In the previous section, I explained PAM features in the new AD DS 2016. Time-based group membership is a part of that broader topic. It allows administrators to assign temporary group membership, which is expressed by a time-to-live (TTL) value. This value will be added to the Kerberos ticket. It is also called the expiring links feature. When a user is assigned to a temporary group membership, their login Kerberos ticket-granting ticket (TGT) lifetime will be equal to the lowest TTL value they have. For example, let's assume you grant temporary group membership to user A to be a member of the Domain Admin group. It is only valid for 60 minutes. But the user logs in 50 minutes after the original assignment and only has 10 minutes left to be a member of the Domain Admin group. Based on this, the domain controller will issue a TGT valid only for...
Mastering Active Directory
By :
Mastering Active Directory
By:
Overview of this book
Active Directory is a centralized and standardized system that automates networked management of user data, security, and distributed resources and enables interoperation with other directories. If you are aware of Active Directory basics and want to gain expertise in it, this book is perfect for you.
We will quickly go through the architecture and fundamentals of Active Directory and then dive deep into the core components, such as forests, domains, sites, trust relationships, OU, objects, attributes, DNS, and replication. We will then move on to AD schemas, global catalogs, LDAP, RODC, RMS, certificate authorities, group policies, and security best practices, which will help you gain a better understanding of objects and components and how they can be used effectively. We will also cover AD Domain Services and Federation Services for Windows Server 2016 and all their new features. Last but not least, you will learn how to manage your identity infrastructure for a hybrid-cloud setup. All this will help you design, plan, deploy, manage operations on, and troubleshoot your enterprise identity infrastructure in a secure, effective manner.
Furthermore, I will guide you through automating administrative tasks using PowerShell cmdlets. Toward the end of the book, we will cover best practices and troubleshooting techniques that can be used to improve security and performance in an identity infrastructure.
Related Content you might be interested in
Current Title:
Mastering Active Directory
Table of Contents (20 chapters)
Preface
Free Chapter
Active Directory Fundamentals
Active Directory Domain Services 2016
Designing Active Directory Infrastructure
Active Directory Domain Name System
Placing Operations Master Roles
Migrating to Active Directory 2016
Managing Active Directory Objects
Managing Users, Groups, and Devices
Designing the OU Structure
Managing Group Policies
Active Directory Services
Active Directory Certificate Services
Active Directory Federation Services
Active Directory Rights Management Services
Active Directory Security Best Practices
Advanced AD Management with PowerShell
Azure Active Directory Hybrid Setup
Active Directory Audit and Monitoring
Customer Reviews