-
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
31 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
### Logical | ||
Partition - different parts of the AD database. Partitions can store copies on different DCs and then use replication to keep it synced. | ||
|
||
Schema - the definitions for the domain object types and attributes. | ||
|
||
domain - a logical container for objects such as computers, groups, users. Each domain maps to specific partition | ||
|
||
domain tree - a heirarchal collection of domains that share a common higher level domain and a contiguousDNS namespace | ||
|
||
forest - a collection of one or more domains that have a common AD DS root, schema or global catalog | ||
|
||
OU - a conatainer object for objects that can be managed with group policy | ||
|
||
container - organizational unit for AD DS stuff, cannot link to containers | ||
|
||
### Physical | ||
Domain controller - stores a copy of the Database. usually can process and replicate changes to the domain | ||
|
||
data store - a copy sits on each of the domain controllers | ||
|
||
global catalog server - domain controller that hosts the global catalog, which is a partial read only copy of all the objects in a multiple domain forest. Speeds up the searching for objects in a different domain. | ||
|
||
Read Only DCs - a special form of domain controller that can only read and be replicated upon. They are not able to make changes to Domain settings. You may put these DCs in "risky areas" like a branch office or something. | ||
Somewhere with not great physical security or IT support | ||
|
||
Site - where computers or users are physically located. Likeunto a domain which is a logical seperation, site is a physical seperation. | ||
|
||
subnet - portion of IP addresses given to a site. | ||
|
||
|
||
The three main objects of a domain are user accounts, computer accounts, and groups |