Windows 2000 Active Directory Basics

We know that one of the biggest breakthroughs and successes of WIN2K system is its newly introduced "Active Directory" service, which makes WIN2K system and various items on the Internet. The service and protocol are more closely related, because it naming the directory successfully with the naming manner of the domain name, and then parsing through DNS, so that it achieves the same effect as WINS parsing on the Internet. The Active Directory also illustrates Microsoft's strategic shift in network architecture. Although some products (such as EXCHANGE SERVER, IIS, etc.) have provided services similar to Active Directory in the previous NT era, Active Directory is a new integrated service. After the birth of WIN2K came along. The Active Directory appears to be ubiquitous throughout the WIN2K system. However, it is easy to really understand all aspects of the “Active Directory”. I would like to take a few chapters to make a detailed analysis of the main aspects of the Active Directory through some popular explanations. I hope that those active directories for WIN2K will survive. A newcomer with fears has a chance to fully understand.

First, the origin of the Active Directory

When it comes to Active Directory, it is most likely to think of DOS under the directory ", directory", "path", and Windows9X/ME under "folder" ;, at that time, the "directory" or "folder" folder only represents the location and hierarchical relationship of a file on the disk. After a file is generated, the directory of the file is relatively fixed (of course, it can be deleted) , transfer, etc., do not consider these now, that is to say its properties are relatively fixed, static. This directory can only represent the storage location of all files in this directory and the total size of all files, and can not get other relevant information, which affects the efficiency of the overall use of the directory, which affects the overall efficiency of the system. Make the entire management of the system complicated. Because there is no correlation, the same object has to be configured multiple times in different applications, which is quite complicated to manage and affects the efficiency of system resources. In order to change this inefficient relationship and strengthen the relationship with the relevant protocols on the Internet, Microsoft decided to comprehensively reform in WIN2K, which is to introduce the concept of Active Directory. The key to understanding Active Directory is the "activity" word, don't remove the words "activity" and just understand the words from the "directory", then you and I will be reasonable to understand. Must not be able to break away from the original DOS directory or Windows9x folder, because this directory is active, so it is dynamic, it is a directory containing service functions, it can do "by this and <quo; Lenovo, mapping, if you find a user name, you can think of its account, birth information, E-mail, phone and other basic information, although the files that make up this information may not be a piece. At the same time, different information can be shared between different applications, which reduces the waste of system development resources and improves the utilization efficiency of system resources.

Active Directory consists of two aspects: the directory and the directory-related services. A directory is a physical container for storing various objects. From a static perspective, this Active Directory is not essentially different from the "directory" and "folder" that we have previously met. It is just an object. An entity; a directory service is a service that makes all the information and resources in the directory work. The active directory is a distributed directory service, and the information can be distributed on multiple different computers to ensure quick access by users because of multiple machines. With the same information, it has strong control over the information, so that users are provided with a unified view no matter where they are accessed or where the information is.

Second, related terminology

Although many of the technologies used in the Active Directory have appeared in other software products, but as a comprehensive overall network solution is still debut, many of them Nouns or terms may be unheard of, so it is necessary to learn more about the nouns or terms in the Active Directory.

1. Namespace: In essence, the Active Directory is a namespace. We can understand the namespace as the resolution boundary of any given name. This boundary refers to the name that can be provided or associated. A range of all information that is mapped. In layman's terms, we sum up all the related information that we can find on the server by looking up an object, such as a user. If we have defined this user in the server, such as: user name, user password, work unit, contact number, The home address, etc., the sum said above is broadly understood as the "user" namespace, because we only enter a username to find all the information I listed above. Name resolution is the process of translating a name into an object or information represented by the name. For example, in a directory where a phone directory is formed, we can resolve the name of each phone account to the corresponding phone number, instead of the name being the name, the number being the number, and not being able to be contacted horizontally. The file system of the Windows operating system also forms a namespace, and each file name can be parsed into the file itself (including all the information it should have).