02 it camps active directory

Upload: sushil-tomer

Post on 06-Apr-2018

219 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/3/2019 02 IT Camps Active Directory

    1/39

  • 8/3/2019 02 IT Camps Active Directory

    2/39

  • 8/3/2019 02 IT Camps Active Directory

    3/39

  • 8/3/2019 02 IT Camps Active Directory

    4/39

  • 8/3/2019 02 IT Camps Active Directory

    5/39

  • 8/3/2019 02 IT Camps Active Directory

    6/39

  • 8/3/2019 02 IT Camps Active Directory

    7/39

    X86 = NO DIRECT in placeUPGRADE PATH

  • 8/3/2019 02 IT Camps Active Directory

    8/392009 Microsoft Corporation. All Rights Reserved.

    Pre-Migration Migration

    Prepare source serverBack upCollect migration data

    Prepare destination serverInstall Windows Server 2008R2

    Assign temporary server name

    Assign temporary IP address

    Join domain

    Make destination server adomain controller

    Migration planningNumber of network interfacecards (NICs)

    Post-Migration (Optional)

    Manually migrate DNS

    server settings

    Transfer FSMO roles

    Migrate IP address andrename servers

    Perform verification steps

    Retire source server

    Roll back migration

    Troubleshoot migration

  • 8/3/2019 02 IT Camps Active Directory

    9/39

  • 8/3/2019 02 IT Camps Active Directory

    10/39

  • 8/3/2019 02 IT Camps Active Directory

    11/39

  • 8/3/2019 02 IT Camps Active Directory

    12/392009 Microsoft Corporation. All Rights Reserved.

    ~1GB

  • 8/3/2019 02 IT Camps Active Directory

    13/39

  • 8/3/2019 02 IT Camps Active Directory

    14/39

  • 8/3/2019 02 IT Camps Active Directory

    15/39

  • 8/3/2019 02 IT Camps Active Directory

    16/39

    Setup RequirementsAdprep must be used for WindowsServer 2003 and Windows Server 2008forest

    All domain controllers in yourActive Directory forest are runningWindows Server 2008 R2

    Raise the functional level of yourActive Directory forest to WindowsServer 2008 R2

    The process of enabling

    Active Directory Recycle Bin is

    irreversible. After you enable Active

    Directory Recycle Bin in your

    environment, you cannot disable it.

    Reduces Downtime and Effort

    AD Objects Are PreservedFunctional for AD DS and AD LDS

    Use LDP.exe or Windows PowerShell Cmdlets

  • 8/3/2019 02 IT Camps Active Directory

    17/39

  • 8/3/2019 02 IT Camps Active Directory

    18/39

  • 8/3/2019 02 IT Camps Active Directory

    19/39

  • 8/3/2019 02 IT Camps Active Directory

    20/39

  • 8/3/2019 02 IT Camps Active Directory

    21/39

  • 8/3/2019 02 IT Camps Active Directory

    22/39

    Domain-Based Service Accounts

    Managed by ADEnhanced Security

    Less Disruption of Service

    Reduce RecurrentAdministrative Tasks

    Administrative BenefitsCreate class domainaccounts

    Accounts are now resetautomatically

    SPN management tasks arenot completed

    Can be delegated to non-administrators

    SQL IIS

    Managed ServiceAccount

    Local Accounts

    Virtual Accounts

  • 8/3/2019 02 IT Camps Active Directory

    23/39

  • 8/3/2019 02 IT Camps Active Directory

    24/39

  • 8/3/2019 02 IT Camps Active Directory

    25/39

    New Functionality

    Active Directory module provider

    Active Directory module cmdlets

    Windows PowerShell Integrated

    Scripting Environment (ISE)Out-GridView cmdlet

    Performance counters

    Only installs on Windows Server 2008 R2

    At least one Windows Server 2008 R2domain controller or LDS configuration set

    Windows 7 and Report ServerAdministration Tools (RSAT)

    Special Considerations

    A Windows PowerShell module

    Manage AD domains and Lightweight DirectoryServices (LDS) configuration sets

    AD Database Mounting Tool instance

    Active Directory Module in Windows Server 2008 R2

  • 8/3/2019 02 IT Camps Active Directory

    26/39

  • 8/3/2019 02 IT Camps Active Directory

    27/39

  • 8/3/2019 02 IT Camps Active Directory

    28/39

    Over 15 new role services and featuresadded

    New configurations added for ScanServer, AD CS, and Remote DesktopServices

    Remoting and Windows PowerShell

    Integration with BPA

    Updated Server Manager:Provides a unified experience for adding, configuring, and managingservers

    New in Windows Server 2008 R2!

  • 8/3/2019 02 IT Camps Active Directory

    29/39

    Customizable GUI

  • 8/3/2019 02 IT Camps Active Directory

    30/39

  • 8/3/2019 02 IT Camps Active Directory

    31/39

  • 8/3/2019 02 IT Camps Active Directory

    32/39

    Run on Windows 7 or WindowsServer 2008 R2

    Must have user rights to joinworkstation to the domain

    Defaults target domain controllerrunning a version of Windows Server2008 R2

    Special ConsiderationsAdvantages

    AD state changes are completedwithout network traffic to the computer

    Computer state changes arecompleted without any network traffic

    to a domain controllerEach change can be completed atdifferent times

    Reduces time and effort for large-scaledeployments

    Establishes trust between operating system andActive Directory Domain

    Djoin.exe

  • 8/3/2019 02 IT Camps Active Directory

    33/39

  • 8/3/2019 02 IT Camps Active Directory

    34/39

  • 8/3/2019 02 IT Camps Active Directory

    35/39

    http://technet.microsoft.com/en-us/library/dd379558(WS.10).aspx

    http://technet.microsoft.com/en-us/library/dd365353(WS.10).aspx

    http://technet.microsoft.com/en-us/library/dd378796(WS.10).aspx

    http://technet.microsoft.com/en-us/library/dd378896(WS.10).aspx

    http://technet.microsoft.com/en-us/magazine/ff679947.aspx

    http://technet.microsoft.com/en-us/library/dd392261(WS.10).aspx

    http://technet.microsoft.com/en-us/library/cc770842(WS.10).aspx

    http://blogs.technet.com/b/askds

    http://edge.technet.com/Media/Active-Directory-Recycle-Bin/

    http://technet.microsoft.com/en-us/library/dd379558(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd365353(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378796(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378896(WS.10).aspxhttp://technet.microsoft.com/en-us/magazine/ff679947.aspxhttp://technet.microsoft.com/en-us/library/dd392261(WS.10).aspxhttp://technet.microsoft.com/en-us/library/cc770842(WS.10).aspxhttp://blogs.technet.com/b/askdshttp://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://edge.technet.com/Media/Active-Directory-Recycle-Bin/http://blogs.technet.com/b/askdshttp://technet.microsoft.com/en-us/library/cc770842(WS.10).aspxhttp://technet.microsoft.com/en-us/library/cc770842(WS.10).aspxhttp://technet.microsoft.com/en-us/library/cc770842(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd392261(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd392261(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd392261(WS.10).aspxhttp://technet.microsoft.com/en-us/magazine/ff679947.aspxhttp://technet.microsoft.com/en-us/magazine/ff679947.aspxhttp://technet.microsoft.com/en-us/magazine/ff679947.aspxhttp://technet.microsoft.com/en-us/library/dd378896(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378896(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378896(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378796(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378796(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd378796(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd365353(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd365353(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd365353(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd379558(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd379558(WS.10).aspxhttp://technet.microsoft.com/en-us/library/dd379558(WS.10).aspx
  • 8/3/2019 02 IT Camps Active Directory

    36/39

    Register and study a course in MVAwww.MicrosoftVirtualAcademy.com

    Description

    Free e-learning program

    100, 200 and some 300 level-multiproduct content

    Organized by product, careers & specializations 5 tracks released, 1 more every week

    Online and offline components

  • 8/3/2019 02 IT Camps Active Directory

    37/39

    Resources

    Software Application Developers

    http://msdn.microsoft.com/

    Infrastructure Professionals

    http://technet.microsoft.com/

    msdnindia technetindia@msdnindia @technetindia

    http://msdn.microsoft.com/http://technet.microsoft.com/http://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://facebook.com/msdnindiahttp://technet.microsoft.com/http://msdn.microsoft.com/
  • 8/3/2019 02 IT Camps Active Directory

    38/39

  • 8/3/2019 02 IT Camps Active Directory

    39/39