The features of the Active Directory’ can be grouped into the following list:
- The data in the Actin’ Directory is grouped hierarchically Objects can be stored inside 0 container objects, Instead of having a Single, large list of users, the users can be grouped is organizational must. An organizational unit can contain other organizational units, so we build a tree.
- The Active Directory uses a mulch-master replication, In Windows ?\T 4 domain> the domain controller, PDC, was the master. In Windows 2000 with the Active Director) eve domain controller, DC, is a master. If the PDC in a Windows NT 4 domain is down, no u can change their password; the system administrator can only users “hen the I’D up and running. With the Active Directory, updates can be ,0 an) DC. This mod much more as updates can happen to different servers endured). The disadvantage of this model is that replication is more complex ill talk about the, replication issues later in this chapter.
- The replication topology is flexible, to support replications across 51 w links in often data should be replicated ‘is configurable by. the domain admin translators.
- The Active Directory supports open standards. L D A P, the Lightweight Directory Access Protocol, is one of the standards that can be used to access the data in the Active Direct LDAP is an Internet standard that can be u~ed to accessa lot of different directory servo With LDAP a programming interface, LDAP API, is also defined. The LDAP API can b to access the Active Director), with the C language. Microsoft’s preferred programming interface to directory services is ADSI, the Active Directory Service Interface. This, of c is not an lien standard. In contrast to the LDAP API. ADS! makes It possible to access features of the Active Directory. Another standard that’s used within the Active Direct Kerosene, which is used for authentication. The Windows 200th Kerosene service ran al used to authenticate U.NIX clients.
- With.the Active Directory we have a,One-grained object stored-in the Action . Directory can have an associated access-control list that defines who call do That that