Information Technology Reference
In-Depth Information
CHAPTER 5
Directory
Active Directory Domain Services (AD DS) is the fundamental building block for building
Windows enterprise networks, so it plays a crucial role in Windows Server exams. The basic
installation and administration of AD DS is covered in Exam 70-410, but the configuration
and management of AD DS is covered in Exam 7-411, including service accounts, read-only
domain controllers, domain controller cloning, backup and restore, and account policies.
Objectives in this chapter:
■
Objective 5.1: Configure service authentication
■
Objective 5.2: Configure domain controllers
■
Objective 5.3: Maintain Active Directory
■
Objective 5.4: Configure account policies
Since their introduction in Windows Server 2003, service accounts have played an impor-
tant role in isolating services and their authentication.
Service accounts
are user accounts
used to provide authentication and authorization for services or applications running on
the Windows server. Service accounts were originally only available as local accounts that
required significant ongoing maintenance and administrative effort. Service accounts have
matured and now include group Managed Service Accounts (MSAs) and virtual accounts
that provide simplified service principal name (SPN) management and automatic password
management.
