ACTIVE DIRECTORY

DOMAIN SERVICES (AD DS)

Md. Ashraf Uddin Chowdhury
System Admin Unit, ICT Division
 AD Base Elements
DNS

Authentication Server
Group Policies
File Server
Sits and Subnets
Replications
 What is Active Directory (AD)?
Active Directory is a directory services implementation that provides all
sorts of functionality like authentication, group and user management,
policy administration and more.
It is a directory service is a hierarchical arrangement of objects which are
structured in a way that makes access easy.
ActiveDirectory is just one example of a directory service that supports
LDAP. There are other flavors, too: Red Hat Directory Service,
OpenLDAP, Apache Directory Server, and more.
 Why do we use Active Directory?
 Centralized resources and security administration
 Control all machines from a central point.
 Easy to implement specific setting or policy to all machines at a time.
 Improve the security through central monitoring and restricting user privileges.
 Single logon for access to global resources.
Backup and restoration services for central storage and Server storage space for user
documents.
 Active directory ensure data security as every users has unique login ID and
Password.
Active directory restrict the installation of any unauthorized software.
Who has AD Admin Privileges?

1. System and Hardware Unit Members

2. System Admin Unit Members
3. Zonal ICT Officers
 Components of Active Directory

Primary Server Secondary Server

 Components of Active Directory

Client PC
OS: Windows 10/7

Client PC
OS: Windows 10/7

Client PC
Branch RODC OS: Windows 10/7
OS: Windows Server 2016
FSIBL Domain
FSIBL Domain
Login to Domain
IP Configuration

Primary Server
Secondary Server
Active Directory Users and Computers
Active Directory Users and Computers
Active Directory Users and Computers
Active Directory Users and Computers
Organizational Unit
New Organizational Unit
AD Group
New Group Creation
Active Directory User
New User Creation
New User Creation
User Properties
 Branch Users Membership

Normal User RODC User

Admin Users Membership
Add user to a group
Transfer Domain User Account
Disable Domain Account
 Password Reset

Default Password:
Abcd@1234

User account will be locked for three Consecutive wrong password Input
Password Policy

Default Password:
Abcd@1234
Group Policy Object (GPO)
Group Policy Object (GPO)
Group Policy Object (GPO)
Branch ICT In charge Duties
Cautions!!