Why do we need domains? One of the Active directory family

For many friends who are just beginning to delve into Microsoft technology, the domain is an object that makes them feel a lot of headaches. The importance of a domain there is no doubt that Microsoft's heavyweight service offerings require domain support, and many companies recruit engineers who explicitly require candidates to be familiar with or proficient in active Directory. But the domain is a bit more complicated for beginners, with many technical terms such as active Directory, site, Group Policy, replication topology, operations master role, global Catalog .... Many beginners are apt to fall into these technical details without a grasp of the overall situation. From today onwards, we will launch Active Directory series blog, we hope to the vast number of friends to learn ad help.

The first question we're going to talk about today is why we need the domain management model? As is known to all, Microsoft Management computers can use domain and workgroup two models, which are subordinate to the workgroup by default when the computer is installed with the operating system. We can see a lot of books that describe the characteristics of a workgroup, such as a decentralized administration, a small network, and so on. We have to consider a problem, why the team is not suitable for large networks, is not the decentralized management of each computer? Here's an example to discuss the problem.

Suppose there are now two computers in the workgroup, one is the server Florence, and the other is the client Perth. The function of the server as we all know, is to provide resources and allocate resources. The server provides a variety of resources, which can be shared folders, can be shared printers, can be e-mail, databases, and so on. Now the server Florence provides a simple shared folder as a service resource, our task is to grant access to this shared folder to employees in the company Jianguo, note that this folder only Jianguo a person can visit! Then we have to consider how to achieve this task, the general manager of the idea is on the server for Jianguo this user to create a user account, if the visitor can answer the Jianguo account username and password, we recognize that this visitor is Jianguo. Based on this simple management idea, we will carry on the concrete implementation operation on the server.

First, as shown in the following illustration, we created a user account for Jianguo on the server.

You then assign permissions in the shared folder, as shown in the following illustration, we only grant the user Jianguo the Read permission for the shared folder.