1. Describe two reasons why creating organizational units to store active direct
ID: 3710176 • Letter: 1
Question
1. Describe two reasons why creating organizational units to store active directory objects along geographical could be useful for a large business ? 2. Explain what is meant by replication in the context of active directory domain Controllers. 3. Explain the difference between share and ntfs permissions 1. Describe two reasons why creating organizational units to store active directory objects along geographical could be useful for a large business ? 2. Explain what is meant by replication in the context of active directory domain Controllers. 3. Explain the difference between share and ntfs permissions 2. Explain what is meant by replication in the context of active directory domain Controllers. 3. Explain the difference between share and ntfs permissionsExplanation / Answer
1)Answer:
organizational units(OUs) are often used to duplicate the organizational structure of the company within Active Directory. For example, a company might have OUs named Dev, Marketing, and Sales that represent the network resources of these three departments. OUs can also be assigned according to geographical criteria (New York, Los Angeles, and Detroit, for example) or by administrative function (Accounts, Shares, and Printers). When you run the Active Directory Installation Wizard to install Active Directory on a server running Windows 2000 (thus turning the server into a domain controller), a default hierarchy of OUs is created. This default hierarchy helps you begin administering Active Directory.
->Organizational units can be created within Active Directory domains as folders in a file system. Once you have created an Organizational Unit (OU) hierarchy which fit your company's business structure, you can store objects in OUs just like files inside folders. By creating a hierarchy, the difficulty of administration of Active Directory objects can be reduced to a great extent.
2)Answer:
Replication:
Replication is the process by which the changes that are made on one domain controller are synchronized with all other domain controllers in the domain or forest that store copies of the same information
There are two types of Active Directory replication that can be defined: intrasite replication and intersite replication.
Intra-site Replication – Intra-site replication takes place between domain controllers within the same site, making it a fairly uncomplicated process. When changes are made to the replica of Active Directory on one particular domain controller, the domain controller contacts the other domain controllers within the same site and it then checks the information it contains against information hosted by the other domain controllers. Intra-site replication uses the Remote Procedure Call (RPC) protocol to perform replication data over fast and reliable network connections.
Inter-site Replication – Inter-site replication takes place between sites and uses either RPC over IP or SMTP to replicate the data. Inter-site replication has to be manually configured and occurs between two domain controllers that are so-called bridgeheads. This role is assigned to at least one domain controller within a site. It is only these bridgeheads that replicate data with domain controllers in different domains by performing inter-site replication with its partners and packets are compressed to save bandwidth. Inter-site replication takes place over site links by a polling method which is every 180 minutes by default
3)Answer:
->Share permissions are the permissions you set for a folder when you share that folder. The share permissions determine the type of access others have to the shared folder across the network. There are three types of share permissions: Full Control, Change, and Read.
->NTFS permissions determine the action users can take for a folder or file both across the network and locally. Unlike share permissions, NTFS permissions offer several other permissions besides Full Control, Change, and Read that can be set for groups or individually. The most restrictive permission applies when share and NTFS permissions conflict.
->When you share a folder and want to set the permissions for that folder – that’s a share. Essentially, share permissions determine the type of access others have to the shared folder across the network.
To see what kind of permissions you will be extending when you share a folder
there are three types of share permissions: Full Control, Change, and Read.
->
NTFS permissions determine who has access to files and folders. To see what kind of permissions you will be extending when you share a file or folder:
Unlike share permissions, NTFS offer a few more permissions besides Full Control, Change, and Read that can be set for groups or individually.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.