Active Directory
Logical and physical structure, objects and group scopes, group policies and their order, Kerberos, the DNS dependency and operations master roles.
- 31 cards
- 5 topics
- Free
The outline, topic by topic
Each topic is weighted the way the exam weighs it.
- Concepts
- Questions
- Sort and link
- On the diagram
- Scenarios
A few cards from the deck
Active Directory: what is it?
Show the answer
Microsoft's directory service that centralises the accounts, computers, policies and authentication of a Windows domain.
It relies on standards (LDAP for the directory, Kerberos for authentication, DNS to locate services), hence its interoperability with Linux.
A policy linked to the domain sets a blue wallpaper; another, linked to Léa's OU, a green one. With no blocking or enforcement, which wallpaper does Léa see?
- Green: the OU's policy, applied last, wins
- Blue: the domain's policy always takes precedence over an OU's
- None: two contradictory settings cancel each other out
- Whichever Léa chose: the user remains in control of the wallpaper
Show the answer
Green: the OU's policy, applied last, wins
The order local, site, domain, OU makes the setting closest to the object win. A policy enforced at the domain level would reverse the outcome.
Policies apply in this order: …, then …, then …, then the organisational units, and the last one applied wins.
Show the answer
Policies apply in this order: local, then site, then domain, then the organisational units, and the last one applied wins.
The setting closest to the object wins, unless a higher policy is enforced or an OU blocks inheritance.
Domain controller: what is it?
Show the answer
A server that hosts a copy of the domain's directory and authenticates accounts.
Controllers replicate with each other and are all writable (except read-only ones): having at least two keeps one failure from blocking every logon.