networking concepts

Active Directory (AD)

A Microsoft service for centralized network resource and user management, including authentication and authorization.

Purpose of Active Directory

Centralized control, secure authentication, policy enforcement, and hierarchical organization (domains, forests, OUs).

Microsoft Management Console (MMC)

A framework for managing Windows systems using snap-ins for tasks like device management and performance monitoring.

Disk Management snap-in

A tool in MMC to manage disks and partitions, including creating, formatting, resizing, and deleting volumes.

Considerations when naming a Windows Server

Unique, descriptive, follows naming conventions, and avoids special characters.

Static vs Dynamic IP addresses

Static ensures consistent network identity, while dynamic (via DHCP) is less reliable for servers.

Clean installation

Installing Windows Server on a blank or formatted drive with no remnants of previous systems.

First tasks on a new server

Configure static IP, promote to domain controller, set up DNS, and establish security policies.

NTFS permissions

File- and folder-level permissions, offering granular control like Full Control, Modify, and Read & Execute.

Least privileges principle

Users and processes should have only the permissions necessary to perform their tasks.

FAT volumes

Lack NTFS-style security and rely on share-level permissions.

Share permissions

Network-level permissions to control access to shared folders.

Types of share permissions

Read (View), Change (Read, modify, delete), Full Control (All permissions, including managing shares).

Active Directory components

Forest, Domain, Organizational Unit (OU), and Leaf Objects.

Organizational units (OUs)

Containers in a domain for organizing resources like users and computers.

Active Directory Leaf Objects

Individual elements like user accounts, groups, and computer accounts.

Creating/modifying user accounts

Use meaningful usernames, apply strong passwords, and assign proper group memberships.

Restricted characters in usernames

\ / : * ? " < > | and spaces.

Disabling user accounts in AD

To prevent unauthorized access during turnover or inactivity.

Built-in Groups

Predefined groups in a Windows domain with roles like Administrators, Users, Guests, Backup Operators.

Role of the Administrators group

Full control over domain resources and policies.

Domain Name System (DNS)

A system that translates domain names into IP addresses.

DNS naming hierarchy

Root (.), TLDs (.com, .org), Second-Level Domains (example.com), Subdomains (sub.example.com).

Converting binary to decimal

Multiply each bit by 2^position (from right to left) and sum the results.

Example of binary to decimal conversion

Binary 1010 = (1×2^3) + (0×2^2) + (1×2^1) + (0×2^0) = 10.