Windows Domains and Active Directory Quiz

Active Directory Basics

• A member server in Active Directory is a computer that is part of a domain but is not a Domain Controller (DC).

Authentication and Authorization

• Active Directory uses Kerberos protocol for single sign-on authentication and authorization for compatible applications and services.

Permissions and Access Control

• Permissions are assigned to user accounts in a domain using Access Control Lists (ACLs).
• Accounts and security groups in a domain are configured in the Active Directory Domain Services (AD DS).

Organizational Units (OUs)

• The purpose of an Organizational Unit (OU) in Active Directory is to organize and manage objects, such as users, computers, and groups, in a hierarchical structure.

Delegation of Permissions

• Permissions are delegated in Active Directory for administrative purposes using Role-Based Access Control (RBAC).

Server Roles

• A File Server provides file and print services, while an Application Server provides application services in Active Directory.

Security Groups

• A domain uses security groups to manage permissions by grouping users and assigning permissions to the group.

Local Accounts and Workgroups

• In a workgroup environment, local accounts are managed for a user needing access to multiple computers using separate user accounts on each computer.
• Local accounts in a workgroup environment are not scalable to large numbers of users due to the administrative burden of managing multiple accounts.

Domain Controllers (DCs)

• The responsibility of a Domain Controller (DC) in a Windows domain network is to authenticate and authorize users, as well as manage domain resources.
• A Domain Controller (DC) is a server that stores a replica of the Active Directory database and provides authentication and authorization services.

Network Models

• A Windows domain network is a type of network model that is characterized as centralized, robust, scalable, and secure.

Domain Administration

• The Domain Administrator has the rights to create accounts in the domain and manage Domain Controllers.
• Most business and educational organizations prefer using Windows domain networks and accounts over local accounts due to the benefits of centralized management, scalability, and security.