了解活动目录

1、Course Topics了解 Active Directory 01 | Introduction to Active Directory02 | Active Directory Domain Services (DS) 域服务03 | Active Directory Certificate Services (CS) 证书服务04 | Active Directory Federation Services (FS) 联合身份验证服务05 | Active Directory Rights Management Services (RMS) 权限管理服务06 | Active Dire

2、ctory Lightweight Directory Services (LDS) 轻型目录服务Microsoft Virtual AcademyActive Directory Active Directory 的的 简介简介 什么是 Active Directory ? Active Directory 的用途（作用）是什么 ?Module Overview What is Active Directory? 它是一个（服务,服务器角色和功能的集合），用于 管理网络上资源的标识和访问。What is Active DirectoryDomain ServicesInternal Acco

3、untsAuthorizationAuthenticationFederation ServicesNetwork Access for External ResourcesCertificate ServicesIdentityNon-RepudiationRights Management ServicesContent Security and ControlLightweight Directory ServicesApplication TemplatesActive DirectoryIdentityAccessCentralized Management AD Domain Se

4、rvices (AD DS) 用户, 计算机, 策略 ADCertificate Services (AD CS) 服务, 客户端, 服务器 和 用户 AD Federation Services (AD FS) 跨越传统边界的资源访问 AD Rights Management Services (AD RMS) 维护数据的安全性 AD Lightweight Directory Services (AD LDS)Active Directory Roles What is Active Directory Domain Services? 目录服务同时包括目录信息源和使得信息可用的服务 A

5、phone bookWhat is AD DS?Windows ServerMgmt ProfileNetwork InfoPrintersSharesWindows UserAccount InformationPrivilegesProfilesPoliciesWindows ClientMgmt ProfileNetwork InfoPoliciesEmail ServersMailbox InformationAddress BookApplicationsServer ConfigSSOApp-Specific Directory InfoNetwork DevicesConfigQ

6、oS PolicySecurity PolicyActive Directory Domain ServicesManageabilitySecurityInteroperability Scalable, secure, and manageable infrastructure for user and resource management 存储和管理有关网络资源的信息 提供对需要目录服务的应用的支持 如 Microsoft Exchange Server 集中化的管理与集中化的委派What does AD DS do? AD CS 是微软系统下 公钥基础设施 （证书）服务 PKI是创建

7、、管理、分发、使用、存储和调用各个证书所需的一组硬件 、软件、 人员、 策略和流程。What is AD CS?Revocation RequestCertificate Revocation ListCRL Retrieval5x.509 Certificate ChainCertificate Retrieval4Certificate Signing RequestEnrollment3Certificate RepositoryCertification Revocation Repository2End-Entities (users or computers)1 ADCS 提供可自

8、定义的服务用于 颁发 和 管理 数字证书 Certification authorities 证书颁发机构 CA Web enrollment 证书WEB注册 Online Responder 联机响应程序 Network Device Enrollment Service (NDES) 网络设备注册 Certificate Enrollment Web Service 证书注册web服务 Certificate Enrollment Policy Web Service 证书注册策略web服务What does AD CS do? 一种促进跨组织访问系统和应用程序的软件组件What is A

9、D FS?Web ServerResource Federation ServerAccount Partner OrganizationResource Partner OrganizationAccount Federation ServerAD DSFederation Trust AD FS提供经过简化的安全联合身份验证和Web单一登录（SSO）功能 允许在两个组织之间建立信任关系 提供组织之间应用程序的访问 为WEB应用程序在两个组织之间提供单点登陆What does AD FS do? Active Directory Rights Management Services (ADR

10、MS) 是一种信息保护技术它与应用程序合作，保护数字信息What is AD RMS?RMS ServerInformation AuthorRecipient 允许 各个用户 和 管理员 指定对于文档, 工作簿, 和演示文稿的访问权限 阻止未经授权的人员打印, 转发, 或复制敏感信息。 不管信息位于何处，都严格按照访问和使用限制执行。What does AD RMS do? AD LDS 一种基于层次文件的目录存储 AD LDS 是一种目录信息源和服务它 使得信息可获得和可用What is AD LDS?Windows UserAccount InformationPrivilegesPro

11、filesPoliciesEmail ServersMailbox InformationAddress BookApplicationsServer ConfigSSOApp-Specific Directory InfoNetwork DevicesConfigQoS PolicySecurity PolicyActive Directory LDSManageabilitySecurityInteroperability Lightweight Directory Access Protocol (LDAP) 目录服务它提供 弹性的支支撑为需要目录服务的应用程序, 而不受到ADDS服务的

12、限制 为需要目录服务的应用程序提供目录服务而不引起域和林的开销 单一的基础架构没有林的开销What does AD LDS do?Thanks for Watching!Thanks for Watching!2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Office, Azure, System Center, Dynamics and other product names are or may be registered trademarks and/or trademarks in the U.

13、S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Micr