Configuring Sites and Understanding AD replication. Dante Villarroel Saavedra

Transcription

1 Configuring Sites and Understanding AD replication Dante Villarroel Saavedra

2 Agenda Introduction Understanding Sites Sites planning Active Directory Partitions Global Catalog Active Directory Replication Demo Conclusions 2

3 Introduction One of the tasks of an administrator or an IT professional of a Windows Server domain is to make sure that the authentication is as efficient as it can be possible, in the same way, to make sure that the replication between domain controllers in a domain will be optimized and effective, for that goal, Active Directory brings the site objects, which are the principal component that allows administrators to control the service location in a distributed environment and control the replication between domain controllers that are separated by expensive, slow and unsecure links (links that don't have LAN velocity). 3

4 Continuity of Service A domain and a forest can work with a single domain controller (one Windows Server), but that's not enough, domain controllers provide functionality critical to the identity and access management of an enterprise, that's why, it's important to have more than one domain controller in a domain to provide continuity of services in the event that one domain controller fails. 4

5 Understanding Sites Active Directory represents the network infrastructure with objects called sites and subnets, AD sites objects are used to manage Replication and facilitate service localization. Replication: it is the transfer of changes between domain controllers. AD assumes there are two types of networks: highly connected and less highly connected. An AD site represents a highly connected 5

6 Understanding Sites (cont) Service Location: Active Directory sites help you to localize services, including those provided domain controllers, for example During logon, Windows clients are automatically directed to a domain controller in their site, DFS is other services that can be localized. 6

7 Criteria to Consider Before Applying Sites A part of the network is separated by a slow link A part of the network has enough users to warrant hosting domain controllers or other services in that location Directory query traffic warrants a local domain controller To control service localization To control replication between domain controllers 7

8 Active Directory Partitions To know what information is replicated between domain controllers, it's necessary that you know what information is stored in the Active Directory Database NTDS.dit, which are directory partitions; each partition contains objects of a particular scope and purpose, there are three major naming contexts Domain contains all the objects stored in a domain including users, groups, computers and GP containers. Configuration contains object that represent the logical structure of the forest, including domains, sites, subnets and services Schema defines the object classes and their attributes for the entire directory. 8

9 The Global Catalog The Global Catalog is a partition that stores information about every object in the forest, when a user in a domain B looks for an object in Domain A the GC provides the results of the query. 9

10 Active Directory replication Partitioning of the data store, DCs host only the domain naming context for their domain, which helps keep replication to a minimum. Automatic generation of an efficient and robust replication topology Attribute level replication, when an attribute of an object is modified, only that attribute is replicated. Distinct control of intrasite replication between sites Collision detection and management, AD has resolution algorithms that satisfy almost every such situation 10

11 Demo 11

12 Conclusions After reviewing the main concepts about sites, we can conclude that: Active Directory Sites enable you: - To optimize the efficiency of the network and reduce administrative overhead. - To control the replication and Service location in a distributed network environment. - To ensure rapid and reliable communication by using some configuration that Active directory sites provide you. 12

13 Q&A 13

14 14