05.03.2013 Views

MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

14-10 Chapter 14 Overview of Active Directory Service<br />

■ Domain controllers detect collisions, which can occur when an attribute is modified<br />

on a domain controller before a change to the same attribute on another<br />

domain controller is completely propagated. Collisions are detected by comparing<br />

each attribute’s property version number, a number specific to an attribute that is<br />

initialized on creation of the attribute. Active Directory resolves the collision by<br />

replicating the changed attribute with the higher property version number.<br />

■ Having more than one domain controller in a domain provides fault tolerance. If<br />

one domain controller is offline, another domain controller can provide all<br />

required functions, such as recording changes to Active Directory.<br />

■ Domain controllers manage all aspects of user domain interaction, such as locating<br />

Active Directory objects and validating user logon attempts.<br />

In general, there should be at least one domain controller for each domain in each site<br />

for authentication purposes. However, authentication requirements for your organization<br />

determine the number of domain controllers and their locations.<br />

Sites<br />

A site is a combination of one or more Internet Protocol (IP) subnets connected by a<br />

highly reliable, fast link to localize as much network traffic as possible. Typically, a site<br />

has the same boundaries as a local area network (LAN). When you group subnets on<br />

your network, you should combine only those subnets that have fast, cheap, and reliable<br />

network connections with one another. Fast network connections are at least 512<br />

kilobits per second (Kbps). An available bandwidth of 128 Kbps and higher is sufficient.<br />

With Active Directory, sites are not part of the namespace. When you browse the logical<br />

namespace, you see computers and users grouped into domains and OUs, not<br />

sites. Sites contain only computer objects and connection objects used to configure<br />

replication between sites.<br />

Note A single domain can span multiple geographical sites, and a single site can include<br />

user accounts and computers belonging to multiple domains.<br />

On the CD At this point, you should view the multimedia presentation “The Physical Structure<br />

of Active Directory,” which is included in the Multimedia folder on the CD accompanying<br />

this book.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!