What is Active Directory?
The fundamental internal structure of the Active Directory consists of array featuring objects that are arranged in a hierarchy. In fact, these objects can be easily categorized generally into resources and security principles. Some of the examples of Active Directory objects are users, computers, groups, sites, services, printers, etc. Every single object is generally considered as an entity featured with particular set of attributes. The attributes of Objects and the type of objects that can be stored in the AD are described by a Schema.
The inherent structure of Active Directory is further categorized into a number of levels that actually depends upon the visibility of objects. An AD network can be organized in four various forms of container structure specifically, Forest, Domains, Organizational Units and Sites.
- Forests:It is a set of Active Directory objects, their attributes and collection of attribute syntax.
- Domain:It is more like a compilation of computers objects in the AD which share a very common set of policies, a name and a database of their members.
- Organizational Units:OUs are containers in which domains are grouped. Their key function is of creating a hierarchy for the domain to resemble the structure of the Active Directory's company in organizational terms.
- Sites: Sites are not dependent on domains and OU structure and therefore more considered as physical groups that is defined by one of more IP subnets. Their key role is of distinguishing between locations connected by low- and high-speed connections.
Within a domain, all the objects that are present are grouped in Organizational Units or OUs. This grouping helps in simplifying the administrative tasks. With OUs, a domain can be divided in a hierarchical way to look like the managerial or departmental structure of an organization. Perhaps, it won't be wrong to consider organizational units as containers which can hold other OUs of the domain.
Group Policies in the form of Group Policy Objects (GPOs) are generally applied to the OUs and administrative powers are also delegated at the OUs.
Moreover, it would be wrong to consider sites as logical structure. They are actually physical groupings used to control network traffic caused due to Active Directory replication. In addition, sites are used to refer the clients to the nearest domain through a Domain Controller (DC). All the information that is present in the Active Directory is actually held in one more domain controller. Each DC has a copy of the Active Directory and every time even minor changes take place in any server, the information gets replicated in all the DC that too contains a copy of the Active Directory. This procedure is termed as Active Directory Replication. Replication in the Active Directory is triggered almost every time an Object is created, removed, moved or adapted.
No comments:
Post a Comment