When creating, moving or deleting Active Directory objects, you may find that the system prevents deleting an organisational unit (OU).
CMD commands for Active Directory administration
Examples of frequently used server administration command-line commands.
Backing up and restoring the AD DS database
Backups are essential to domain maintenance, ensuring lost or damaged AD DS data can be recovered after a disaster.
Maintaining the AD DS database
As a Windows Server® 2008 administrator, you maintain Active Directory® Domain Services (AD DS) domain controllers. Important tasks include offline defragmentation, NTDSUtil.exe modifications and locking down services.
Configuring AD DS auditing
In any secure environment, actively monitor AD DS as part of the overall security strategy. Auditing identifies successful and unsuccessful attempts to modify Active Directory objects, revealing unauthorised logon attempts to computers or network folders.
Monitoring AD DS using Reliability and Performance Monitor
Windows Reliability and Performance Monitor tracks how applications and services affect performance, creates logs and takes action when user-defined optimal performance thresholds are exceeded.
Monitoring AD DS using Event Viewer
Monitoring server health is an important part of OS maintenance and administration. Event Viewer lets you view, manage and monitor events recorded in event logs.
Configuring security using Group Policy (GPO)
Group Policy applies numerous security settings, including password complexity, folder and registry permissions, authentication protocols and communication encryption.
AD DS sites and their connections (Sites and Site Links)
AD sites and site links define the physical network structure, allowing replication to reflect connection speeds where DCs are located. Sites and subnets also let workstations determine their current location and nearest DC. For example, a computer moved from New York to Czech Republic can detect from its assigned IP address that it is in a different subnet, belonging to another site with different DCs.
AD DS replication
The AD database consists of partitions that can replicate independently. Specifically, Schema, and Configurationalways replicate forest-wide, Domainreplicates within its domain, and Applicationreplicates according to predefined rules. Also remember the Global Catalog (GC), which replicates throughout the forest, but only between other GCs.