Week 4 Flashcards
Directory Server
Contains s lookup service that provides mapping between network resources and their network addresses
Replication
Good for directory servers
Stored directory data can be copied and distributed across a number of physically distributed servers, but still appear as one, unified datastore for querying and administrating
Centralized Management
A central service that provides instructions to all of the different parts of my IT infrastructure
What do directory services provide?
Centralized authentication, authorization, and accounting (AAA)
RBAC
Role based access control
Give users access to certain information depending on their role in the company
Lightweight directory access protocol (LDAP)
Used to access information in directory services like over a network
Kerberos
A network authentication protocol that’s used to authenticate user identity, secure the transfer of user credentials, and more
Active directory
The native directory service for Microsoft Windows
What do domain controllers do?
Host a replica of the active directory database and group policy objects. Also serve as DNS servers. Provide central authentication through a network security protocol called Kerberos.
What two things happen when a computer joins an active directory?
The AD knows about the computer and has provisioned a computer account for it. The second is that the computer knows about the active directory and authenticates with it.
What is SAM?
Security Account Management
It stores usernames and passwords for active directory
What does active directory store instead of a password?
One-Way cryptographic hash
What is auditing in an IT sense?
Keeping track of who did what in the IT framework.
Group Policy Object (GPO)
A set of policies and preferences that can be applied to a group of objects in the directory
How do you put a GPO into effect?
Link it to a domain/site/OU