New Names in Active Directory 2008

New Names in Active Directory 2008:-

Lightweight Directory Services (AD-LDS):-

• AD LDS Provides an LDAP accessible directory services that supports identity managements scenarios

• Removes all other AD DS features

                  - No Kerberos authentication
                  - No forests, domain, DC, GC, sites, group polocies
                  - No dependency on DNS

• Each AD LDS server can host multiple directory stores (i.e. instances)

• Within each instance

                  - Schema partition
                  - Configuration Partition
                  - Zero or more application partition

Rights Managements Services (AD-RMS):-

• RMS enables customers to keep internal information internal

                  - Confidential files protection
                  - E-mail forwarding
                  - Web application

• Benefits

                  - Safeguards sensitive internal information
                  - Digitally enforce organization policies

Federation Services (AD-FS):-

• AD FS Provides an identity solution

• AD FS is a services that allows for the creation of federated relationships between organizations for web application authentication

• Deploy federation server in multiple organization to facilitate business-to-business (B2B) transactions

• AD FS provides a Web-based Single Sign-on (SSO) solution

• AD FS improves in windows Server 2008

Certificate Services (AD-CS):-

• AD CS Provides PKI certification issuance and managements services

• Not significantly different than CS in 2003

• Provides certificate issuance and certification Authority (CA) service

• Issues Digital certificates to web server for Secure data transfer (HTTPS) 

Upgrading Windows 2003 to 2008:-

• Windows Server 2003 can be upgrades to same flavor of windows server 2008

                 - EX: Win 2003 Enterprise to Win 2008 Enterprise

• Requirements

                 - Windows 2003 Service pack 1 or higher
                 - “C” Drive should have at least 10GB of Free space to upgrade
                 - Upgrade installation should start from the Console only

System-specific data that must be backed up:-

• System-specific data that must be backed up

                 - Registry
                 - Boot files – including system files
                 - Active Directory Database
                 - SYSVOL Directory

Installing/Uninstalling Backup Tool on Server Core:-

• To install windows server Backup tool

                - Start/w ocsetup WindowsServerBackup

• To Uninstall Windows Server Backup /uninstall

                - Start/w ocsetup WindowsServerBackup /uninstall


System State Data Backup and Recovery:-

• To start SSD Backup

                - Go to Cmd
                - WEADMIN START SYSTEMSTATEBACKUP –BACKUPTARGET:F:

• To start SSD Recovery

                - Restarting the D.C in DSRM (Directory Service Restore Mode) safe Mode by pressing 
                   “F8” during the system startup and login as Administrator
                - Go to Cmd
                - WBADMIN START SYSTEMSTATERECOVERY –VERSION:01/01/2009-90:00

Destributed File System

Destributed File System:-

• Distributed file system (DFS) allows Administrators to make it easier for users to access and manage file that are physically distributed across a network.

• With DFS, you can access make file distributed across multiple servers. It may appear for user that files actually reside in one place (computer) on the network.

Windows Server 2008 Server Core

What is Server Core? :-

• Only the core components of Operating system and a subnet of the executable files will be installed

• GUI interface will not be installed

• Windows Explorer, Internet Explorer etc will not be installed

• Can be managed with remote tools

Server Core Features:-

• Reduced software maintenance

• Low attack surface

• Reduced Management

• Less disk space required

Basic Configuration Commands:-

• To view the computer name

                - Set C (or) Hostname

• To view the Username & UserDomain

                - Set U

• To view the current logged on User

                - Whoami

• To view the ip address

                - ipconfig (or) ipconfig/all

• To view available network adapters

                - netsh interface ipv4 show interfaces

• To set an automatic ip address

                - netsh interface ipv6 set address name=”Local Area Connection” source=dhcp

• To assign an static ip address

                - netsh interface ipv4 add address “Local Area Connection” 10.0.0.1 255.0.0.0

• To assign an DNS server address

                - netsh interface ipv4 add answer “Local Area Connection” 10.0.0.1

• To disable the Windows firewall

                - netsh firewall set opmode=disable

• To rename a computer name

                - Netdom renamcomputer WIN-S0254RTEF/NewName:sys2-core

• To join the server to the domain

                - Netdom join Sys2-core /Domain:Zoom.com /UserD:Administartor/PasswordD:*

• To restart the computer

                - Shutdown /r

• To view the installed roles and features

                - Oclist

Installing/Uninstalling Server Role on Server Core:-

• To install DNS server role

                - Start /w ocsetup DNS-Server-Core-Role

• To uninstall DNS server role

                - Start /w ocsetup DNS-Server-Core-Role/Uninstall

• To install DHCP server role

                - Start /w ocsetup DHCPServerCore

• To uninstall DHCP server role

                - Start /w ocsetup DHCPServerCore /Uninstall
Backup and Recovery:-

• Copy data alternate media

• Prevent data loss

• Only Administrator can backup the data