Information about Active Directory tools in Windows Server 2008

[Pakhi]

In recent years, Microsoft has chosen a development cycle that is based on the output of major releases approximately every 4 years and a minor release 2 years after each major release:

• 2003: Windows Server 2003
• 2005: Windows Server 2003 R2
• 2008: Windows Server 2008
• 2010: Windows Server 2008 R2

I am sure that everyone must be aware about it. You should know that the terms of the support begins at the exit of a major release, so a major version and minor version is officially supported by Microsoft for the same period. Currently I am here to get more information about Active Directory tools presented in Windows Server 2008. Hope that you members will help me on this topic.

[TechPredator]

Today we do not talk about Windows Server without thinking about its service sentence: Active Directory, the release of Windows Server 2008, Active Directory was already well advanced, a few reminders about these improvements. Level security: audit finest on the entire Active Directory, better encryption algorithms on kerberos, domain controllers read-only (RODC), strategies for managing multiple passwords in a single domain. Active Directory server from 2008 became a service, ie it can be stopped without having to stop the server, useful for doing maintenance. Server option also since 2008, to run in Server Core mode. The integration of a function of "protection against accidental deletion," which protects the active directory objects by requiring administrators to explicitly remove such protection before deleting the object. Adding native and improved Management Console Group Policy (gpmc.msc) and the Attribute Editor (ADSI Edit).

[RogerFielden]

With Windows Server 2008 R2, Microsoft is seeking to improve, simplify management tools for Active Directory and automation to enable them to more easily manage large volumes. Indeed, today the administration tools active directory are distributed over thirty tools they are command line or via the MMC. These tools essentially use RPC or LDAP to conduct their operations within Active Directory. The idea to Server 2008 R2 is to gather all these tools scattered in one: PowerShell with its module dedicated to Active Directory. Explanation: In keeping with its philosophy at all .NET, Microsoft has added a component .NET is dedicated to Active Directory AD Web Service named to serve as a universal base for all applications for managing the Active Directory. You should keep in mind that this component is natively integrated with Windows Server 2008 R2, but it is also available as an option for managing server systems 2003 and 2008.

[Brunoz]

On the side of graphical interfaces, the MMC console shows some limitations for daily tasks as soon as the Active Directory architectures become a bit complex:

• MMC very long to load when viewing an OU with lots of objects.
• Common Tasks not always easily accessible or longer to achieve.

The Administrative Center will simplify the daily operations in an interface that provides the most common operations (reset passwords, disabling an account, join a group), which greatly facilitates the search for objects in the directory. Example: reset a password, which needs to know information such group or another, to avoid having to search the entire directory. These actions are, of course, always possible classically since the MMC Users & Computers. A console that could be enjoyed by non-computer specialist who assigns rights.

[Pollock]

Feature highly anticipated by many system administrators, the trash active directory. Since Server 2008, it is possible to protect objects against accidental deletion, adding a step to the removal, but if the object is deleted, it behaves as in earlier versions. When you delete an object in Active Directory, it may, by default, be restored for 180 days: it is in a state called Tombstone. Only after a restoration, it has lost all its links, as belonging to groups, it will recreate them manually. With the "Active Directory trash" during the first 180 days, it will in a "deleted" in the trash, and it can be restored, with all of these links. The 180 days it takes a state tombstone, where it can be restored without its links. While the length can easily be customized. However, note that this feature can be activated, your forest will have at least a functional level "Windows 2008". Also note that this action is irreversible, the trash will be permanently active. The use of the trash has not yet clean interface, so everything must be done via PowerShell:

• To enable: Enable-ADOptionalFeature "Recycle Bin Feature"
• To check its activation: Get-ADOptionalFeature-Filter {Name-like "*"}
• To restore: Restore-ADObject