Download How Active Directory Database Really Works

Survey
yes no Was this document useful for you?
   Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

page
1
page
2
page
3
page
4
page
5
page
6
page
7
page
8
page
9
page
10
page
11
page
12
page
13
page
14
page
15
page
16
page
17
page
18
page
19
page
20
page
21
page
22
page
23
page
24
page
25
page
26
page
27
page
28
page
29
page
30
page
31
page
32
page
33
page
34
page
35
page
36
page
37
page
38
page
39
page
40
page
41
page
42
page
43
page
44
page
45
page
46
page
47
page
48
page
49
page
50
page
51
page
52
Document related concepts
no text concepts found
Transcript 
Gold partner:
How Active Directory Database
Really Works
Michael Grafnetter
www.dsinternals.com
Generální partner:
Agenda
 AD Database Structure
– Tables
– Columns
– Links
– Indices
 Query Optimization
 DB Maintenance
Active Directory
Active Directory Architecture
Active Directory Data Store
Dsamain
Veeam Explorer for Active Directory
Esent Workbench
DEMO
Datatable
DNT
50
100
PDNT
RDN
objectClass
sAMAccountName
unicodePwd
isDeleted
10 contoso
domain
false
50 Employees
ou
false
101
100 Bob
user
bob
2c4871c894…
false
102
100 John
user
john
d70c62e716…
false
200
201
50 Computers
200 PC01
container
computer
false
PC01$
8bc50a4045…
false
Partitions
Schema
DEMO
Security Descriptors
DEMO
Linked Multivalued Attributes
Linked Multivalued Attributes
DEMO
Phantom Objects
Hidden Table






DC Object Link
DC OS Version
Highest Commited USN
Epoch
Last Backu USN
...
DEMO
Query Optimization
Query Performance Matters
DEMO
Creating a Large AD Database
Creating a Large AD Database
Active Directory Index Types




Attribute Index
Containerized Index (PDNT+Attribute)
Tuple Index
Subtree Index (Virtual List View Support)
Tuple Index
"Active Dir"
"ctive Dire"
"tive Direc"
"ive Direct"
"ve Directo"
"e Director"
" Directory"
"Directory"
"irectory"
"rectory"
"ectory"
"ctory"
"tory"
"ory"
SearchFlags Attribute
Indexed Attributes
ANR Queries
DEMO
Active Directory Diagnostics
Active Directory Diagnostics
DEMO
Enabling Diagnostic Events
 Expensive queries: Visit too many objects
 Inefficient queries: return less than 10% of visited objects
 HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics
– 15 Field Engineering = 5 (Default = 0)
 HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
– Expensive Search Results Threshold = 10 000
– Inefficient Search Results Threshold = 1 000
Inefficient Query Event
DEMO
LDAP Search Statistics Control
DEMO
Deferred Index Creation (2012+)
Database Maintenance
IFM Backup
Space Usage
Index-Attribute Mapping
DEMO
Highest DNT (2012+)
Database Integrity Checks
 Header – DB file staus
 Checkpoint – Checkpoint file status




Checksum – Page checksum test
Recover – Copy commited transactions from log to DB
Integrity – Binary level checks
Semantic Database Analysis – Indexes, Security
Descriptors, Links,…
DEMO
Database Epoch
DEMO
Gold partner:
How Active Directory Database
Really Works
Michael Grafnetter
www.dsinternals.com
Generální partner:
Related documents