, and printers together, then control access with role-based access permissions. User groups will consist of Admin (IT), HR, Staff, and Medical according to (CUSTOMER)'s internal employee divisions, users will be dropped into appropriate group(s). Proposed Solution Aside from purchasing cabling and termination...

Words: 909 - Pages: 4

Free Essay

Walmart Item Finder Application

...Kelsey Polston Professor Chu Directory Services Infrastructure CIS409 February 3, 2013 Assignment 1: IT Consultation for Fast Paced Financial Fast Paced Financial is a start-up company that has decided to deploy Windows Server 2008 network as their base. There are many advantages to running Windows Server 2008 such as Active Directory Domain Services, integrated DNS services, and easier authentication. Windows also offers ample support for their products to assist companies in better utilizing all of the advanced features. The owner of Fast Paced Financial has many reservations as to why he wants Windows Server 2008 utilized within his company, but he also does not understand why it is necessary to have such an ample amount of money dedicated to his IT department. A substantial amount of money is required to deploy a Windows Server 2008 network due to licensing and hardware costs. This is a concern to the Owner Mark Cohen since he does not work with IT for a living he does not understand all of the requirements that a company requires to run its network. Little to no downtime and preventing the loss of sensitive data are his primary concerns when it comes to his network functionality. “Some of the benefits of Active Directory DS include a hierarchical organizational structure, a single point of access to network resources, and the ability to create trust relationships with external networks running previous versions of Active Directory and even UNIX.” (Course, 2008)...

Words: 1224 - Pages: 5

Free Essay

Assessment Questions It

...Lab #3 – Assessment Worksheet Identify & Classify Data for Access Control Requirements Course Name & Number: IS3230 ______________________________________________________________ Student Name: Heather Young ______________________________________________________________________ Instructor Name: MR. Gibbs _____________________________________________________________________ Lab Due Date: Jan. 2014 _______________________________________________________________________ Overview This lab provides the student with the opportunity to develop a data classification standard with procedures and guidelines to classify data access based on the job responsibilities – not an organizational position. In this lab, students aligned a data classification standard with the job function and roles that are required to access specific data. This alignment allows access controls policy definition to be properly implemented throughout the IT infrastructure to mitigate risk from unauthorized access. Lab Assessment Questions & Answers 1. What is the Data Classification Standard used in the U.S. Department of Defense (DoD)/Military?Google “Data Classification Standard + DoD”. Summarize the different data classifications. Top Secret- highest level of information sensitivity Secret- information that would cause serious damage, most common classification level Confidential- Is the lowest of sensitivity. This information may only be handled by personnel with a clearance, may...

Words: 993 - Pages: 4

Free Essay

Active Dir

...Active Directory Design Guide Thursday, 25 February 2010 Version 2.0.0.0 Baseline Prepared by Microsoft Prepared by Microsoft Copyright This document and/or software (“this Content”) has been created in partnership with the National Health Service (NHS) in England. Intellectual Property Rights to this Content are jointly owned by Microsoft and the NHS in England, although both Microsoft and the NHS are entitled to independently exercise their rights of ownership. Microsoft acknowledges the contribution of the NHS in England through their Common User Interface programme to this Content. Readers are referred to www.cui.nhs.uk for further information on the NHS CUI Programme. All trademarks are the property of their respective companies. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. © Microsoft Corporation 2010. All rights reserved. Disclaimer At the time of writing this document, Web sites are referenced using active hyperlinks to the correct Web page. Due to the dynamic nature of Web sites, in time, these links may become invalid. Microsoft is not responsible for the content of external Internet sites. Page ii Active Directory – Design Guide Prepared by Microsoft, Version 2.0.0.0 Last modified on 26 February 2010 Prepared by Microsoft TABLE OF CONTENTS 1 2 Executive Summary ..............................................................................................

Words: 43732 - Pages: 175