With this newly added feature, Active Directory can now be in one of three different
states at any given time: Started, Stopped, and Directory Services Restore Mode. When a
domain controller is in a Started state, it functions as any regular domain controller. In a
Stopped state, the Active Directory database (ntds.dit) goes offline, just as in DSRM, but it
also acts like a member server in that if other domain controllers are still available, you
can log on to the server with domain credentials. As a functional member server, you can
perform maintenance using software-based, remote-control solutions such as Terminal
Services. You should leave your server in a Stopped state only while you are performing
maintenance. Replication with domain controllers and authenticating domain users cannot
be performed by the server until it is returned to the Started state. In the last state,
Directory Services Restore Mode, the Active Directory database is offline and the server
goes into safe mode, in which other nonessential services are also not started. DSRM in
Windows Server 2008 is functionally equivalent to DSRM in Windows Server 2003.
133 Chapter 4: Active Directory Domain Services
Auditing Active Directory Domain Services
Auditing allows you to track access and changes to your Active Directory. This is nothing
new. Auditing has always been a part of Windows Server, but with Windows Server
2008, auditing has been enhanced.
Pages:
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179