Discussion:
Active directory Improvement
(too old to reply)
CLAX
2008-07-16 11:57:47 UTC
Permalink
is there any addtional improvements in AD 2008?
Meinolf Weber
2008-07-16 12:15:43 UTC
Permalink
Hello CLAX,

You didn't mention anything, so how should we compare what you don't have?
Maybe this helps you:
http://technet2.microsoft.com/windowsserver2008/en/library/eccfec5b-86c6-4b19-8b70-1aad0403d1df1033.mspx?mfr=true

http://www.microsoft.com/windowsserver2008/en/us/active-directory.aspx

http://technet.microsoft.com/en-us/magazine/cc194387(TechNet.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Post by CLAX
is there any addtional improvements in AD 2008?
Paul Bergson [MVP-DS]
2008-07-16 12:55:04 UTC
Permalink
Read Only Domain Controllers
Multiple Password Policies
Stopping and starting of AD (you can even do a restore in certain instances
w/o doing a restart)
New auditing of AD objects
--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
Post by CLAX
is there any addtional improvements in AD 2008?
Jorge de Almeida Pinto [MVP - DS]
2008-07-16 21:35:15 UTC
Permalink
forgot:
SYSVOL through DFSR
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Post by CLAX
is there any addtional improvements in AD 2008?
Brandon McCombs
2008-07-17 02:02:11 UTC
Permalink
Post by Jorge de Almeida Pinto [MVP - DS]
SYSVOL through DFSR
Isn't the SYSVOL already accessed through DFS? If a server doesn't have
it's DFS Client service running it can't access a DC's SYSVOL share.
I've run into that recently at work. Or do you mean something else?
unknown
2008-07-17 12:08:21 UTC
Permalink
Hello Brandon,

"Old" style relies still on FRS.

SYSVOL Replication with DFS-R
Windows Server 2003 R2 featured a revamped Distributed File Service (DFS)
that incorporated a brand-new file replication mechanism called DFS-R. It
uses remote differential compression, which substantially reduces file replication
traffic by determining which blocks of a target file need to be replicated
to bring it into sync with the source file. However, Windows Server 2003
R2 still uses File Replication Service (not DFS-R) to replicate SYSVOL between
domain controllers. Because of this, SYSVOL replication continued to be a
source of problems for Active Directory administrators.
When running at the Windows Server 2008 domain functional level, Windows
Server 2008 can replicate SYSVOL using DFS-R, improving the speed and robustness
of SYSVOL replication. And this makes it reasonable to place large files
in SYSVOL to make them available on all DCs. To use DFS-R for SYSVOL, you
must first migrate the old SYSVOL data to DFS-R using the DFSRMIG utility.
This process has four steps:
Create the Active Directory objects required by DFS-R.
Create the new file structure for SYSVOL on each domain controller.
Switch over all domain controllers to use the new SYSVOL.
Remove the old SYSVOL.
Depending on the size of your SYSVOL and the number of domain controllers
you have, this process may take a while, but the improved performance and
reliability make the effort well worth your while.

Also see here:
http://blogs.technet.com/notesfromthefield/archive/2008/04/27/upgrading-your-sysvol-to-dfs-r-replication.aspx

http://redmondmag.com/features/article.asp?editorialsid=2516

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Post by Brandon McCombs
Post by Jorge de Almeida Pinto [MVP - DS]
SYSVOL through DFSR
Isn't the SYSVOL already accessed through DFS? If a server doesn't
have it's DFS Client service running it can't access a DC's SYSVOL
share. I've run into that recently at work. Or do you mean something
else?
Brandon McCombs
2008-07-18 00:38:26 UTC
Permalink
Post by unknown
Hello Brandon,
"Old" style relies still on FRS.
SYSVOL Replication with DFS-R
OK, you are talking about SYSVOL replication between DCs and I thought
initially you were referring to just normal access to SYSVOL by member
servers. Sorry.
Post by unknown
Windows Server 2003 R2 featured a revamped Distributed File Service
(DFS) that incorporated a brand-new file replication mechanism called
DFS-R. It uses remote differential compression, which substantially
reduces file replication traffic by determining which blocks of a target
file need to be replicated to bring it into sync with the source file.
However, Windows Server 2003 R2 still uses File Replication Service (not
DFS-R) to replicate SYSVOL between domain controllers. Because of this,
SYSVOL replication continued to be a source of problems for Active
Directory administrators.
When running at the Windows Server 2008 domain functional level, Windows
Server 2008 can replicate SYSVOL using DFS-R, improving the speed and
robustness of SYSVOL replication. And this makes it reasonable to place
large files in SYSVOL to make them available on all DCs. To use DFS-R
for SYSVOL, you must first migrate the old SYSVOL data to DFS-R using
Create the Active Directory objects required by DFS-R. Create the new
file structure for SYSVOL on each domain controller. Switch over all
domain controllers to use the new SYSVOL. Remove the old SYSVOL.
Depending on the size of your SYSVOL and the number of domain
controllers you have, this process may take a while, but the improved
performance and reliability make the effort well worth your while.
http://blogs.technet.com/notesfromthefield/archive/2008/04/27/upgrading-your-sysvol-to-dfs-r-replication.aspx
http://redmondmag.com/features/article.asp?editorialsid=2516
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Post by Brandon McCombs
Post by Jorge de Almeida Pinto [MVP - DS]
SYSVOL through DFSR
Isn't the SYSVOL already accessed through DFS? If a server doesn't
have it's DFS Client service running it can't access a DC's SYSVOL
share. I've run into that recently at work. Or do you mean something
else?
Jorge de Almeida Pinto [MVP - DS]
2008-07-16 21:35:00 UTC
Permalink
RODCs
Multiple Password and Account Lockout Policies (PSOs)
Auditing Improvements
IFM improvements
New possibilities in restoring objects
Owner Access Restriction
etc
etc
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Post by CLAX
is there any addtional improvements in AD 2008?
Continue reading on narkive:
Loading...