Introducing Windows Server® 2008

Active Directory Domain Services

Let’s look at four enhancements to Active Directory in Windows Server 2008:

• AD DS auditing enhancements

• Read-only domain controllers

• Restartable AD DS

• Granular password and account lockout policies

There are other improvements as well, including some changes to the user interface for managing Active Directory and also to the Active Directory Installation Wizard. But we’ll focus here on the three enhancements just mentioned, as they’re big gains for many enterprises.

AD DS Auditing Enhancements

The first enhancement we’ll look at is AD DS auditing. In the current platform, Windows Server 2003 R2 (and in Windows Server 2008 also), you can enable a global audit policy called Audit Directory Service Access to log events in ...