Deploy and Manage Domain Controllers Part 3

Introduction

The Deploy and Manage Domain Controllers Part 3 module provides you with the instruction and server hardware to develop your hands on skills in the defined topics. This module includes the following exercises:

• Configure Global Catalog Server
• Manage DNS Server SRV Records

Lab Time: It will take approximately 1 hour to complete the exercises in this lab.

Exam Objectives

• Resolve DNS SRV record registration issues
• Configure a global catalog server

Exercise 1 - Configure a Global Catalog Server

Global catalog (GC) server is a Windows domain controller that hosts a searchable, partial attributes of Active Directory objects in every domain in a multi-domain AD DS forest. When a user searches for an AD object, it is directed to the nearest global catalog server instead of making referrals to other domain controllers found in another domain in the forest.

The deployment of global catalog server in the network provides the following benefits:

• Helps in securing fast forest-wide searches for AD objects found in other domains.
• Users can sign-in to the domain using their respective user principal name (UPN) which is similar to an e-mail address.
• Resolve names in the Exchange Server address book when looking up for a recipient when composing an e-mail message.

Exercise 2 - Manage DNS SRV Records

The Service Location Records (SRV) are resource records automatically created in DNS server when a new domain controller is created in a Windows Active Directory domain. SRV records contain information about the network services offered by domain controllers:

Kerberos for authentication of network users who sign-on to Active Directory.

Global Catalog (GC) server sometimes called as Microsoft LDAP is a repository of Active Directory data that includes information about searchable, partial attributes of Active Directory objects in every domain in a multi-domain AD DS forest. GC server is used when an AD user attempts to sign-in to the home domain using User Principal Name or UPN as illustrated in the previous exercise.

Lightweight Directory Access Protocol (LDAP) is an application protocol for accessing and searching and modifying directory services such as Active Directory.