Guia De Ms Active Directory

UCRL-MA-148650

A Guide to Microsoft
Active Directory (AD)
Design
John Dias

May, 2002

U.S. Department of Energy

Lawrence
Livermore
National
Laboratory

Approved for public release; further dissemination unlimited

DISCLAIMER
This document was prepared as an account of work sponsored by an agency of the
United States Government. Neither the United States Government nor theUniversity of California nor any of their employees, makes any warranty, express or
implied, or assumes any legal liability or responsibility for the accuracy,
completeness, or usefulness of any information, apparatus, product, or process
disclosed, or represents that its use would not infringe privately owned rights.
Reference herein to any specific commercial product, process, or service bytrade
name, trademark, manufacturer, or otherwise, does not necessarily constitute or
imply its endorsement, recommendation, or favoring by the United States
Government or the University of California. The views and opinions of authors
expressed herein do not necessarily state or reflect those of the United States
Government or the University of California, and shall not be used foradvertising or
product endorsement purposes.
This work was performed under the auspices of the U. S. Department of Energy by
the University of California, Lawrence Livermore National Laboratory under
Contract No. W-7405-Eng-48.
This report has been reproduced
directly from the best available copy.
Available to DOE and DOE contractors from the
Office of Scientific and Technical Information
P.O.Box 62, Oak Ridge, TN 37831
Prices available from (865) 576-8401
http://apollo.osti.gov/bridge/
Available to the public from the
National Technical Information Service
U.S. Department of Commerce
5285 Port Royal Rd.,
Springfield, VA 22161
http://www.ntis.gov/
OR
Lawrence Livermore National Laboratory
Technical Information Department’s Digital Library
http://www.llnl.gov/tid/Library.htmlCIAC 02.109

i

TABLE OF CONTENTS
Executive Summary ........................................................................................................... 1
1.0

Introduction............................................................................................................ 1

Part I: Active Directory Overview..................................................................................... 3
2.0

Active Directory Tutorial ....................................................................................... 3

2.1

Directory Services ........................................................................................................ 3

2.2

Microsoft Active Directory.......................................................................................... 4

2.3

Components of the Active Directory .......................................................................... 4

2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
2.3.6
2.3.7

Domain ................................................................................................................................... 4
Trees....................................................................................................................................... 5
Forest ...................................................................................................................................... 6
Organizational Units ............................................................................................................... 7
Schema................................................................................................................................... 7
Group Policy Objects.............................................................................................................. 8
Global Catalog ...................................................................................................................... 10

2.4

Naming...