Active Directory Forestry, Investigating and Managing Objects and Attributes for Windows 2000 and Windows Server 2003

View other editions of Active Directory Forestry, Investigating and Managing Objects and Attributes for Windows 2000 and Windows Server 2003.
View books by John Craddock, Sally Storey.

Worth every penny - Rated
I find it hard these days to find techincal books that contain much I wasn't already familar with. This books jammed packed with things i didn't know or was only vaguely aware of. Almost none of the material i've seen covered anywhere else. From page one till the end I though wow, i've learned something new with every page. Its definately one for the techi, but when you covered all the rest this book takes you inside active directory to places you never though you'd go.

It talks about the database that is active directory, objects (user, computer, OU ) about attributes of those objects (e.g. Directory Name / objectClass / sAMAccountName ). You learn to manage/add attributes ( Give users attribue of employeeID ). How to update attributes of an object (say changes user daves employeeID ). How to access AD as a database using script not forced to use windows MSC consol (dsa.msc) which is so limited. Changing permissions on attributes allowing users or groups to update attribues (allow users to update their own telephone numbers). Much work is done using adsi.msc

There is extensive information on searching AD using the saved searched folder in DSA.msc. Searching is mostly done with LDP.exe, once you've learned how to search you can incorporate that into vbscript, to write scritps that find searched for objects then apply whats leaned in managing objects to move / delete / update / display attributes of those objects. You will learn to search for anything you could imaging (people called dave, disabled accounts, deleted things (yes you can find things deleted from AD) people in Manchester office, workstations that have been logged into more that 100 times)

There are great vbscript examples that will get your ideas flowing and get you well on your way. There is so much i've not mentioned its really teaching you to view/access AD as a database who's objects and attributes and security are in your control. Even if your not interested in scripting it will teach you so much about AD objects and attributes its still worth it.

I couldn't put it down . . . - Rated
a truly tremendous book! I couldn't put this down - and must for all those people who want to get in-depth with AD – with really useful and practical information on LDP – clear and concise with a nice picture on the front cover!

Fantastic piece of work - Rated
John and Sally have taken the AD apart in this book and produced an excellent guide on the internals of the Active Directory. This is first place I have found a detailed explanation of how Ambiguous Name Resolution actually works and resolves it searches. Every topic is backed up with detailed and well thought out examples to allow the reader to really understand the subject.

An excellent reference book that every consultant should have to hand.

Deep AD Info - Rated
The reality is that there are many books on Active Directory and by and large they all operate at a similar level. The difficulty is that there is little or no information that goes deeper into the workings of the AD. When I was stuck with a requirement to find out how to reveal deleted items in the AD I could'nt find any way of exposing tombstoned items. Then I was recommended this book, and sitting on the train each day I have worked my way through all the chapters including the Rule OIDs. First class stuff. I don't need all this information all the time, however when I do need this info, nothing else will do and there is no other source that I could find (apart from maybe paying vast sums of money to PSS)...

Freedom of Information.. - Rated
This book is an ideal tool for all of those like me who find that the standard Microsoft fare, when it comes to technical material about AD, is somewhat lacking.

For anyone who has been to one of John and Sally's presentations at Microsoft, Tech Ed etc you'll know what to expect. The book really lets you get your hand's dirty and see what's running under the hood of Microsoft Active Directory.

This book won't be for everyone (It says on the back cover 'On our geekometer scale this book is extreme!) as it's extremely technical but all of the concepts within are explained with clear examples.

As someone who works in an Active Directory environment, I appreciate this isn't going to be a book that you'll use day in, day out but if you ever want to do a lot of the stuff in the book e.g.locating the security principal for an unknown account, you're unlikely to find out how to do it anywhere else.