Domain Services for Windows Administration Guide
- Domain Services for Windows Administration Guide
- Overview of DSfW
- Features and Benefits
- Architectural Overview
- Basic Directory Services Concepts
- Key Differences Between the DSfW LDAP Server and the eDirectory Server
- What’s New or Changed in Domain Services for Windows
- DSfW Interoperability with Third Party Software
- Citrix Virtual Apps and Desktops
- NetApp ONTAP Simulator
- NetIQ Privileged Account Manager
- NetIQ Advanced Authentication Framework Server
- OpenText Filr
- VMware
- Use-Cases
- Authenticating to Applications That Require Active Directory-Style Authentication
- Working With Windows Systems Without Client for Open Enterprise Server
- Leveraging an Existing eDirectory Setup
- Interoperability Between Active Directory and eDirectory
- Deployment Scenarios
- Deploying DSfW in a Non-Name-Mapped Setup
- Deploying DSfW in a Name-Mapped Setup
- Planning for DSfW
- Server Requirements for Installing DSfW
- Scalability Guidelines
- Deciding between Name-Mapped and Non-Name-Mapped Installation
- Impact of Mixed Mode Configuration in a Forest or Domain
- Extending a Domain Boundary in a Name-Mapped Installation
- Meeting the Installation Requirements
- Unsupported Service Combinations
- Operating System Version Support
- Client for Open Enterprise Server and Windows Co-existence
- Administrative Tools
- Utilities Not Supported in DSfW
- Limitations
- Restrictions with Domain Names
- Supported Special Characters in DSfW Passwords
- Enabling Universal Password Policy for DSfW
- Ensuring Filesystem ACL Support
- Installing Domain Services for Windows
- Installing and Configuring DSfW Using the YaST Administrative Tool
- Installing DSfW Using AutoYaST
- Provisioning Domain Services for Windows
- What Is Provisioning?
- Features and Capabilities of the Provisioning Wizard
- Provisioning Wizard Interface
- Using the Wizard to Provision the DSfW Server
- Provisioning Tasks
- Provisioning Tasks for Name-Mapped and Non-Name-Mapped Scenarios
- Logging
- Troubleshooting
- Executing Provisioning Tasks Manually
- Types of Accounts in DSfW
- Activities After DSfW Installation or Provisioning
- Verifying the Installation
- Renaming Administrator Details Using MMC
- Extending the Domain Post Provisioning
- Updating the Domain Functional Level and Forest Functional Level
- Validating the Schema Update
- Validating Domain and Forest Functional Level
- Upgrading DSfW
- Upgrading DSfW to OES 24.4
- Migrating Data to a Domain Services for Windows Server
- Activities After Upgrade or Migration
- Updating the Domain Functional Level and Forest Functional Level
- Validating the Schema Update
- Validating Domain and Forest Functional Level
- Running Domain Services for Windows in a Virtualized Environment
- Logging In from a Windows Workstation
- Joining a Windows Workstation to a DSfW Domain
- Logging In to a DSfW Domain
- Logging Out
- Support for SASL NTLMSSP Bind in LDAP
- Creating Users
- Creating Users in iManager
- Creating Users in MMC
- Creating Filr LDAP Proxy Users
- Moving Users Associated with Password Policies
- Limitations
- Understanding DNS in Relation to DSfW
- DSfW and DNS
- Understanding DNS Settings in the DSfW Environment
- Setting Up a Windows DNS Server for DSfW
- Migrating DNS to Another Domain Controller
- Restarting DNS
- Understanding AES Encryption for Communication
- Configuring DSfW Server as a WINS Server
- Using WINS in DSfW Environment
- Rectifying Duplicate Workstation Names
- Verifying Duplicate Workstation Names Prior to WINS Configuration
- Troubleshooting
- Managing Group Policy and Fine-Grained Password Policy Settings
- Configuring Group Policies
- Configuring Fine-Grained Password Policy
- Group Policy Objects
- Sysvol
- Limitations with Group Policy Management
- Managing Trust Relationships in Domain Services for Windows
- What is a Trust?
- Cross-Forest Trust Relationships
- Limitations with Cross-Forest Trust
- NSS Volume Access by DSfW and Active Directory Users
- Configuring NSS AD and DSfW in the same tree
- Providing Access to Server Data
- Accessing Files by Using Native Windows Methods
- Accessing Files by Using the Client for Open Enterprise Server
- Accessing Files in Another Domain
- Printing in the Domain Services for Windows Environment
- Setting Up iPrint
- Special Handling for iPrint on DSfW
- iPrint Clustering in a DSfW Environment
- Flexible Single Master Operation (FSMO) Roles
- FSMO Roles and Limitations
- Transferring and Seizing FSMO Roles
- Troubleshooting
- Troubleshooting DSfW
- Error Messages in Log Files
- Novell SecureLogin Issues
- Known Issues
- Schema
- Schema Objects
- Extending the Third-Party Schema
- Adding an Attribute to Partial Attribute Set (PAS)
- Understanding DSfW in Relation to IDM and Samba
- Understanding DSfW in Relation to Samba
- Understanding DSfW in Relation to IDM
- Network Ports Used by DSfW
- DSfW Password Policy Attributes
- Glossary
- Configuring Sites and Subnets
- Planning for Sites and Subnets Support
- Managing Sites and Subnets
- Troubleshooting
- Legal Notices