Windows Server 2003 Network Administration

Chapter 7. Using AD to Support Network Administration

Every Windows network administrator must have a basic knowledge and understanding of Active Directory (AD) because AD is both a consumer and a supporter of network services. You have learned in the last few chapters how to configure, manage, and create TCP/IP, DHCP, and DNS services. In a Windows AD environment, it’s fair to say that if DNS and TCP/IP networking are not correctly configured and working, then AD itself will not work; and if AD is not working, a large number of other networking services will not work either. If a Windows 2000 or Windows Server 2003 domain exists on the network, TCP/IP services and AD are so intertwined that an administrator must thoroughly understand both in order to properly administer the network.

Chapter 3 introduced some basic AD terms and information. Every prospective AD administrator should spend further time with Windows documentation, both in the product help files and in Microsoft online technical information.

To fully appreciate the significance of AD in a Windows network, an administrator should understand the important role this component plays. AD supports centralized management of the following network-related services and administrative tasks:

• Authentication

• Computer configuration, including network configuration

• Management of user accounts and user rights

• Remote access management

• Security policy management

• Authorization of DHCP servers

• Secure dynamic name registration when DNS is integrated ...