Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

Active Directory Sites and Services

Active Directory Sites and Services is used to
create sites and subnets that mirror the physical and geographical
topology of your network. You can then configure how and when Active
Directory replication occurs between different sites to optimize
bandwidth usage over slow WAN links between sites. If your
implementation of WS2003 is at one physical location only, then you
may not use this tool at all. If you have multiple branch offices or
subsidiaries at different locations, however, expect to use this
tool, especially during the implementation stage when you are tuning
network traffic over slow WAN links.

The console tree for this tool displays the sites in your enterprise
and the links between them. A typical console tree looks like this:

Active Directory Sites and Services
Inter-Site Transports
IP
Site link
Site link  . . .  
SMTP
Site link
Site link  . . .  
Site
Servers
Server
NTDS Settings
Active Directory connection
Active Directory connection . . . 
Server  . . .  
Site  . . . 
Subnets
Subnet
Subnet . . . 

The three first-level containers here are:

Inter-Site Transports

This contains the various site links between your different sites,
grouped together depending on whether they use RPCs or SMTP messages
to replicate directory information between sites.

Sites

These are one or more containers for the various sites in your
enterprise. The Default-First-Site-Name is created by default when
you install your first domain controller in your forest root domain.
Other sites are created using this tool to reflect the different
physical or geographical locations of portions of your WS2003
network. Each site can contain one or more server objects, which are
typically domain controllers. Each site also contains NTDS site
settings for scheduling directory replication. Each server object
contains an NTDS settings object, which represents the directory
(

Ntds.dit file). This file is located on an NTFS
partition on the domain controllers and contains the Active Directory
connections for the domain controller.

Subnets

This contains the various subnets in your network, each of which is
associated with one of your sites.

The objects in the Server container for a site can also be member servers and not just domain controllers. This allows you to delegate authority over all servers (both domain controllers and member servers) in a given site.

Under the Action menu, you can select
the following:

Active Directory Sites and Services node

Select this to administer a target forest or to connect to a
particular domain controller in the forest, thus retrieving the
information needed to display the hierarchy of sites and subnets in
the enterprise.

Sites, Inter-Site Transports, or Subnets container

Select this in order to delegate authority to administer these
portions of Active Directory to trusted users in your enterprise. You
can also delegate individual sites or just the Servers container
within a site. See

Delegation earlier in this
chapter for more information on the subject of delegation.

A site

Select this to link a Group Policy Object (GPO) to that site. See

Group

Policy earlier in
this chapter for more information.

A particular server within the Servers container in a site

Select this if you want to move the server to a different site.

A particular Active Directory connection in the NTDS Settings container of any domain controller

Select this to manually force directory replication to occur with
that domain controller.For information on various tasks involving
this tool, see

Domain

Controller earlier in this chapter and in
the

following section.