AD DOMAIN SERVICE

AD DOMAIN SERVICE

1. A directory service

2. Protocol

   • LDAP X.500 Standard, TCP, Client server model –Access, Search, modify

3. Authentication

   • Verify identity. • Interactive Logon: Grant the access to local machine • Network authentication: Grant access to network resources

4. Authorization

   • Verify that an authenticated user has permission to do an action
     • Is Issued the SID when the account is created!!
     • • Security Token is issued during the authentication (User SID + Group SID)
     • • Shared resources (+ACL)
     • • DACL ~ Security Token OK, DENIED

5. Centralize Network Management

   • o Single location & tools (manage groups and users accounts)
   • o Options for configure Security Policies
   • o Directory service for Apps

Bilder und Dateien der Mindmap