Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 48 views

    Active Directory Services: API Ldap

    Uploaded by

    Sudheesh Puthussery
    Active Directory services include Lightweight Directory Services, Certificate Services, Federation Services and Rights Management Services. Each service expands the capabilities of Active Directory's directory management. Lightweight Directory Services shares similar functionality to Active Directory Domain Services but can run in multiple instances on one server. Certificate Services generates, manages and shares certificates to enable secure information exchange. Active Federation Services provides single sign-on authentication for access to multiple applications across different networks. Rights Management controls information access and encryption.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    Active Directory Services: API Ldap

    Uploaded by

    Sudheesh Puthussery
    48 views3 pages
    Active Directory services include Lightweight Directory Services, Certificate Services, Federation Services and Rights Management Services. Each service expands the capabilities of Active Directory's directory management. Lightweight Directory Services shares similar functionality to Active Directory Domain Services but can run in multiple instances on one server. Certificate Services generates, manages and shares certificates to enable secure information exchange. Active Federation Services provides single sign-on authentication for access to multiple applications across different networks. Rights Management controls information access and encryption.

    Original Title

    Active Directory services

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Active Directory services include Lightweight Directory Services, Certificate Services, Federation Services and Rights Management Services. Each service expands the capabilities of Active Directory's directory management. Lightweight Directory Services shares similar functionality to Active Directory Domain Services but can run in multiple instances on one server. Certificate Services generates, manages and shares certificates to enable secure information exchange. Active Federation Services provides single sign-on authentication for access to multiple applications across different networks. Rights Management controls information access and encryption.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    48 views3 pages

    Active Directory Services: API Ldap

    Uploaded by

    Sudheesh Puthussery
    Active Directory services include Lightweight Directory Services, Certificate Services, Federation Services and Rights Management Services. Each service expands the capabilities of Active Directory's directory management. Lightweight Directory Services shares similar functionality to Active Directory Domain Services but can run in multiple instances on one server. Certificate Services generates, manages and shares certificates to enable secure information exchange. Active Federation Services provides single sign-on authentication for access to multiple applications across different networks. Rights Management controls information access and encryption.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    of 3

    Active Directory services

    Several other services comprise Active Directory. They are Lightweight Directory
    Services, Certificate Services, Federation Services and Rights Management
    Services. Each service expands the product's directory management capabilities.

    Lightweight Directory Services (AD LDS) has the same codebase as AD DS,
    sharing similar functionalities, such as the API. AD LDS, however, can run in
    multiple instances on one server and holds directory data in a data store using
    Lightweight Directory Access Protocol (LDAP).

    How to use the identity and access tool


    from Microsoft

    LDAP is an application protocol used to access and maintain directory services


    over a network. LDAP stores objects -- such as usernames and passwords -- in
    directory services -- such as Active Directory -- and shares that object data across
    the network.

    Certificate Services (AD CS) generates, manages and shares certificates. A


    certificate uses encryption to enable a user to exchange information over the
    internet securely with a public key.

    Active Directory Federation Services (AD FS) authenticates user access to


    multiple applications -- even on different networks -- using single sign-on (SSO).
    As the name indicates, SSO only requires the user to sign on once rather than use
    multiple dedicated authentication keys for each service.

    Rights Management (AD RMS) controls information rights and management. AD


    RMS encrypts content, such as email or Word documents, on a server to limit
    access.

    Major features in Active Directory Domain Services

    Active Directory Domain Services uses a tiered layout consisting of domains, trees
    and forests to coordinate networked elements.
    A domain is a group of objects, such as users or devices, that share the same AD
    database. Domains have a domain name system (DNS) structure.

    MICROSOFT

    Active Directory's Group Policy Management console gives admins a tool to customize user
    and computer settings in their organization.

    A tree is one or more domains grouped together. The tree structure uses a
    contiguous namespace to gather the collection of domains in a logical hierarchy.
    Trees can be viewed as trust relationships where a secure connection, or trust, is
    shared between two domains. Multiple domains can be trusted where one domain
    can trust a second, and the second domain can trust a third. Because of the
    hierarchical nature of this setup, the first domain can implicitly trust the third
    domain without needing explicit trust.

    A forest is a group of multiple trees. A forest consists of shared catalogs,


    directory schemas, application information and domain configurations. The
    schema defines an object's class and attributes in a forest. In addition, global
    catalog servers provide a listing of all the objects in a forest.

    Organizational Units (OUs) organize users, groups and devices. Each domain can
    contain its own OU. However, OUs cannot have separate namespaces, as each user
    or object in a domain must be unique. For example, a user account with the same
    username cannot be created.

    You might also like