All right let's talk through the logical components of Active Directory and you're going to hear these
terms over and over again.
So I'm going to walk you through them briefly and then you'll hear them as we go through the course.
And it's just good to have that familiarity with the names and kind of what they mean behind it.
So up first is what is called the Active Directory schema.
And you can think of a schema as a rule book or a blueprint.
Basically what it does is it contains definitions of every object that can be created in Active Directory.
So you see here it just says it enforces rules regarding object creation and configuration.
That's it.
When you hear the schema all you've got to think about as a rule book you don't think too much more
complex about that.
It just enforces rules about object creation.
More importantly is what are called domains.
So domains are what is used to group things together so we can group our objects together in a single
organization.
And you can see here that we've got a single domain this Canto so dot com which is all these sources
are provided by Microsoft Virtual Academy and it's just one domain.
And if you have like a small business think of a small business you might just have one domain that
you're on and this one domain has all the user's computers every object inside of it because all you
need is one domain.
So we have this one domain and it functions like a domain controller and we could see down here in the
description that there are administrative boundaries for applying policies and they are authentication
authorization and this looks very familiar to what a domain controller was.
Except now we're just managing it all in what is called a domain.
So when you see like a dot com or a dork you think of that as a domain not very different.
When we are building it out in our network we also have what are called trees now trees are a group
of domains and they're kind of in this hierarchy.
So you see again we have this example of this Canto so dot com.
Well what if Canto so dot com is the big name sake and then we have two child domains.
So you've got to a parent domain and then we have a child domain or two child domains and we have a
division in North America.
So you've got any dot contests dotcom and then we have the European.
So we have EMEA that Canto so dot com.
So when we have trees we have this parent and then we've got these children when it comes to domain
and they have what is called a trust with them that is to a transitive and we'll talk about trust here
in just a little bit but just know that you have the parent and then you have the children and they
share namespace and they share some trust between them and then we have what is called a forest.
Now forests are just a collection of these trees.
So if we have one tree and it's maybe Canto so and then you have another tree and maybe it's a different
business name but they linked together one way or another and you can have different sort of trust between
these forests.
So we'll take a look at that again in just a second but just know that these build up and they stack
as they get bigger and logically we start with the domain and then we have a tree and then we have a
forest.
OK.
And for the sake of this class or for the sake of this cause we're only going to be working with a domain
and a lot of times when you see even more advance Active Directory courses mostly you're going to be
working with trees where you have these children domains and you might try to escalate into a parent
domain hardly ever do you see forest but it's still important to know about them.
Now inside of Active Directory there are what is called organizational units.
And you'll hear me refer to them as oh use.
That's the common terminology is an O U for these and these are just containers and they are containers
for your users your computers your groups and you're gonna see this once we start building out our Active
Directory components you're gonna see me go in and we're gonna set up some different o use and have
our users in one o you will have our groups in their own o you etc..
So you'll see what they are but as of right now just think of O use as organizational units.
OK.
And then we have trusts now trusts are how we have access between resources.
Now you can see that there is directional trust and transitive tries.
So if we have directional trust we have to have trust from one domain to the other domain.
OK.
So it flows from a trusting domain to a trusting domain.
Now if we have transitive trust then we have a trusting domain and a trusting domain.
But it also trusts everything that that domain trusts.
So if there's other trees or if it's in a forest then it trusts everything that trickles down and you
can see in the image here where we have to trust but then it's trusting everything that other domains
are trusting as well.
So a trust is just a way for users to have access to certain resources that might exist in another domain.
And lastly we have objects so objects are what is going to be inside of our oh use our organizational
unit we're going to have these different objects.
So a user can be an object a group can be an object a computer printer shared folders you see all this
thing in this list.
They can be objects.
So let's break this all down one more time so we have domains and domains are used to group and manage
objects in an organization that's primarily we're gonna be working with in this course.
If you have multiple domains we have what's called the tree.
You might have a parent domain and then you might have the children domain.
And then when you have multiple sets of trees you starting to build out a forest.
OK.
Now inside of these domains are these trees these forests are what's called these oh use these organizational
units and these organizational units consist of these objects.
All right.
And then the last thing to remember is across forests or across domains.
We have what are called trusts and these trusts can be directional meaning that one domain trusts another
domain or they can be transitive meaning one domain trusts another domain and then trusts everything
else that domain also trusts.
OK.
So high level overview.
Take good notes on this if you need to go back and watch it one more time but you're going to see this
over and over and over especially domains and organizational units and objects.
We'll talk about trust again throughout the course and we'll give some ideas about trees later on in
the course as well that we won't actually be exploiting them.
So for this course.
Big takeaways are domains organizational units and objects.
And remember what trust are as well.
But it does not hurt to know all these things just to boost your active directory knowledge especially
for an interview if it comes up.
So that is it.
Now we're going to be moving on into our lab building and this is where the fun really begins.
We're done with the death by PowerPoint so I'll catch you over in the next video or we start to build
out our active directory lab.