Week 4 Flashcards
Directory Server
Contains s lookup service that provides mapping between network resources and their network addresses
Replication
Good for directory servers
Stored directory data can be copied and distributed across a number of physically distributed servers, but still appear as one, unified datastore for querying and administrating
Centralized Management
A central service that provides instructions to all of the different parts of my IT infrastructure
What do directory services provide?
Centralized authentication, authorization, and accounting (AAA)
RBAC
Role based access control
Give users access to certain information depending on their role in the company
Lightweight directory access protocol (LDAP)
Used to access information in directory services like over a network
Kerberos
A network authentication protocol that’s used to authenticate user identity, secure the transfer of user credentials, and more
Active directory
The native directory service for Microsoft Windows
What do domain controllers do?
Host a replica of the active directory database and group policy objects. Also serve as DNS servers. Provide central authentication through a network security protocol called Kerberos.
What two things happen when a computer joins an active directory?
The AD knows about the computer and has provisioned a computer account for it. The second is that the computer knows about the active directory and authenticates with it.
What is SAM?
Security Account Management
It stores usernames and passwords for active directory
What does active directory store instead of a password?
One-Way cryptographic hash
What is auditing in an IT sense?
Keeping track of who did what in the IT framework.
Group Policy Object (GPO)
A set of policies and preferences that can be applied to a group of objects in the directory
How do you put a GPO into effect?
Link it to a domain/site/OU
Policies
Settings that are reapplied every few minutes, and aren’t meant to be changed even by the local administrators
Group policy preferences
Settings that, in many cases, are meant to be a template for settings
What folder are policies from the Domain Controller replicated from?
sysvol
Windows registry
A hierarchical database of settings that Windows, and many Windows applications, use for storing configuration data
What is the group policy results tool used for?
To see which group policies are are applied to what computers in the network
Remote wipe
A factory reset that you can trigger from your central MDM, rather than having to do it in person on the device
ldapadd
Takes the input of an LDIF file and adds the context of the files
ldapmodify
Modifies an existing object
ldapdelete
Will remove the object that the LDIF file refers to
