To manage AD DS objects, we most often use the Active Directory Users and Computer console. To change multiple objects in bulk, automate object creation, etc., we can use other tools for modifying AD DS objects – cmd, LDIFDE, CSVDE and Powershell.
Strategies for using AD security groups
One main reason for creating AD user groups is to give users access to shared resources such as shared folders, printers and Windows SharePoint. When planning access to these resources, ensure that:
AD groups – types and scopes
In AD groups can have several types and scopes (Group Types and Group Scopes).
Types of AD objects
In AD you can create several types of objects (Types of AD DS Objects).
Read-Only DNS on an RODC (a read-only DNS server)
How does Read-Only DNSwork, as newly available on an RODC?
AD database partitions (AD Partitions)
The AD database consists of directory partitions, so replication occurs separately for each partition rather than for AD as a whole.
Finding a suitable DC using SRV records
Using SRV records to locate a suitable domain controller when starting a local workstation (laptop) that moves between branch offices in a single domain.
At startup, while services are starting (specifically NETLOGON), each workstation sends a query to find and contact the appropriate DC for its network (subnet), through which domain users can later authenticate. The DC discovery process first contacts the last-used DC. If it is unavailable or in a different subnet, the workstation searches for a DC within or closest to its own subnet. This ensures that the workstation communicates with a DC in the same network even as it travels between branch offices and their DCs.
Active Directory Integrated Zone
Active Directory Integrated Zone is a primary DNS zone for a domain name (authoritative and writable), stored directly in the AD database.
SRV resource record – SRV records
SRV record (SRV record or Service record) is a category of DNS data providing information about available services.
For AD DS to function correctly, clients must be able to query records identifying the location of system services, allowing authentication against DCs and operation of services such as Exchange. A DNS server integrated with a DC provides this information through SRV records.
Active Directory Operations Master Roles
A list of all Operations Master roles and their uses.