Windows Server 2012 Active Directory
With the introduction of Microsoft Windows Server 2012 a lot ofnew features in the Active Directory Domain Services (AD DS) havebeen implemented. Most of the improvements have been madeconcerning the management, architecture and security. This is why you should think about a migration to Windows Server 2012.
Read more about the following new features of
FirstAttribute supports you with the design and implementationif you want to migrate to AD Domain Services 2012.
Dynamic Access Control
Access permissions to IT resources in Server 2008 are controlledvia access control lists, and requires a dynamic work environment,a constant review and updating of access permissions for users andgroups.
Windows Server 2012 introduces Dynamic Access Control (DAC), anew claims based authorization platform which can be applied tousers and devices. In addition, there is a central Access Policies(CAP) model. Together with file classification information flexibleattribute based authorization decisions can thus be made by theaccess system.
A smoothly running Dynamic Access Control requires completemaintenance of user-related information in the Active Directory.FirstAttribute offers a web-based Identity Management Active Directorytool or the easy maintenance of user information. You can usethe tool in already existing environments to be prepared for theuse of Dynamic Access Control.
It is possible even before the introduction of WindowsServer 2012 AD Domain Services Attributes to build apermission based structure with DynamicGroup.
Windows PowerShell HistoryViewer
Server administration with PowerShell has already started withWindows Server 2008 and continues with Windows Server 2012. Thecurrent PowerShell version 3.0 offers more CmdLets, e.g. for thedomain controller installation. Microsoft prefers the GUI-lessServer Core installation of Microsoft. The administration of of theCore servers is done by management servers. The Server Manager wasdeveloped to automatically display all available servers.
PowerShell is also running in the background of existing GUImanagement tools. To assist in the administration tasks, PowerShellcommands of the administration tools can be displayed via thePowerShell History Viewer. So you can look behind the scenes andget inspiration for your own use of the PowerShell commands.
Active DirectoryAdministrative Center
The management interface for the Active Directory has beencompletely revised and now provides a task oriented approach. Thenew interface of the Active Directory Administrative Center isprimarily intended for the processing of routine administrativetasks in the AD Domain Services. Clear forms are provided to createuser accounts, changing passwords and the group management. Inaddition, all domains in the forest are accessible to executeadministrative tasks.
In AD Administrative Center also a GUI for the Active DirectoryRecycle Bin is now available. And the administrative center alsoused PowerShell commands in the background.
The standard management consoles such as the ActiveDirectory Users and Computers snap-in or the Sites andServices snap- in are of course still available.
If you want individualized administrative formswith additional features and maybe even a delegated form-based ADDS Administration to implement the solution offers FirstWareAdmin flexible adaptation and uses.
Domain Controller Cloning
Nowadays the provision of modern IT infrastructures isperformednmostly with virtualization techniques to build server anddomain controller structures. With Windows Server 2008, Microsoftintroduced the Hyper-V technology, which now enjoys greatpopularity. The technology enables you to adjust to the changingneeds of server capacity very fast and flexible.
Starting with Windows Server 2012 there is a new function thatincreases the scalability and reliability of the Active DirectoryDomain Services. The Domain Controller Cloning. Virtual domaincontroller can thus be easily cloned and made available withoutfurther processing immediately as another replication partner forthe Active Directory Domain Services. Further tasks such as theexecution of “sysprep.exe” are not necessary any more.
More information is available at: