Active Directory 2008 features | Windowstricks

Page 1 of 6

Home

Active Directory

Exchange

Active Directory Tools

Products

Forums

Search
powered by

Get a free copy of the new Free Tools from Windowstricks

Active Directory 2008 features

30 JANUARY 2010

QUICK LINKS
Whats new in windows 2008 Active Directory Active Directory Active Directory Replication Group Policy DNS Exchange Exchange 2010 Windows 2008 Commands Oneline Script Free Tools Forums Now you can know the previous and present values for the changed attributes of the active directory object using the new auditing feature in windows 2008, as per the windows 2003 auditing you will only know the present values of the changed attribute This is very useful features in windows 2008 since you can revert back the changes using the previous value of the attribute Fine-Grained Passwords By default in windows 2003 all the user account in the domain should use the same password policy configured in domain level, thats why we called domain is a security boundary, if you require a different password policy then you have to create new domain In windows 2008 password policy can be configured for specific group of peoples with in the domain Read-Only Domain Controller Auditing As an Active Directory administrator very curies about the windows 2008 features compare to the earlier version like windows 2003, Windows 2008 comes with the whole bunch of features, and am going to discuss specific about the features of Active Directory server roles in Windows 2008 First I will list the features of windows 2008 Active directory and will discuss in detail of each in my upcoming article

LABELS
Account lockout (1) Active Directory Tools (5) AD (49) AD Replication (12) Application Directory Partition (3) Backup (1) Blackberry (1) Bulk reporting (1) command (25) csvde (4)

http://www.windowstricks.in/2010/01/active-directory-2008-features.html

03-05-2011

Active Directory 2008 features | Windowstricks

Page 2 of 6

DFS (2) Dfsutil (2) Dhcp (3) DN (1) DNS (17) dsget (7) dsmod (1) dsquery (11) Exchange (11) Exchange 2010 (5) Exchange Migration (5) Exhcnage 2007 (1) extract bulk object from AD (1) Free tool (6) GPO (16) HTA Script (1) Keyboard shortcuts (1) lingering objects (4) Microsoft (1) netsh (1) Nslookup (2) offline files (1) oneline script (6) port number (1) Privacy Policy (1) Scripts (2) Server 2003 (1) Spooler service crash (1) SYSVOL (1) Time Service (4) VBscripts (1) Windows 7 (2) windows server (6) Windows Server 2008 (8) Windows tools (3) Windows Vista (2) Active Directory Recycle Bin You can restore the accidentally deleted Active Directory object, without Active Directory authoritative restore, this can be used for single object restore like a accidental deletion of user or OU and you In windows 2008 active directory is a services, you can stop or restart the services for maintenance without restarting the domain controller and restarting it in Directory Services Restore Mode is not required for most maintenance functions, however still some maintenance function require Directory Services Restore Mode Database Mounting Tool Active Directory Database mounting tool in Windows Server 2008 to create and view snapshots of data that is stored in Active Directory Domain Services, and no need to restart the domain controller. A snapshot is a shadow copy created by the Volume Shadow Copy Service, at different times so that you can better choose which data to restore after object deletion. This reduces the administrator time and no need to restore multiple backups to compare the Active Directory data. Active Directory Database mounting tool can be called Snapshot Viewer, Snapshot Browser, and Active Directory data mining tool. Restartable Active Directory Domain Services Hey good new, now no need to restart the domain controller for every time for the active directory maintenance. Every one know about the BDC (backup domain controller) and its a same as the BDC but it only take the advantages from the BDC and its specifically designed for the todays requirements like branch office setup and to managing the branch office We all know how difficult to design and manage the domain controller from the branch office, some time it lead to the lingering object, but using the Read-Only Domain Controller In the branch office where the physical security of the domain controller is in question, or domain controllers that host additional roles, requiring other users to log on and maintain the server In any Active Directory environment if one Domain Controller not replicated with the partner Domain Controller more then one month, then its a very critical issue you have to rectify the replication problem as soon as possible or the Domain Controller needs to be decommissioned with in the tombstone lifetime, since its read-only domain controller no worries about the tombstone time.

http://www.windowstricks.in/2010/01/active-directory-2008-features.html

03-05-2011

Active Directory 2008 features | Windowstricks

Page 3 of 6

can reduce the domain controller downtime

Ads by AdBrite

Active Directory module for Windows PowerShell PowerShell available on windows 2003 itself, however its not fully supported for Active Directory, you cant manage the Active Directive using the PowerShell in windows 2003 In windows 2008 Windows PowerShell provides command-line

scripting for administrative, configuration, and diagnostic tasks You can manage the Active Directory with Exchange Server, Group Policy, and other services and its very easy to use like a windows commands, you can easily pipe cmdlets to build complex operations

Advertise on this site Powered By AdBrite

Active Directory Administrative Center Its new tool in windows 2008 R2 to manage active directory, we already have active directory users and computer to manage the active directory, using this new tool you can manage active directory in a new way As an administrator you perform most of the task commonly that is daily, some how its hard to open an active directory user and computer and find the object and do the task, in this new tool Active Directory Administrative Center its very easy to do a common task like password reset and search the Active Directory object and others Active Directory Best Practices Analyzer

This can be helped to identify and implement the best practices in the

Your Ad Here
SITEMETER

configuration of your active directory environment, this will scan your network and find the best practice violations, Then you can correct that, to get the best out of Active Directory services in windows 2008. Active Directory Web Services

FEEDBURNER FEEDCOUNT

Active Directory Web Services is give you the Web service interface to Active Directory domains and AD LDS instances (Active Directory Lightweight Directory Services) Active Directory Database Mounting Tool uses the Active Directory

LISTED ON....

Web Services as a front end, like that Windows PowerShell and Active Directory Administrative Center is used the Active Directory Web Services to access the directory service instances. Offline domain join

http://www.windowstricks.in/2010/01/active-directory-2008-features.html

03-05-2011

Active Directory 2008 features | Windowstricks

Page 4 of 6

Offline domain join makes to join a member server to the domain even the domain controller not reachable from the member server And this can be very useful for bulk deployment, when the system starts, it will automatically joined to the domain, this will reduce the administrative effort Managed Service Accounts Normally applications and services uses the Local Service and Network Service and Local System accounts, its easy to configure and shared among multiple applications and services and cannot be managed on a domain level You can use the domain account for the application (services), this can isolate the privileges for the application, but its very hard to manage these domain accounts like password management We have two new types of accounts, Managed service accounts and virtual accounts in windows 2008, now you can easily manage the service principal names (SPNs), it will provide Automatic password management Active Directory Management Pack You can monitor the Active Directory service on windows 2008 using the Active Directory Management Pack (MOM, SCOM) Designed specifically to monitor the performance and availability of Active Directory Domain Services (AD DS), also monitors the overall health of AD DS and alerts you to critical performance issues. Am sure you also amused about the features of windows 2008 and I would like to explain in details of each of this features in my upcoming article and your feedbacks are welcome Related Articles

Exchange 2010 Features Difference between Windows Server 2008 and Windows Server 2008 R2 Windows 2008 DNS features

Related Posts
Group Policy 2008 Features

http://www.windowstricks.in/2010/01/active-directory-2008-features.html

03-05-2011

Active Directory 2008 features | Windowstricks

Page 5 of 6

DirectAccess Windows 2008 DNS features Active Directory Schema Update Check trusted site and activeX approval site list
Posted by Ganesh at 20:21 Labels: AD, Windows Server 2008

LINKS TO THIS POST

Create a Link

Post a Comment

Newer Post

Home

Older Post

Advertise on this site Powered By AdBrite

Ads by AdBrite

LEGAL TERMS
Terms of use Privacy policy

TOTAL PAGEVIEWS

67,526

http://www.windowstricks.in/2010/01/active-directory-2008-features.html

03-05-2011

Active Directory 2008 features | Windowstricks

Page 6 of 6

FOLLOWERS

ABOUT ME
Ganesamoorthy Selvaraj

Follow
with Google Friend Connect

Followers (13)

I am Ganesh. Active Directory, Exchange, Windows Server and Migration Specialist, and author of www.windowstricks.in
Already a member?Sign in

View my complete profile

Windowstricks 2009

Back to TOP

http://www.windowstricks.in/2010/01/active-directory-2008-features.html

03-05-2011