Active Directory Architecture

Disadvantages of Windows NT Domains
· Windows NT can’t scale up to larger network.
· Here each domain must be maintained individually so, account administration is complicated.
To overcome this Windows introduce Active Directory.
Advantages of Active Directory
  • Active Directory is an object-oriented, hierarchical, distributed directory services database system that provides centralized information for hardware, software and human resources of an entire enterprise network.
  • Based on general principles of X.500 and NDS (Novell Directory Services) network users are represented as objects.
  • Administrator uses those objects to grant users access to resources anywhere on network.
  • Here fundamental unit of Active directory database is still domain but a group of domain can be created in a tree, and these trees in to forest.
  • A directory service is not only a database for information storing but it also includes services that make that information available to users, applications and other services.
Active Directory Architecture 
--> It is composed of objects, which represents various resources on a network
     such as users, groups, servers, printers and applications.  
--> An object is a collection of attributes that define the resources. Such as its
     name, list its capabilities and specify who should be permitted to use it. 
--> Some of an object’s attribute are assigned automatically when they are
     created such as GUID (Global User Identification) assigned to each one while
     others are supplied by network administrators.
     Example: - user objects stores information about user like username,
      password, phone number, email, etc.
--> Attributes also contains information about the other objects with which the
     user interacts, such as which group it belongs etc.
--> Primary difference between AD & NT domains is that AD provides
     administrator and users with a global view of network.
-->Both directories can use multiple domains, but instead of managing users of
     each domain separately, AD creates one user object & grants that user access
     to resources in any domains.Each type of object is defined by an object class
     store in the directory schema.
--> The schema specifies the attribute that each object must have optional
      attributes and object place in directory tree.
--> Schema are themselves stored as object in the active directory called class
      schema object and attribute schema object.
--> A class schema object contains reference of the attribute schema object that
      together for the object class.
--> This way an attribute only define once, all through it can be used in many
     different object classes.
(Optional)
--> The schema is extensible, so that application and services developed by
      Microsoft of third parties can create new object class or add new attributes
      to existing object classes.
--> This enable application to use AD to store information specific to their
      functions and provide that information to other application as needed.
Previous
Next Post »