active directory design project：活动目录设计项目

《active directory design project：活动目录设计项目》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、WindowsEnterpriseDesignEnterpriseDesignSummaryJuly25,2002LastUpdate:June7,2013ForestDesign–SingleForest·TheonlydesignthatallowsasingleExchangeorganization.Thisisrequiredtoenableenterprise-widesharedcalendaringandotheronlinecollaboration.Departmentalorganizationsc

2、anstillbedelegatedcontroloftheirownExchangeservers.·Collectsdisperseresourceslogicallyintoasinglemanagementpoolforseamlessauthenticationandaccess·CommonActiveDirectorySchema,withenterprise-widepolicyforschemachanges(includingreview,testing,andapplicationforest-wi

3、de)·Trustedroot-domainadministrators-Domain,EnterpriseandSchemaAdminsatrootdomainlevelmanagedunderpublishedenterprisepolicy-ExistingdepartmentalandcollegeITadminswillbecomeOrganizationalUnitadminswithintheirowndepartmentorcollege.DomainDesign–SingleDomain·Bestpra

4、cticeasrecommendedbyMicrosoftforWindowsActiveDirectoryenterprisedesign·Singleusername/password(ISUNet-ID)·AccountsforpeoplenotformallyassociatedwithISU(“exceptionaccounts”)willbeaccommodatedbetterinthefuture(web-based,not“papergenerated”)·Commonpasswordpolicy.Cur

5、rentpolicyisthatenforcebytheAcropolisinterface:-Fivecharacterminimum-Twocharactersetsrequired(letters,numbers,specialchars)-NoExpiration(butOUadminscanenforcetheirownexpirationonOUs,listsofusers,orgroupswithanAIT-suppliedsoftwaretool)-Cannotusesamepasswordtwicein

6、arow·ProvidesforpasswordschangesforaccountslinkedtoanISUNetIDtobepropagatedbackuptoAcropolis.ChangeseitherbytheuserchangingtheirpasswordoranOUadministrator“setting”theirpasswordare“synched”.A“bi-directionalpasswordsynch”isimplemented.·Providestheleastamountofente

7、rprisecomplexity.Makesenterprisetrouble-shootingfaster/easier.Site–SingleSite(withadditionalsitesasneededfornetworklimitations)·Currentlyhaveonesites(maincampus)5·PossibleadditionalsitesinthefutureforExtensionFieldOfficelocationsOrganizationalUnitDesign–Departmen

8、talOUs·DelegatedfullcontroltodepartmentaladminsfortheirOU·Faculty/Staffuseraccountsmaybemovedintoa“Users”containerwithinacollege/departmentalOUsothedepartmenta