Responsive Navbar

Course 2154A - Module 14:

Implementing an Active Directory Infrastructure

Overview

Business Scenario Image Requirements for the Active Directory Infrastructure
Implementation Requirements
A Single Schema
Fault Tolerance in the Forest Root Domain
DNS Infrastructure in Place Before Installing Active Directory
DNS Solution Must Be Secure
Reduction in Network Traffic and Separate Security Group Policy
Set Up Printer Locations
Standardization of the Administrative Model of OUs
Delegation of Administrative Control
Creation of User and Group Types
Access to Performance Review Data
Group Policy to Manage Users’ Desktops and Deploy Applications
Class Discussion: How to Implement the Active Directory Infrastructure
Installing and Configuring DNS
Root Domain Is contoso.msft
Minimize DNS Name Resolution Network Traffic Between Regions
DNS Should Be Secure
DNS Is Fault Tolerant
Install DNS Server Service on All Domains
Implement Active Directory Integrated Zones and Secure Dynamic Updates on All DNS Servers
Install at Least Two DNS Servers in the Forest Root Domain
Image
Installing Active Directory
Single Schema
Directory Services Are Fault Tolerant
Reduce Network Traffic and Apply Separate Security Group Policy
Ensure Operations Masters Are Working Correctly
Single Forest with at Least Two Child Domains
Two Domain Controllers in the Forest Root Domain
Separate Domains in Each Region
Can Transfer Infrastructure Master to a Non-Global Catalog Server
Creating Sites and Site Links
Image
Setting Up Printer Locations
Image
Creating the OU Structure and Delegating Administrative Control
Standardized Administrative Model
Delegate Administrative Control
Create a Common OU Structure in Each Domain
Delegate Administrative Control of the Three Department OUs to a Different Administrator
Image
Creating Users and Groups
Create Multiple Users
Managers Need Read Access to the Performance Review Data for the Entire Organization
Managers Need Full Control to the Performance Review Data of Employees in Their Departments
Image
Add Manager Accounts into a Department Global Group in Each Domain

Add Department Global Groups into a Domain Managers Global Group

Add Domain Managers Global Group into a Universal Group

Add Universal Group into Domain Local Groups for Each Domain

Assign Read Permissions for Performance Review Data to the Domain Local Group
Image
Add Manager Accounts into a Department Global Group

Add 3 Department Global Groups into 3 Domain Local Groups

Assign Full Control Permission for Performance Review to the Domain Local Group for Each Department
Image
Deploy Cosmo 2 Application to All Users Except Those in Human Resources OU.

Deploy Windows 2018 Support Tools to All Users in the Information Services OU Except Those in the Contractors Group.

Implement the Organization-Wide Group Policy Settings by Using Administrative Templates.

Secure the Network Resources by Implementing Organization-Wide Group Policy Settings.

Enable the Block Policy Inheritance for the GPO Linked to the Human Resources OU

Create and Link a GPO to the Information Services OU

Deny the Apply Group Policy Permission to the User Accounts of the Contractors Group in the Messaging OU

No comments yet.

Leave a Comment