Domain Controllers vs Workgroups | This Security Gap Could Cost You Everything
Active Directory Domain Services:
Topics:
1 : Work Group Model and Domain Model
2 : Active Directory Domain Services
IN A WORKGROUP MODEL:
• All computers are peers; no computer has control over another computer.
• Each computer has a set of user accounts. To use any computer in the workgroup,
you must have an account on that computer
IN A DOMAIN MODEL:
• One or more computers are servers. Network administrators use servers to control the security and permissions for all
computers on the domain.
1.What Is Active Directory Domain Services?
• The ADDS database stores information on user identity,computers, groups, services and resources.
• ADDS domain controllers also host the service that authenticates user and computer accounts when they log on to the domain
2.Purpose of Active Directory?
Provides User Logon and Authentication Services using Kerberos protocol.
• To Centralize and Decentralize the resource management.
• To centrally organize and manage:
− User Accounts, Computers, Groups, Network Resources.
• Enables authorized Users to easily locate Network Resources.
3.What is Domain?
• Domain is a logical grouping of user, computer, and group
objects for the purpose of management and security.
• Creating the initial domain controller in a network also
creates the domain—you cannot have a domain without at
least one domain controller.
• Each domain is identified by a DNS domain name
4. What is a Domain Controller ?
• A domain controller is a server that is configured to store a
copy of the AD DS directory database (NTDS.DIT) and a copy of the SYSVOL folder.
• All domain controllers except RODCs store a read/write
copy of both NTDS.DIT and the SYSVOL folder.
• NTDS.DIT is the database itself, and the SYSVOL folder
contains all the template settings for GPOs.
• Domain controllers host several other Active Directory–
related services, including the Kerberos authentication
service and the Key Distribution Center (KDC).
• Kerberos authentication service is used by User and
Computer accounts for logon authentication
• KDC is the service that issues the ticket-granting ticket
(TGT) to an account that logs on to the AD DS domain.
5. What is AD DS Logon Process?
5.1. User Account is authenticated to Domain Controller
5.2. Domain Controller returns TGT back to Client
5.3. Client uses TGT to apply for access to Workstation
5.4. Domain Controller grants access to Workstation
5.5. Client uses TGT to apply for access to Server
5.6. Domain Controller returns access to Server
Kerberos:
---------
Kerberos is primarily a UDP protocol, but it uses TCP for large Kerberos tickets. The default ports used by Kerberos are port 88 for the KDC1 and port 749 for the admin server. Kerberos clients need to send UDP and TCP packets on port 88 and receive replies from the Kerberos servers
Active Directory (AD) ports can be TCP or UDP ports that service Active Directory Domain Controllers (DCs) for requests. The most common protocols used are LDAP, Kerberos, RPC, DNS, and SMB over IP.
Here are some AD port numbers and what they do:
Port 443: A web browsing port used to secure web browser communication or HTTPS services
Port 445: SMB over port 445 is required for Microsoft's Active Directory (AD) to manage objects on a network
Port 53: Domain Name System (DNS) communication takes place over TCP and UDP port 53
Port 135: RPC
Port 137-138: NetBIOS
Port 389: LDAP
Port 3268: Used for queries specifically targeted for the global catalog
#arn
#arntech
#arntraining
#arntrainings
#arntechtrainings
domain functional levels,kerberos,kerberos authentication,ldap active directory,how kerberos works,kerberos authentication protocol,authentication protocol,lightweight directory access protocol,windows active directory,windows server,active directory domain services,server management,what is kerberos,key distribution center,admin center overview,domain controller,active directory,windows server 2022,server administration,Windows Member Server/Client Admin,Mastering Windows Member Server And Client Administration,active directory, domain controller, active directory tutorial, active directory tutorial for beginners, windows server 2022, windows server 2022 tutorial, windows server 2022 for beginners, Windows Server 2022 Beginners Video Tutorials, How to Join Windows 11 to an Active Directory Domain, join windows 11 to domain, Join a Computer to a Domain, How To Add Windows To A Domain, Windows domain joins, Windows 11 AD Domain Join Process, Connect a Windows 11 Computer to a Domain,Mastering Windows Member Server And Client Administration