Forcing Replication

One possible scenario for forcing replication is to synchronize your servers before taking one down for maintenance. Active Directory Sites and Services can force replication between partners. When you click the destination server and open its NTDS settings, its partner(s) are listed in the details pane. Right-click to select one, then choose Replicate Now on the menu. As shown in Figure 14.17, HQ2 is the destination, while DC3, the source, is the server about to be taken offline. The fact that...

Inter Site Replication

Since connections between sites have limited bandwidth, we prefer to schedule replication to occur at specific times when network activity is low. Domain controllers will be updated across our WAN links, but latency becomes a factor. Transmissions between sites can use RPC over IP for synchronous connections, or SMTP for asynchronous, unreliable links. SMTP can send schema, configuration, and Global Catalog updates, but it cannot send data for the directory partition, since the File Replication...

Using DNS to Find a Domain Controller

One of the most important uses of DNS in an Active Directory environment is that of locating domain controllers. Remember that one of the goals of moving to a DNS-based name resolution process was to reduce or eliminate our dependence on NetBIOS broadcast technology. On a network that consists of only Windows 2000 Windows Server 2003 (or newer) computers, NetBIOS and WINS traffic can be completely eliminated. Since finding a domain controller is critical to the process of logging in, let's take...

Figure

Adding the Value Name and Data Type to the Registry gj Registry Editor - HKEY LOCAL MACHINE on Local Machine Keyboard Layout Gp Keyboard Layouts Authentication Packages REG MULTI SZ msvl 0 Bounds- REG BINARY 00 30 00 00 00 20 00 00 Notitication Packages REG_MULTIJ3Z FPNWCLNT Tcpipclientsuppcri REG_DWORD 0x1 13. We're ready to migrate. Log on to both domain controllers with your Administrative account. At the AD domain controller, go to Administrative Tools and activate the Active Directory...

Global Catalog Servers

A Global Catalog server is an AD server that holds a partial replica of the entire tree. This replica holds a limited amount of information about every object within the forest, usually those properties that are necessary for network functionality or those properties that are frequently asked for or searched against. The Global Catalog is referenced when a user looks for an object outside of their domain, thus eliminating the call to a domain controller at the destination domain. The list of...

The AD Installation Wizard

AD is installed by using the Active Directory Installation Wizard (the actual file is named DCPromo.exe and is located in the < MnndoMs_root> System32 directory). The wizard leads you through the entire installation process, asking you for information on the first domain controller, domain, site, and other configuration information. AD must be installed on a volume that has been formatted with NTFS 5 or higher. The wizard itself is fairly straightforward. It starts with the obligatory...

Assigned Mode

Assigned mode is used when you want everyone using the policy to have an application on his or her computer. Suppose, for instance, that you want everyone in the education department at KingTech to have Microsoft PowerPoint on their computers. Your first step would be to create a package. A software package contains all of the files necessary to install an application along with a description of all system changes needed (Registry changes, file locations, etc.) and the installation steps. The...

Event Viewer

Event Viewer adds a Directory Services log for domain controllers, which you should monitor regularly. It can be a great source of AD-related information. Event 701 reports each time your AD database file has been defragmented online. You can also view logs recorded on other domain controllers, one at a time. Figure 14.35 displays a Warning event that should be heeded. 3 29 33 F'M Category Knowledge Consistency Warning Event ID 1308 NT AUTHORITYWJONYMOUS LOGON The Knowledge Consistency Checker...

The Difference between DNS and AD Domains

For some reason, our industry often uses the same term to represent completely different things. In Chapter 7 we discussed DNS Domain Name System domains. A DNS server is used to resolve TCP IP host names into IP addresses. A DNS domain represents a piece of the overall DNS namespace. DNS is a service used to find resources A process submits a host name, and DNS attempts to find a record that matches. If a match is found, DNS returns the appropriate IP address to the requestor. As such, we...