Active Directory Domain Service Deep Dive

A look at exactly what Active Directory (AD) Domain Services is and what makes it tick!
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
1:37 - Key domain features
3:27 - Directory service features
4:29 - X.500 and OUs
8:29 - LDAP
11:14 - DNS
14:00 - Authentication
16:20 - Schema
18:20 - Domain instances and domain controllers
23:23 - Why we have multiple domain controllers
26:32 - Domain FSMO roles
30:35 - RODCs
33:45 - Trees and forests
39:35 - Forest partitions and FSMO roles
44:01 - Global catalog
46:30 - Domain and forest modes
49:20 - Sites and subnets
56:25 - Useful local and Azure tools for AD
59:28 - Summary
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
❔ Question about my setup?
🔗 • My Setup
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azure #johnsavillstechnicaltraining #onboardtoazure #cloud

[@NTFAQGuy]

"Azure AD is not AD in the cloud" I’ve said many times in past videos. But what IS AD then? Well in this video I answer that! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 Thanks for watching! ☁🤙💪

[@hgbugalou]

I'm a long time AD admin/engineer/architect since the Windows 2000 days. Just wanted to say this was an excellent over view and I will be recommending it to some of my colleagues to better understand AD under the hood. I even learned a couple things I didn't know about!

[@sylviawylie9218]

Generic comment to show my appreciation. Keep winning John! I've worked in IT for over a decade, from Service Desk up to SysAdmin and, as such I have worked with AD for a long time but regrettably never did any official certs. I usually score quite high on tests related to AD but I found this video enormously helpful, I learned so much. Thanks bigly John! In a generic way of course 😛

[@NTFAQGuy]

Generic thank you ;) I appreciate that.

[@lltagged]

Love that fact that you're creating a vid about AD on your Azure channel! Most companies still run On-Prem or Hybrid so this stuff is important to know. As always you're rocking it hard. Thanks! 🤙

[@matthewmiles6913]

John, thank you so much for your time and effort to make these videos. Great information and I’ve learned so much from your content. Much appreciated!!!

[@NTFAQGuy]

Very welcome

[@JoshuaSelfe]

Love this video! For someone who grew up with cloud being a mature offering and the preferred approach, for most use cases, this is really helpful to understand historic tech context!

[@simonwelt]

Brilliant refresher video, can't believe how much you got through in an hour, thanks so much. I also remember the BDC days! :)

[@FelipeAugusto-xh8zc]

Fantastic video John. I hope I had this video back in my time instead of 600 pages to prepare for the MCP path of MCSA. This will be definitely the video to share with some colleagues.

[@cilenamo]

Love this. Always learning and always refreshing. Thanks for this one too, John.

[@yulaw3289]

joyful video for learning today, thanks so much!

[@chresones4851]

Very informative & clear! Was happy to learn some of the AD services deployment details I missed earlier. Thank you!

[@donaldperkins8091]

Thanks John - I found it really helpful to watch this prior to reading the Microsoft Online Docs for AD DS. It's much easier to visualize and digest all the minutia of the docs when you have the big picture to hang it on. I really appreciate your style and cadence as well.

[@NTFAQGuy]

Glad it was helpful!

[@juang1one]

Love the shirt...now I feel old. 🤓

[@larsstampe]

Brilliant overview of Active Directory. Well presented. Thanks for all the content you make.

[@NTFAQGuy]

My pleasure 🤙

[@spiritmorin]

You can be proud of your shirt, keep smiling😁

[@parkerjg7]

John you did a wonderful job making this video. 10/10 thank you much.

[@thesickbeat]

Thank you John, I don't have prior experience with on-prem AD so this is very useful.

[@HarshTekie]

Love the shirt! I started visiting your site back when I was getting my NT 4.0 certification.

[@NTFAQGuy]

Awesome! Thank you!

[@TorbayTech]

I live a breathe this stuff, and when this came up in my feed I thought it would be an interesting watch. Just have to say that never in a month of Sundays could I have put together such a clear and digestible explanation! Highly recommend this to anyone.

[@NTFAQGuy]

Glad you enjoyed it!

[@joseilers5254]

Excellent video again, this was for me the missing information about ADDS, very well explained

[@KevtechITSupport]

I been watching some of your other videos. Awesome work on explaining ad domain service.

[@Usmanghamman]

This was awesome !!! thank you for making this video, it really helped me understand AD without my eyes glazing over.

[@NTFAQGuy]

You're so welcome!

[@abalt3019]

Fantastic overview John! Love the shirt!

[@NTFAQGuy]

Thank you kindly!

[@torind2000]

These are always great videos. Thank you for the content

[@cyclesix]

Actually some younger IT professionals should watch this. I have a few colleagues in the second level that are missing this essential knowledge :)

[@KaezerMusik]

Microsoft discarding MCSA so early was such a bad decision. The study path for Windows server was so critical in teaching you not just how to use windows servers but also sys admin practices. I feel bad for the new comers without this knowledge getting in to the workspace.

[@hardikdesai24]

Actually true, this is required by younger professionals who are working on AD without any conceptual knowledge. I take AD interviews and have never identified anyone with such skills.

[@hgbugalou]

I have found AD to baffle some of the newer folks getting into IT. It's just so much different (and both good and bad ways) from newer auth and 'directory' solutions. I put directory in quote because most are just glorified address books focused on people and not resources or vice versa. Combining these as principles all of thier own with unique attributes is one thing AD does so well. This combined with security delegation aspects (on such granular levels nothing else comes close to) is one of the reasons why AD is still so prevalent today despite being a little long in the tooth. In any case traditional AD is going to be around for at least a couple more decades so It folks need to know the basics.

[@lamok5516]

nice way to tie everything in and it made complete sense. Thank you.

[@zt.5677]

Dear John, It has been a great idea to make this video. Thanks.

[@bronsonmagnan9055]

John, excellent video, very important knowledge for newer IT members that they may have missed if they started with the cloud. What do you think about doing a case study series where you take an existing lab network for the Justice League, with dc, exchange, sharepoint, file, rds, rras vpn, print services, and a workstation; and then use the series migrating the environment into modern AAD, MS365, Azure Files, AVD etc?

[@henriquealexandreh]

Fancy lecture! Thanks John!!!

[@bharathganesh6694]

Most waited content 😌

[@christianibiri]

Thanks John!!! great video

[@hardikdesai24]

John, you made me nostalgic while you were quoting Windows NT. This stuff is super awesome. I remembered my those days. I have a special place for AD.

[@NTFAQGuy]

Hehe, good old days :)

[@sukhjindersinghcheema3128]

I really appreciate you for this video.take care

[@NTFAQGuy]

Thank you! You too!

[@near6050]

What? Just in time!!! In my new job I encountered some alerts related to AD that I have to investigate, and nothing bothers me more than doing something I don't understand, thank you very much for this!

[@NTFAQGuy]

Awesome, glad could help

[@jamesdawgsbrown]

Awesome video.

[@matrixman20101]

Thank you so much it's refreshed memory and removed dust :)

[@NTFAQGuy]

Glad it helped!

[@johnkline17]

I think today this is a good starting point. NT? You go back. I was a part of upgrading Microsoft Datacenter from nt351 to 4.0. Bring back memories

[@rishabhmishra6172]

Thanks John.

[@gianlucarusso8475]

Fantastic video !

[@NTFAQGuy]

Thank you very much!

[@ChamindaPrasad-kq8vr]

Thank you so much!

[@jatinnandwani6678]

Thanks so much man

[@kailashagoudatammangoudar4455]

Hi John Savill was waiting for this course from long time. First viewer

[@NTFAQGuy]

lol, wow, you were fast!

[@kailashagoudatammangoudar4455]

@@NTFAQGuy That's because of the quality of videos you post

[@stepbabe100]

Love the T-shirt ! I feel it from back in my young IT days 😂 …. Many many eons ago ….

[@NTFAQGuy]

I couldn’t resist :)

[@simonkeen9368]

This is amazing

[@MazeL-ls8wu]

I have been working with AD for more than half a year, but I am still confused. After looking at this picture, I suddenly understood what site link, PDC, and inter-domain replication are. Thank you John.

[@NTFAQGuy]

Fantastic!

[@dosto-evsky]

Love the shirt ♥

[@NTFAQGuy]

🐶🤙

[@abhishekknegi007]

Thanks John for your video I heard about your channel from one ofyour ex collogue while he was giving us windows 2022 training.

[@ben2mx]

This has taken me years to learn. Even though I use it on a daily basis, it's as if I was a taxi driver and drove passengers all over the city, yet this showed me the whole map of the city I've been driving for years. I havent seen all of your videos, but do you have a shirt that says "Bro do you even Azure?" (instead of lift).

[@NTFAQGuy]

Yep it’s for sale on my charity t shirt store :)

[@goruby2]

Thanks

[@madazzle3457]

I really love you man

[@NTFAQGuy]

hehe, thanks :-D Glad I can help.

[@naskouk1566]

I feel like I am back in time 20 years ago. :)))

[@NTFAQGuy]

lol. only 20? :-D

[@jasonmiller1076]

Holy Cow, I am new to Active Directory. I think I need a simpler course. LOL!

[@NTFAQGuy]

🤷‍♂️

[@bahrammaleki411]

Please do more videos for on-prem stuff

[@Motorzep]

Ooo an Admin OU. Someone's got a DIAD tiering model in place!

[@NTFAQGuy]

Lol, my ad is so old :)

[@jlou65535]

I am repeating myself but great video John ! One little question : you demonstrated Forest root trust between rood domain in the same forest. Don't we say in that context ? - Forest trust between different forests - Tree-Root trust between root domain in the same forest ?

[@NTFAQGuy]

Yes.

[@Maiden4eva1995]

My college offers a Microsoft pathway for cybersecurity that dabbles with active directory and Azure but I'm already almost done with the cisco/network heavy pathway. Would you recommend learning AD and azure from third party sources/or on the job( if applicable) or formal education?

[@NTFAQGuy]

I would post this question to Reddit to get broad input and best guidance. I learn by doing and researching but everyone is different. I’m sure both your options are great but get those broader inputs. Best of luck!

[@Maiden4eva1995]

@@NTFAQGuy Thank you John and will do! On a positive note your series on azure is super useful! Instantly subbed

[@NTFAQGuy]

@@Maiden4eva1995 awesome, thank you

[@mackz9687]

Life goals here: Knows what AD is and got the guns to stop you from questioning him

[@bryansanchez9653]

Hello John could you share the tool you use to make red rectangle on the screen? Thank you!

[@NTFAQGuy]

zoomit

[@schillaci5590]

Old school AD guy here. Cloud identity still makes my head spin. It's just so disjoined and difficult to get right when the on-prem environment is such a mess. Yes, 90% of AD implementations out there are a heap. They are over 2 decades old after all.

[@NTFAQGuy]

Yes getting the on prem tidy first really can be a nightmare. :(

[@RobertFoster1]

How would sites come into play if I have two sites connected by 20 Gb fiber with about 1-2 ms latency? Right now I have it architected as a single AD site and it's worked well but idk if anything of value would be gained by separating into different sites.

[@NTFAQGuy]

if the link broke the services would still try and equally use the DCs in the other but if can't talk would try and use others. If you broke into separate would always use local but would slow down replication between them.

[@rahulkoria2007]

John I wanted to replicate all of your mind database and partitions in my mind's domain controller.

[@NTFAQGuy]

Lol, not much is up there ;)

[@paulwinfield8480]

I want one of those T Shirts. Where did you get it from?

[@NTFAQGuy]

My wife made it for me. Maybe I'll add to my charity T-shirt store :-)

[@paulwinfield8480]

@@NTFAQGuy Please. I want one.

[@JustVincentD]

Kerberos default accepted time difference should be 2 min not 5 min. Else good Explanation. Edit: John was right it is 5min. My bad!

[@NTFAQGuy]

Interesting, always thought was 5 tolerance. Live and learn :)

[@NTFAQGuy]

I looked it up and docs say 5. docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj852172(v=ws.11). Maybe it reduced with newer version?

[@JustVincentD]

@@NTFAQGuy oh yeah ur right, seems like I am outdated haha! 😂

[@JustVincentD]

I am sorry mate ur 100% right!

[@NTFAQGuy]

No harm, so many numbers to track ;) Does me good to double check.

[@tomdee2951]

before all this crap we had novell with ipx and no google lol

[@NTFAQGuy]

Lol

[@JuanCarruyo]

Great video but I got very distracted by how swole you are

[@NTFAQGuy]

Lol