Chapter 2 -- Designing Active Directory for Security

Chapter 2

About This Chapter

This chapter prepares you to design your Active Directory directory service structure. It includes an overview of the decisions that you face when designing the Active Directory, and it also looks at the factors involved in determining the number of forests, domains, and organizational units to deploy in your network environment. The chapter concludes with a discussion of auditing in a Microsoft Windows 2000 network.

Active Directory provides the foundation for your organization's security. You must design an Active Directory structure that will meet your administrative needs and support your organization's business directives. If you make the wrong choices as you design your Active Directory, you might end up having to redeploy all existing systems and reconfigure all security mechanisms.

The choices that you face in your Active Directory design include

  • Determining the number of forests required for an organization
  • Determining the number of domains required within a forest
  • Determining the organizational unit (OU) structure required within a domain
  • Designing an audit strategy to ensure that security is maintained within your organization

Before You Begin

To complete this chapter, you must read the chapter scenario. This scenario is used throughout the chapter to apply the design decisions discussed in each lesson.



Microsoft Corporation - MCSE Training Kit (Exam 70-220. Designing Microsoft Windows 2000 Network Security)
MCSE Training Kit (Exam 70-220): Designing Microsoft Windows 2000 Network Security: Designing Microsoft(r) Windows(r) 2000 Network Security (IT-Training Kits)
ISBN: 0735611343
EAN: 2147483647
Year: 2001
Pages: 172

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net