Index

A

access tier in network access hierarchy, 307 “308, 308

account/discretionary access control list (A/DACL), 241

account domains

migration strategies, 172 “173 , 173

in Windows NT 4, 63

account group /discretionary access control list (AG/DACL), 241 “242

account group/resource group (AG/RG), 242 “245 , 243

account lockout restrictions, 194

account policy to manage, 236, 238 “239

domain control, 116

Account Operators group

group creation by, 246

in Windows NT 4, 172

account OUs, 168 “170

account policies, 236 “240

for single domain, 116

accounting department, 3

accounts. See also user accounts

authentication policy, 236 “240

exam essentials, 251

for external partners , 325

local, 116

planning, 228 “240

identifying current structure, 229 “230

naming strategy, 229, 230 “235

types, 228 “229

Accounts ”Global group ”Domain Local group ”permissions (AGDLP), 244 , 244 “245

Accounts ”Global group ”(Global group) ”Universal group ”Domain Local group ”permissions (AGUDLP), 245 , 245

Accounts -- Global group -- Local group -- permissions (AGLP), 243 , 243 “244

Active Directory

advanced install, 286

business structure and, 2, 18 “20

containers, 207

design

for centralized/centralized administration model, 10

decentralized administration, 11

organization chart and, 4

DHCP server authorization, 331

and DNS, 351

hiding folders from searches, 167

migration strategies, 132 “140

domain names definition, 138 “139

forest root domain, 139 “140

restructuring considerations, 133 “134

upgrade considerations, 133

from Windows 2000, 137 “138

from Windows NT 4, 134 “137

name selection, 47

namespace, 138

reasons for implementing, 47 “48

replication of objects, 323 “324

site design to support, 269 “272

Active Directory Application Mode (ADAM), 94

Active Directory-enabled applications, object classes and attributes for, 100

Active Directory ”integrated zones, 363 “364

Active Directory Migration Tool (ADMT), 133 “134

Active Directory Services Interface (ADSI) scripting, 116

ADAM (Active Directory Application Mode), 94

address records, in stub zone, 362

address translation servers, 307

administration models, 8 “14

centralized, 8 “11

centralized/centralized, 9 , 9 “10

centralized/decentralized, 10 , 10 “11

decentralized, 11 , 12

exam essentials, 25

hybrid, 12 “13

for control of corporate standards, 14

for delegation of remote resources, 13

identification, design scenario, 15

outsourced, 13 “14 , 15

administrative control

of domain controllers, and placement, 280

as organizational requirement, 51 “52

of resources, documenting current, 65

restrictions, and system design, 49 “51

in structure design, 84

Administrative Control table sample, 52

Administrative delegation, 65

administrative overhead, 136

administrative structure of Active Directory

design, 20 “23

exam essentials, 25

administrative structure of business

Active Directory impact on, 18 “20

analyzing existing, 16 “18

design scenario, 15

determining needs, design scenario, 52 “53

real world scenario, 17

ADMT. See also Active Directory Migration Tool (ADMT)

ADPREP utility, 137 “138

alternate IP addressing, 331

American National Standards Institute (ANSI), 359

APIPA (automatic private IP address), 331

application support

Active Directory implementation for, 47

and site design, 272, 273

Asynchronous Transfer Mode (ATM), 60

attributes, 47

schema for definitions, 100

auditing, account changes in forest root, 101

Authenticated Users group, GPO applied to, 203

authentication. See also passwords; trust relationships

design scenario, 240

for remote access, 315 “316

selective, 132

authentication policy for accounts, 236 “240

lockout restrictions, 238 “239

log-on options, 239 “240

passwords, 236 “238

authoritative zone transfers (AXFRs), 362

automatic private IP address (APIPA), 331

automation tools, for remote administration, 11

autonomous administration, 88 “90 , 89

flowchart to determine, 99

autonomy, 86 “90

multiple domains for, 123, 127

of objects, 163

real world scenario, 21

availability of network, 309 “311

AXFRs (authoritative zone transfers), 362