Open classes for Windows 2012 domains

First Lecture

650) this.width=650; "height=" 108 "title=" clip_image002 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/ M00/6c/f5/wkiol1vzo_ezteoraabhxluvfu4982.jpg "border=" 0 "/>

650) this.width=650; "height=" 244 "title=" clip_image004 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/ M02/6c/fa/wkiom1vzon6d_logaafa-woahvc732.jpg "border=" 0 "/>

650) this.width=650; "height=" 139 "title=" clip_image006 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/ M00/6c/fa/wkiom1vzon_dddo7aacr6aliz_8990.jpg "border=" 0 "/>

The description domain is a very important concept in Microsoft.

650) this.width=650; "height=" 234 "title=" clip_image008 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/ M00/6c/fa/wkiom1vzoodbs2faaaffs3qhgpq700.jpg "border=" 0 "/>

The dcpromo command was canceled in 2012.

Windows 2012 does not have a web version

Why do I need NTFS? The reason is that ADDB will be larger than 4GB

At the same time the IP address of the DC is static IP address

<windows 2102 Roles and features in a wizard >

650) this.width=650; "height=" 428 "title=" clip_image010 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/ M02/6c/f5/wkiol1vzo_uwq_y6aaec8wonri0618.jpg "border=" 0 "/>

Domain functional Level: Limit the operating system for DCs in the entire domain (three versions are generally compatible)

If the domain functional level is win 2003,DC, the operating system version can be 2003/2008/2008 R2

Domain Functional Level List:

Win 2000

Win 2003

Win 2008

Win R2

Win 2012

How do I guarantee the high availability of the domain?

1 do not run large services on domain control, such as Exchange SQL Lync, and so on

2 Do not let the public network directly access the DC

3 Deploy multiple backup domain controllers for the company's DC, client: point to multiple DNS

4 Regular backups for DC (less than 180 days)

Client plus domain:

650) this.width=650; "height=" 280 "title=" clip_image012 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/ M00/6c/f5/wkiol1vzo_ztbxe9aaemkhkxr1c663.jpg "border=" 0 "/>

Second lecture

650) this.width=650; "height=" 175 "title=" clip_image014 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/ M01/6c/f5/wkiol1vzo_3goyg0aabouma2h2s473.jpg "border=" 0 "/>

Test one: The process of establishing a subdomain

650) this.width=650; "height=" 417 "title=" clip_image016 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image016 "src=" http://s3.51cto.com/wyfs02/ M01/6c/f5/wkiol1vzo_3tsgaqaaes7gyq7bg253.jpg "border=" 0 "/>

650) this.width=650; "height=" 193 "title=" clip_image018 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image018 "src=" http://s3.51cto.com/wyfs02/ M02/6c/f5/wkiol1vzpakajw69aacivrs6kmk712.jpg "border=" 0 "/>

You can go to the Domain and trust tool to see the parent and child domain relationships

650) this.width=650; "height=" 303 "title=" clip_image020 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image020 "src=" http://s3.51cto.com/wyfs02/ M02/6c/fa/wkiom1vzoordllgjaaeqwko6gha133.jpg "border=" 0 "/>

Because administrator is still a member of Enterprise Admins group

Proven: Domain It's a security boundary

Test Two: Add a BDC

Creating a user on the BDC will be replicated to the PDC (and DNS will replicate with each other)

Proof: Domain It is a replication unit

650) this.width=650; "height=" 196 "title=" clip_image022 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image022 "src=" http://s3.51cto.com/wyfs02/ M00/6c/f5/wkiol1vzpamtyq-kaacn5b1zq9q855.jpg "border=" 0 "/>

650) this.width=650; "height=" "title=" clip_image024 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image024 "src=" http://s3.51cto.com/wyfs02/ M01/6c/f5/wkiol1vzpayyhuizaab4vuyk2tm102.jpg "border=" 0 "/>

650) this.width=650; "height=" "title=" clip_image026 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image026 "src=" http://s3.51cto.com/wyfs02/ M01/6c/fa/wkiom1vzopsjkfrjaacb8uhawyw855.jpg "border=" 0 "/>

Authentication can be load balanced with SRV records

650) this.width=650; "height=" 298 "title=" clip_image028 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image028 "src=" http://s3.51cto.com/wyfs02/ M02/6c/f5/wkiol1vzpbds2hmmaacl_zdgape308.jpg "border=" 0 "/>

About the concept of replication

650) this.width=650; "height=" 321 "title=" clip_image030 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image030 "src=" http://s3.51cto.com/wyfs02/ M02/6c/f5/wkiol1vzpbhgynd2aagsw6fh3iy433.jpg "border=" 0 "/>

650) this.width=650; "height=" 243 "title=" clip_image032 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image032 "src=" http://s3.51cto.com/wyfs02/ M02/6c/fa/wkiom1vzopnxfea4aadt7g29lna516.jpg "border=" 0 "/>

< to be sure, trusting two forests equals a circle of friends >

To a different place to open a company, in the end is to build a subdomain or to deploy BDC? The answer is based on business requirements.

Built sub-domain: According to the business perspective, the equivalent of the franchise store, with your brand, but to manage their own

Build backup Domain control: the same company

And how does the domain tree understand? Ienglish.cn can be understood as the headquarters and expanded the English training

Options for domain tree creation:

650) this.width=650; "height=" 254 "title=" clip_image034 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image034 "src=" http://s3.51cto.com/wyfs02/ M01/6c/f5/wkiol1vzpbsye5ylaab2b5bfc6u379.jpg "border=" 0 "/>

last DNS to be conditionally forwarded to a ienglish.cn

Logic diagram:

650) this.width=650; "height=" 104 "title=" clip_image036 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image036 "src=" http://s3.51cto.com/wyfs02/ M01/6c/fb/wkiom1vzoprd6kb0aaaoqfmtgz0325.jpg "border=" 0 "/>

In general, the two forests that build trust are corporate mergers based on business

650) this.width=650; "height=" 344 "title=" clip_image038 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image038 "src=" http://s3.51cto.com/wyfs02/ M02/6c/fb/wkiom1vzopuriinvaae2csbrl1i297.jpg "border=" 0 "/>

how can I see all the GC in the forest at once? < The answer looks dns> .

650) this.width=650; "height=" 177 "title=" clip_image040 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image040 "src=" http://s3.51cto.com/wyfs02/ M01/6c/f5/wkiol1vzpbawtbvaaacmzpr_mgq599.jpg "border=" 0 "/>

GC will only copy some common or critical fields (for example, the Country field is not characters commonly used) because the search pressure is too high.

How do I change the country field to characters commonly used section?

650) this.width=650; "height=" 197 "title=" clip_image042 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image042 "src=" http://s3.51cto.com/wyfs02/ M02/6c/f5/wkiol1vzpbfd4rnoaabyj9xcoi0618.jpg "border=" 0 "/>

650) this.width=650; "height=" 251 "title=" clip_image044 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image044 "src=" http://s3.51cto.com/wyfs02/ M00/6c/f5/wkiol1vzpbfbpxwmaacaci0ttzo063.jpg "border=" 0 "/>

650) this.width=650; "height=" 359 "title=" clip_image046 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image046 "src=" http://s3.51cto.com/wyfs02/ M00/6c/fb/wkiom1vzop_jgx8uaac776nlfxu803.jpg "border=" 0 "/>

GC Summary:

650) this.width=650; "height=" 163 "title=" clip_image048 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image048 "src=" http://s3.51cto.com/wyfs02/ M01/6c/fb/wkiom1vzoqdd2dnlaaehh_bvknm027.jpg "border=" 0 "/>

650) this.width=650; "height=" 379 "title=" clip_image050 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image050 "src=" http://s3.51cto.com/wyfs02/ M00/6c/fb/wkiom1vzoqgrxk7kaaemdzlkc3s989.jpg "border=" 0 "/>

650) this.width=650; "height=" 410 "title=" clip_image052 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image052 "src=" http://s3.51cto.com/wyfs02/ M01/6c/fb/wkiom1vzoqlygokdaae6v6azh_q790.jpg "border=" 0 "/>

Third Speaking

This video describes a case study of the physical architecture of a domain in Windows Server 2012, where a multi-domain multi-site domain architecture is deployed primarily from a multi-branch organization. Focus on the advantages and problems of placement domain control as a branch office deployment, understanding the planning and deployment of multi-physical regions, and so on. This video demonstrates the planning and deployment of servers in a multi-physical region of an enterprise through a case demonstration, which is highly practical.

The point of view is physical, and the physical structure of the domain includes domain controllers and sites

650) this.width=650; "height=" 182 "title=" clip_image054 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image054 "src=" http://s3.51cto.com/wyfs02/ M02/6c/fb/wkiom1vzoqszlnufaabdp-exxoc956.jpg "border=" 0 "/>

Identify logical and physical diagrams

650) this.width=650; "height=" 364 "title=" clip_image056 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image056 "src=" http://s3.51cto.com/wyfs02/ M00/6c/fb/wkiom1vzoqwyiknxaadlfgoytds614.jpg "border=" 0 "/>

650) this.width=650; "height=" 378 "title=" clip_image058 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image058 "src=" http://s3.51cto.com/wyfs02/ M01/6c/fb/wkiom1vzoqxgk4meaad4mf13pog856.jpg "border=" 0 "/>

A physical area has at least one GC

Recommended domain control is DNS

How do I create a site?

operation on the first DC Action on

650) this.width=650; "height=" 328 "title=" clip_image060 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image060 "src=" http://s3.51cto.com/wyfs02/ M02/6c/fb/wkiom1vzoqaybp_naad_r74jvrg125.jpg "border=" 0 "/>

Open Adsite.msc

Create a good site, IP network, site connections, and finally configure the cost and replication frequency

650) this.width=650; "height=" 472 "title=" clip_image062 "style=" border:0px;padding-top:0px;padding-right:0px; Padding-left:0px;background-image:none, "alt=" clip_image062 "src=" http://s3.51cto.com/wyfs02/M00/6C/FB/ Wkiom1vzoqet3jlvaadow576nj0254.jpg "border=" 0 "/>

This article from the "Erick" blog, declined to reprint!

Open classes for Windows 2012 domains