Let’s look at four enhancements to Active Directory in Windows Server 2008:
AD DS auditing enhancements
Read-only domain controllers
Restartable AD DS
Granular password and account lockout policies
There are other improvements as well, including some changes to the user interface for managing Active Directory and also to the Active Directory Installation Wizard. But we’ll focus here on the three enhancements just mentioned, as they’re big gains for many enterprises.
The first enhancement we’ll look at is AD DS auditing. In the current platform, Windows Server 2003 R2 (and in Windows Server 2008 also), you can enable a global audit policy called Audit Directory Service Access to log events in ...