{"id":659,"date":"2017-03-13T22:46:54","date_gmt":"2017-03-13T18:46:54","guid":{"rendered":"http:\/\/yusif.az\/main\/?p=659"},"modified":"2017-03-13T22:46:54","modified_gmt":"2017-03-13T18:46:54","slug":"active-directory-haqqinda","status":"publish","type":"post","link":"https:\/\/yusif.az\/main\/?p=659","title":{"rendered":"Active Directory Haqq\u0131nda"},"content":{"rendered":"
\n

\u00a0Active Directory n\u0259dir?<\/strong><\/p>\n

Active Directory Windows Server\u00a0 a\u011flar\u0131ndaki bir kataloq xidm\u0259tidir. Dizin xidm\u0259ti, \u015f\u0259b\u0259k\u0259d\u0259ki qaynaqlar\u0131n m\u0259lumat\u0131n\u0131 tutan v\u0259 bu m\u0259lumat\u0131 istifad\u0259\u00e7il\u0259r\u0259 v\u0259 t\u0259tbiql\u0259r\u0259 t\u0259qdim ed\u0259n \u015f\u0259b\u0259k\u0259 xidm\u0259tidir. Dizin xidm\u0259ti \u015f\u0259b\u0259k\u0259 qaynaqlar\u0131na \u00e7atmaq, bu qaynaqlar\u0131 adland\u0131rmaq v\u0259 etibarl\u0131 bir \u015f\u0259kild\u0259 idar\u0259 etm\u0259k \u00fc\u00e7\u00fcn laz\u0131m olan m\u00fchiti t\u0259min etm\u0259k m\u0259qs\u0259di il\u0259 yarad\u0131lm\u0131\u015fd\u0131r.
\nActive Directory m\u00fchitd\u0259ki \u015f\u0259b\u0259k\u0259 infrastrukturuna b\u00f6y\u00fck \u00f6l\u00e7\u00fcd\u0259 funksionall\u0131q qazand\u0131rmaqdad\u0131r.<\/p>\n

X\u00fcsusil\u0259 qaynaqlar\u0131n idar\u0259sinin v\u0259 r\u0259hb\u0259rliyinin merkezile\u015ftirilmesi Active Directory t\u0259\u015fkilat\u0131n\u0131n \u0259n \u0259h\u0259miyy\u0259tli x\u00fcsusiyy\u0259tidir. Active Directory, fiziki topologiya \u00fcz\u0259rin\u0259 s\u00f6yk\u0259n\u0259n bir sistemin istifad\u0259\u00e7iy\u0259 daha m\u0259tbuat sad\u0259l\u0259\u015fdirilmi\u015f \u015f\u0259kild\u0259 g\u00f6r\u00fcnm\u0259sini v\u0259 qaynaqlara giri\u015f \u0259snas\u0131nda istifad\u0259\u00e7inin \u00e7atd\u0131\u011f\u0131 qayna\u011f\u0131n (m\u0259s\u0259l\u0259n printer) \u015f\u0259b\u0259k\u0259nin haras\u0131nda oldu\u011funu v\u0259 ya qayna\u011f\u0131n a\u011fa n\u0259 \u015f\u0259kild\u0259 ba\u011flanm\u0131\u015f oldu\u011funu bilm\u0259d\u0259n ba\u011flanmas\u0131n\u0131 t\u0259min ed\u0259r.
\nActive Directory \u00e7ox b\u00f6y\u00fck i\u015fl\u0259tm\u0259l\u0259rd\u0259ki s\u0131x m\u0259lumatlar\u0131 alt k\u00fcmelere b\u00f6l\u0259r\u0259k saxlaya v\u0259 bel\u0259c\u0259 m\u0259lumatlar\u0131n b\u00f6y\u00fcm\u0259si v\u0259 ya ki\u00e7ilm\u0259si v\u0259ziyy\u0259tind\u0259, y\u0259ni \u015firk\u0259tin b\u00f6y\u00fcm\u0259si v\u0259 ya ki\u00e7ilm\u0259si v\u0259ziyy\u0259tind\u0259 sistem\u00f6e elastiklik qazand\u0131rar.
\nActive Directory hey\u0259ti bir Windows Server 2003 \u015f\u0259b\u0259k\u0259 s\u0259viyy\u0259sind\u0259 sistem konfig\u00fcrasyonlar\u0131n\u0131, istifad\u0259\u00e7i profill\u0259rin\u0259 v\u0259 \u0259riz\u0259 m\u0259lumatlar\u0131n\u0131 Active Directory bazas\u0131nda saxlayar. Active Directory sistem idar\u0259\u00e7il\u0259rinin, domain \u00fczr\u0259 b\u00fct\u00fcn komp\u00fcterl\u0259rd\u0259 desktop x\u00fcsusiyy\u0259tl\u0259rini, \u015f\u0259b\u0259k\u0259 xidm\u0259tl\u0259rini v\u0259 t\u0259tbiql\u0259ri m\u0259rk\u0259zi bir n\u00f6qt\u0259d\u0259n y\u00f6netebilmelerini t\u0259min ed\u0259r.
\nActive Directory ayr\u0131ca, istifad\u0259\u00e7il\u0259rin sistem\u0259 bir d\u0259f\u0259 daxil olmas\u0131n\u0131, y\u0259ni logon olmas\u0131n\u0131 v\u0259 sonra \u015f\u0259b\u0259k\u0259d\u0259ki bir \u00e7ox qayna\u011fa t\u0259k bir logonla etibarl\u0131 bir \u015f\u0259kild\u0259 \u00e7ata bilm\u0259si m\u00f6vzusunda da sistem r\u0259hb\u0259rl\u0259rin\u0259 m\u0259rk\u0259zi giri\u015f n\u0259zar\u0259t edir.
\n
\nActive Directory Objeleri
\n<\/strong>
\nActive Directory, bazas\u0131nda \u015f\u0259b\u0259k\u0259 obyektl\u0259ri haqq\u0131ndak\u0131 m\u0259lumatlar\u0131 saxlayar. Bu Active Directory obyektl\u0259ri ba\u015fda istifad\u0259\u00e7il\u0259r, qruplar, komp\u00fcterl\u0259r, printerl\u0259r olmaq \u00fczr\u0259 \u015f\u0259b\u0259k\u0259 qaynaqlar\u0131n\u0131 t\u0259msil edir. Bundan \u0259lav\u0259, Active Directory s\u0259viyy\u0259sind\u0259ki b\u00fct\u00fcn serverl\u0259r, domain v\u0259 Site’lar da Active Directory obyektl\u0259ri aras\u0131nda i\u015ftirak etm\u0259kd\u0259dir. Active Directory b\u00fct\u00fcn obyektl\u0259ri paylanm\u0131\u015f bir veril\u0259nl\u0259r bazas\u0131 \u00fcz\u0259rind\u0259 saxlad\u0131\u011f\u0131 \u00fc\u00e7\u00fcn sistem y\u00f6nticisi bu obyektl\u0259rin r\u0259hb\u0259rliyi asanl\u0131qla t\u0259k bir n\u00f6qt\u0259d\u0259n icra ed\u0259 bil\u0259r.
\nYeni bir obyekt yarad\u0131ld\u0131\u011f\u0131 zaman bu obyektin x\u00fcsusiyy\u0259tl\u0259ri (attribute) obyekt haqq\u0131nda onu t\u0259yin ed\u0259n m\u0259lumatlar daxildir. \u0130stifad\u0259\u00e7il\u0259r bu obyekt\u0259 daxil ist\u0259diyi zaman obyekt\u0259 t\u0259yin olunmu\u015f bu x\u00fcsusiyy\u0259tl\u0259rd\u0259n faydalana. M\u0259s\u0259l\u0259n, bir istifad\u0259\u00e7i domain i\u00e7\u0259risind\u0259 bir printer\u0259 ula\u015f\u0131yorken yaz\u0131c\u0131n\u0131n yer (qat, bina, m\u00fc\u0259ssis\u0259) g\u00f6r\u0259 axtar\u0131\u015f ed\u0259 bil\u0259r.
\nActive Directory’nin M\u0259ntiqi Qurulu\u015fu
\nActive Directory’nin m\u0259ntiqi qurulu\u015fu, elastikliyinin yan\u0131nda Active Directory i\u00e7\u0259risind\u0259 istifad\u0259\u00e7i v\u0259 idar\u0259\u00e7i daxilind\u0259 iyerarxik bir qurulu\u015f yarad\u0131lmas\u0131na imkan verir.
\n
\nS\u00f6z m\u00f6vzusu m\u0259ntiqi komponentl\u0259r
\n<\/strong>
\nA. Domain
\nB. Organizational unit
\nC. Tree and forest
\nD. Global catalog
\nActive Directory’nin qura\u015fd\u0131r\u0131lmas\u0131, konfiqurasiya, r\u0259hb\u0259rliyi v\u0259 probleml\u0259rinin h\u0259lli \u00fc\u00e7\u00fcn, m\u0259ntiqi qurulu\u015funun \u0259hat\u0259 v\u0259 funksiyalar\u0131n\u0131n ba\u015fa d\u00fc\u015f\u00fclm\u0259si vacibdir.
\n
\nDomain<\/p>\n

<\/strong>Active Directory \u0259n t\u0259m\u0259l m\u0259ntiqi komponent domain’in. Domain, eyni kataloqu bazan\u0131 payla\u015fan komp\u00fcterl\u0259r b\u00fct\u00fcn\u00fcd\u00fcr v\u0259 sistem idar\u0259\u00e7isi t\u0259r\u0259find\u0259n yarad\u0131lm\u0131\u015fd\u0131r. H\u0259r bir Domain unikal bir ada malikdir v\u0259 sistem idar\u0259\u00e7isi t\u0259r\u0259find\u0259n m\u00fc\u0259yy\u0259nl\u0259\u015fdirilmi\u015f olan istifad\u0259\u00e7i v\u0259 qrup hesablar\u0131na daxil olmaq imkan\u0131 verir.
\nAyr\u0131ca domain’in t\u0259hl\u00fck\u0259sizlik s\u0259rh\u0259di (Security Boundary) olaraq da bilin\u0259r. T\u0259hl\u00fck\u0259sizlik s\u0259rh\u0259di say\u0259sind\u0259, \u0259g\u0259r sistem idar\u0259\u00e7isi ayr\u0131ca bir icaz\u0259 belirlememi\u015fse, bir istifad\u0259\u00e7inin h\u00fcquqlar yaln\u0131z o Domain i\u00e7\u0259risind\u0259 etibarl\u0131 olacaq. H\u0259r bir Domain \u00f6z t\u0259hl\u00fck\u0259sizlik qurulu\u015funa malikdir.
\nDomain ayr\u0131ca replikasyon vahidi olaraq adland\u0131r\u0131lar. Bir Domain i\u00e7\u0259risind\u0259, Active Directory bazas\u0131 sur\u0259tl\u0259rini saxlayan Domain Controller’lar bu koyalar\u0131 Domain i\u00e7\u0259risind\u0259 edil\u0259n d\u0259yi\u015fiklikl\u0259ri bir-birl\u0259rin\u0259 kopyalarak replikasyon ed\u0259rl\u0259r.
\n
\nOrganizational Units
\n<\/strong>
\nOrganizational Unit bir Domain i\u00e7\u0259risind\u0259ki obyektl\u0259ri t\u0259\u015fkil etm\u0259k m\u0259qs\u0259di il\u0259 yarad\u0131lm\u0131\u015f objelerdir. Bir Organizational Unit \u00f6z i\u00e7\u0259risind\u0259 istifad\u0259\u00e7il\u0259r, qruplar, komp\u00fcterl\u0259r v\u0259 ya ba\u015fqa OU’lar olmaq \u00fczr\u0259 ba\u015fqa obyektl\u0259r yerl\u0259\u015fdirm\u0259k olar.
\nOU’lar\u0131, t\u0259\u015fkilat\u0131n ehtiyac\u0131n\u0131 \u0259n yax\u015f\u0131 \u015f\u0259kild\u0259 qar\u015f\u0131layacaq m\u0259ntiqi bir iyerarxiya olu\u015ftu ruyorken obyektl\u0259ri qrupla\u015fd\u0131rmaq m\u0259qs\u0259diyl\u0259 istifad\u0259 ed\u0259 bil\u0259rsiniz.
\nM\u0259s\u0259l\u0259n, obyektl\u0259ri grupluyorken idar\u0259etm\u0259 t\u0259l\u0259bl\u0259ri \u00f6n planda saxlaya bil\u0259rsiniz. M\u0259s\u0259l\u0259n, t\u0259\u015fkilatda bir idar\u0259\u00e7i istifad\u0259\u00e7il\u0259rd\u0259 bir dig\u0259r istifad\u0259\u00e7i da komp\u00fcterl\u0259rd\u0259n m\u0259sul olacaqsa, biri istifad\u0259\u00e7il\u0259r \u00fc\u00e7\u00fcn biri d\u0259 komp\u00fcterl\u0259r \u00fc\u00e7\u00fcn iki \u0259d\u0259d OU yarad\u0131l\u0131r v\u0259 istifad\u0259\u00e7il\u0259r birind\u0259 komp\u00fcterl\u0259r da dig\u0259r toplan\u0131r. Son olaraq da ikisini d\u0259 \u0259laq\u0259dar istifad\u0259\u00e7i idar\u0259\u00e7i olaraq t\u0259yin oluna bil\u0259r.
\nOU vahidl\u0259rinin istifad\u0259 edil\u0259 bir ba\u015fqa n\u00fcmun\u0259 is\u0259 t\u0259\u015fkilat\u0131n departmansal vahidl\u0259r\u0259 ayr\u0131lmas\u0131nda etibarl\u0131 ola bil\u0259r. M\u0259s\u0259l\u0259n bir “M\u00fchasibat” bir d\u0259 “Marketinq” \u015f\u00f6b\u0259l\u0259ri \u00fc\u00e7\u00fcn OU yarad\u0131l\u0131r v\u0259 bu departmanlarda \u00e7al\u0131\u015fan istifad\u0259\u00e7il\u0259r \u0259laq\u0259dar Oulara yerl\u0259\u015fdirildikd\u0259n sonra departament \u015fefl\u0259ri bu vahidl\u0259r\u0259 idar\u0259\u00e7i olaraq t\u0259yin oluna bil\u0259r.
\n
\nTrees v\u0259 Forests<\/strong><\/p>\n

Yarad\u0131lan ilk Windows Server 2003 Domain, Active Directory qurulu\u015fundak\u0131 K\u00f6k Domain (Root Domain) ifad\u0259 ed\u0259r. Bundan sonra yarad\u0131lacaq olan yeni \u0259lav\u0259 domain’in serial\u0131n m\u0259ntiqi Tree v\u0259 ya Forest qurulu\u015funu meydana g\u0259tir\u0259c\u0259k.
\n
\nTree<\/strong><\/p>\n

Bir-birin\u0259 ard\u0131c\u0131l bir ad aral\u0131\u011f\u0131n\u0131 payla\u015fan Windows Server 2003 Domain’lerinin iyerarxik olaraq t\u0259\u015fkil \u015feklidir.\u00d6nceden yarad\u0131lm\u0131\u015f bir Tree qurulu\u015funda yeni bir Domain \u0259lav\u0259 etdiyiniz zaman, yeni \u0259lav\u0259 olunan Domain sondan \u0259lav\u0259 olundu\u011fu Domain’inin Child Domain v\u0259ziyy\u0259tind\u0259 olur v\u0259 \u0259lav\u0259 olundu\u011fu Domain d\u0259 \u0259lav\u0259 Domain \u00fc\u00e7\u00fcn Parent domain olur. Yeni yarad\u0131lan Child domain’in ad\u0131 Parent domain’in g\u0259l\u0259n adla birl\u0259\u015fdirilir v\u0259 yeni yaranan domain’in DNS ad\u0131 ortaya \u00e7\u0131xar.
\nM\u0259s\u0259l\u0259n bakicubuk.com bir Root domain’in. Bu domain \u0259lav\u0259 olunacaq yeni bir Domain baki.com Domain’inin Child Domain olacaq, buna n\u00fcmun\u0259 olaraq it.baki.com Domain’ini g\u00f6st\u0259r\u0259 bil\u0259rik. Bu n\u00fcmun\u0259d\u0259 it.baki.com, baki.com Domain’inin Child Domain olacaq. baki.com Domain is\u0259 Parent Domain m\u00f6vqesind\u0259dir.
\nforests
\nForest, bird\u0259n \u00e7ox Tree’nin birl\u0259\u015fmi\u015f hal\u0131d\u0131r. Forest i\u00e7\u0259risind\u0259ki Tree’ler ard\u0131c\u0131l ad aral\u0131\u011f\u0131na sahib deyildirl\u0259r. Yara d\u0131lan ilk Domain bir Tree’yi ifad\u0259 ed\u0259c\u0259k v\u0259 ilk Tree’nin olu\u015fturulmas\u0131yla Forest’da meydana g\u0259lmi\u015f olacaq. Sonradan bu Forest’a \u0259lav\u0259 olunacaq olan Tree’ler, dig\u0259r Tree’lerle eyni ad aral\u0131\u011f\u0131n\u0131 payla\u015fmayacak olasalar da eyni Schema v\u0259 Global Catalog’a sahib olacaq. Forest yarad\u0131lark\u0259n qurulmu\u015f olan ilk Tree Forest-Root olaraq bilinir v\u0259 dig\u0259r Tree’ler bu Forest Root alt\u0131nda toplan\u0131rlar.
\n
\nGlobal Catalog<\/strong><\/p>\n

Global Catalog, Active Directory’deki b\u00fct\u00fcn obyektl\u0259rin x\u00fcsusiyy\u0259tl\u0259rinin bir alt hinini da\u015f\u0131yan m\u0259lumat anbar\u0131d\u0131r. Bu bar\u0131nd\u0131r\u0131lan x\u00fcsusiyy\u0259tl\u0259r, ismar\u0131clar\u0131, sor\u011fulamalar \u0259snas\u0131nda \u0259n s\u0131x istifad\u0259 edil\u0259n x\u00fcsusiyy\u0259tl\u0259rdir (m\u0259s\u0259l\u0259n istifad\u0259\u00e7i \u00f6n ad\u0131, son ad\u0131 v\u0259 logon ad\u0131). Global Catalog istifad\u0259\u00e7il\u0259r\u0259 bu xidm\u0259tl\u0259ri t\u0259klif edir:
\n\u2022 Laz\u0131m olan m\u0259lumat\u0131n harada oldu\u011fundan m\u00fcst\u0259qil olaraq Active Directory obyektl\u0259ri haqq\u0131nda m\u0259lumatlar t\u0259qdim edir.
\n\u2022 Bir a\u011fa logon \u00f6l\u00fcyorken Universal Group Membership m\u0259lumat\u0131n\u0131 istifad\u0259.
\nGlobal Catalog Serveri Domain’deki bir Domain Controller’d\u0131r v\u0259 domain’in yarad\u0131lan ilk Domain Controller avtomatik olaraq Global Catalog s\u0259viyy\u0259sin\u0259 y\u00fcks\u0259ldil\u0259r. Sonradan \u0259lav\u0259 Global Catalog Serverl\u0259r \u0259lav\u0259 oluna bil\u0259r.
\n
\nActive Directory Schema
\n<\/strong>
\nActive Directory Schema: \u0130stifad\u0259\u00e7i, qrup, komp\u00fcter v\u0259 printerl\u0259r kimi b\u00fct\u00fcn objelere aid m\u0259lumatlar\u0131 daxildir. Windows 2000 v\u0259 sonras\u0131nda b\u00fct\u00fcn Network qurulu\u015funuz (forest) i\u00e7\u0259risind\u0259, yaln\u0131z bir Schema tap\u0131lar v\u0259 b\u00fct\u00fcn obyekt m\u0259lumatlar\u0131 Schema \u00fcz\u0259rin\u0259 yaz\u0131l\u0131r.
\nSchema qurulu\u015funda, obyekt sinifi v\u0259 x\u00fcsusiyy\u0259ti t\u0259yin oluna bil\u0259r.
\nObyekt sinifi: Komp\u00fcter, istifad\u0259\u00e7i v\u0259 ya yaz\u0131\u00e7\u0131 ola bil\u0259r. X\u00fcsusiyy\u0259t: Schema i\u00e7ind\u0259 bir
\nd\u0259f\u0259 tan\u0131mland\u0131ktan sonra, axtar\u0131\u015f (search) \u0259m\u0259liyyatlar\u0131nda istifad\u0259 edil\u0259 bil\u0259r.
\nM\u0259s\u0259l\u0259n: \u0130stifad\u0259\u00e7il\u0259rin \u00e7al\u0131\u015fd\u0131qlar\u0131 hiss\u0259l\u0259r, do\u011fum yeri kimi.
\nSchema m\u0259lumatlar\u0131: Active Directory veril\u0259nl\u0259r bazas\u0131 (database) i\u00e7\u0259risind\u0259 saxlan\u0131l\u0131r.
\nBa\u015fqa il\u0259
\n\u2022 \u0130stifad\u0259\u00e7i t\u0259tbiql\u0259ri \u00fc\u00e7\u00fcn dinamik bir qurulu\u015f t\u0259qdim edir. \u0130stifad\u0259\u00e7il\u0259rin obyekt ara\u015fd\u0131rma \u0259m\u0259liyyatlar\u0131, Sc hema \u00fcz\u0259rind\u0259n realla\u015far.
\n\u2022 Yeni yarad\u0131lan v\u0259 ya d\u0259yi\u015fdiril\u0259n obyekt dinamik olaraq Schema i\u00e7\u0259risind\u0259
\nyenil\u0259nir.
\n\u2022 Obyektin sinif v\u0259 x\u00fcsusiyy\u0259tl\u0259rinin qorunmas\u0131nda, discretionary access control
\nlists (DACLs) istifad\u0259 edilir. DACLs il\u0259 Schema m\u0259lumatlar\u0131 \u00fcz\u0259rind\u0259 yaln\u0131z
\ns\u0259lahiyy\u0259tli istifad\u0259\u00e7il\u0259rin (authorized users) d\u0259yi\u015fiklik ed\u0259 bilm\u0259si
\nt\u0259min edil\u0259r.
\n
\nLightweight Directory Access Protocol (LDAP)
\n<\/strong>
\nLDAP: Active Directory qurulu\u015fu i\u00e7\u0259risind\u0259 sor\u011fulama (query) v\u0259 yenil\u0259m\u0259 (update) \u00fc\u00e7\u00fcn istifad\u0259, t\u0259m\u0259l bir directory xidm\u0259t protokoludur. LDAP il\u0259 Active Directory obyektl\u0259ri bir s\u0131ra domain kompenenti, Ous (Organizational Units) v\u0259 CN (Common Name) istifad\u0259 edil\u0259r\u0259k, Active Directory i\u00e7\u0259risind\u0259 yenid\u0259n t\u0259yin olunar. LDAP adland\u0131rma metoddan; Active Directory obyektl\u0259rind\u0259n eri\u015fimde istifad\u0259 v\u0259 iki t\u0259rif daxildir;
\n* Distinguished Names
\n* Relative Distinguished Names
\nDistinguished names: B\u00fct\u00fcn Active Directory obyektl\u0259ri, Network m\u00fchitind\u0259
\n\u00f6zl\u0259rin\u0259 \u00e7at\u0131lmas\u0131n\u0131 t\u0259min ed\u0259n b\u00fct\u00f6v path ehtiva ed\u0259n, distinguished name’e
\nmalikdir.
\nM\u0259s\u0259l\u0259n;
\nCN = Gokhan varol, OU = Marketinq, DC = MCSE, DC = com
\nBurada istifad\u0259 CN = Common Name OU = Organizational Unit DC = Domain Controller m\u0259nas\u0131ndad\u0131r.
\nCN: Qrup v\u0259 istifad\u0259\u00e7i adlar\u0131 tan\u0131mlamalar\u0131nda istifad\u0259
\nOU: Organization Units tan\u0131mlamalar\u0131nda istifad\u0259 edil\u0259r.
\nDC: Domain iyerarxiyas\u0131na t\u0259yin ed\u0259r. B\u00fct\u00fcn DNS ax\u0131\u015f\u0131 t\u0259k t\u0259k yaz\u0131l\u0131r. M\u0259s\u0259l\u0259n: Domain ad\u0131 gokhanvarol.net is\u0259, DC = gokhanvarol, DC_net \u015f\u0259klind\u0259 g\u00f6st\u0259rilir.
\nBa\u015fqa bir n\u00fcmun\u0259 ver\u0259k;
\n“S\u0131naq” adl\u0131 istifad\u0259\u00e7i, “r\u0259hb\u0259rlik” adl\u0131 Organizal Units i\u00e7ind\u0259 olsun v\u0259 ba\u011fl\u0131 oldu\u011fu Domain ad\u0131 “gokhanvarol.net” olsun.
\nBunun Distingushed Name proqram\u0131 a\u015fa\u011f\u0131dak\u0131 \u015f\u0259kild\u0259 olacaq: CN = s\u0131naq, OU = r\u0259hb\u0259rlik, DC = gokhanvarol, DC = d\u0259qiq Relative Distinguished Name: LDAP distinguished name i\u00e7\u0259risind\u0259 yer al\u0131r v\u0259 obyekt\u0259 aid b\u0259nz\u0259rsiz (unique) t\u0259yin \u0259hat\u0259 edir. Y\u0259ni, bu Active Directory i\u00e7ind\u0259 ifad\u0259 edil\u0259n Domain i\u00e7ind\u0259 t\u0259kdir.<\/p>\n

Active Directory’nin Fiziki Qurulu\u015fu<\/p>\n

Active Directory i\u00e7ind\u0259 m\u0259ntiqi qurulu\u015f, fiziki qurulu\u015fdan m\u00fcst\u0259qil v\u0259 f\u0259rqli bir qurulu\u015fa malikdir. M\u0259ntiqi qurulu\u015f il\u0259 Network qaynaqlar\u0131n\u0131 t\u0259\u015fkil ed\u0259rk\u0259n, fiziki qurulu\u015f il\u0259 Network trafikini idar\u0259 v\u0259 konfiqurasiya ed\u0259 bil\u0259rsiniz.
\nActive Directory’nin fiziki qurulu\u015funu; DC (Domain Controller) v\u0259 Siteler meydana g\u0259tir\u0259r. Active Directory’nin fiziki qurulu\u015fu, replikasyonun yer v\u0259 zaman\u0131 il\u0259 networklara i\u015ftirak\u0131n\u0131 (logon) m\u00fc\u0259yy\u0259n edir. Network trafiki il\u0259 logon \u0259m\u0259liyyatlar\u0131n\u0131n optimalla\u015fd\u0131r\u0131lmas\u0131 v\u0259 bu \u0259m\u0259liyyatlarda ola bil\u0259c\u0259k s\u0259hvl\u0259rin aradan qald\u0131r\u0131lmas\u0131, fiziki qurulu\u015fun ba\u015fa d\u00fc\u015f\u00fclm\u0259sin\u0259 ba\u011fl\u0131d\u0131r.<\/p>\n

Domain Controllers<\/strong><\/p>\n

Domain Controller, \u00fcz\u0259rind\u0259 Active Directory bazan\u0131n bir kopiyas\u0131n\u0131 (replica) saxlayan bilgisayard\u0131r.Domain’de ger\u015fekle\u015ftirilen h\u0259r hans\u0131 bir d\u0259yi\u015fiklik bir Domain Controller \u00fcz\u0259rind\u0259 h\u0259yata ke\u00e7irilir v\u0259 daha sonra domain’deki b\u00fct\u00fcn Domain Controller’lar bu d\u0259yi\u015fiklikl\u0259ri replikasyon yolu il\u0259 bir-birl\u0259rin\u0259 kopyalarlar. Domain Controller’lar kataloqu m\u0259lumat\u0131n\u0131 saxlayarlar v\u0259 istifad\u0259\u00e7il\u0259rin logon \u0259m\u0259liyyatlar\u0131n\u0131, identifikasiyas\u0131 \u0259m\u0259liyyatlar\u0131n\u0131 v\u0259 dizin axtar\u0131\u015f \u0259m\u0259liyyatlar\u0131n\u0131 icra ed\u0259rl\u0259r.
\nBir domain-bir v\u0259 ya daha \u00e7ox Domain Controller ola bil\u0259r. Ki\u00e7ik diametrd\u0259 bir t\u0259\u015fkilata (LAN) bir Domain v\u0259 iki Domain Controller yetecekken f\u0259rqli fiziki lokasyonlara yay\u0131lm\u0131\u015f b\u00f6y\u00fck bir m\u00fc\u0259ssis\u0259 \u00fc\u00e7\u00fcn (WAN), h\u0259r bir b\u00f6lg\u0259 ba\u015f\u0131na bir v\u0259 ya iki Domain Controller daha uy\u011fun olacaq. Bir domain bird\u0259n \u00e7ox Domain Controller yerl\u0259\u015fdirm\u0259nin m\u0259qs\u0259di h\u0259m s\u0259hv d\u00f6z\u00fcml\u00fcl\u00fcy\u00fc t\u0259min etm\u0259k h\u0259m d\u0259 Domain Controller’lar aras\u0131nda y\u00fck da\u011f\u0131l\u0131m\u0131 etm\u0259kdir.
\n
\nSites<\/strong><\/p>\n

Bir Site, bir-birl\u0259rin\u0259 y\u00fcks\u0259k bant geni\u015fliyin\u0259 sahib xarici hatlarlar ba\u011flanm\u0131\u015f bir v\u0259 ya bird\u0259n \u00e7ox IP (Internet Protocol) alt \u015f\u0259b\u0259k\u0259l\u0259rini ifad\u0259 etm\u0259kd\u0259dir. Site’lar\u0131 do\u011fru bir \u015f\u0259kild\u0259 yap\u0131land\u0131rarak istifad\u0259\u00e7il\u0259rin logon \u0259m\u0259liyyatlar\u0131nda ibar\u0259t \u015f\u0259b\u0259k\u0259 trafikini v\u0259 replikasyon \u0259m\u0259liyyatlar\u0131 \u0259snas\u0131nda ibar\u0259t olan s\u0131xl\u0131\u011f\u0131 azaltmaq \u00fc\u00e7\u00fcn Active Di rectory’nin alt a\u011flar aras\u0131ndak\u0131 fiziki \u0259laq\u0259l\u0259ri \u0259n effektiv \u015f\u0259kild\u0259 istifad\u0259 t\u0259min ed\u0259 bil\u0259rik.
\nSayt\u0131n olu\u015fturmaktaki ba\u015fl\u0131ca s\u0259b\u0259bl\u0259r bunlard\u0131r:
\n\u2022 Replikasyon trafikinin optimize edilm\u0259si
\n\u2022 \u0130stifad\u0259\u00e7il\u0259rin logon olmas\u0131 \u0259snas\u0131nda \u0259n s\u00fcr\u0259tli v\u0259 \u0259n etibarl\u0131 \u0259laq\u0259ni istifad\u0259 ed\u0259r\u0259k do\u011fru Domain Controller’\u0131 tapa
\n
\nActive Directory v\u0259 DNS<\/strong><\/p>\n

Active Directory v\u0259 DNS inteqrasiyas\u0131 Windows Server 2003 Sisteminin \u0259n \u0259h\u0259miyy\u0259tli x\u00fcsusiyy\u0259tl\u0259rind\u0259n biridir. Active Directory v\u0259 DNS, obyektl\u0259rin h\u0259m Active Directory obyektl\u0259ri h\u0259m d\u0259 DNS domainleri v\u0259 qaynaq qeydl\u0259ri (Resource Records) olaraq sunulabilecek \u015f\u0259kild\u0259 b\u0259nz\u0259r bir hiyerar\u015fik adland\u0131rma qurulu\u015funa sahibdirl\u0259r. Bu inteqrasiyan\u0131n n\u0259tic\u0259si olaraq Windows Server 2003 \u015f\u0259b\u0259k\u0259sind\u0259ki komp\u00fcterl\u0259r, Active Directory’ye xas b\u0259zi xidm\u0259tl\u0259ri i\u015fl\u0259d\u0259n komp\u00fcterl\u0259rin yeri \u00f6yr\u0259nm\u0259k \u00fc\u00e7\u00fcn DNS Serverl\u0259r istifad\u0259 edirl\u0259r. M\u0259s\u0259l\u0259n, bir client Active Directory’ye logon olmaq v\u0259 ya h\u0259r hans\u0131 bir qayna\u011f\u0131 (printer v\u0259 ya payla\u015f\u0131lm\u0131\u015f bir qovluq) kataloqu i\u00e7\u0259risind\u0259 tapmaq \u00fc\u00e7\u00fcn bilm\u0259si laz\u0131m olan Domain Controller ‘IP \u00fcnvan\u0131n\u0131 DNS Server \u00fcz\u0259rind\u0259 SRV qeydl\u0259rind\u0259n \u00f6yr\u0259nm\u0259kd\u0259dir. Active Directory’nin problemsiz bir \u015f\u0259kild\u0259 \u00e7al\u0131\u015fmas\u0131 \u00fc\u00e7\u00fcn DNS serverl\u0259rin SRV qeydl\u0259rini \u0259skiksiz bir \u015f\u0259kild\u0259 saxlamas\u0131 laz\u0131md\u0131r. SRV qeydl\u0259rinin m\u0259qs\u0259di, client’lara logon \u0259snas\u0131nda v\u0259 ya h\u0259r hans\u0131 bir qayna\u011fa ula\u015f\u0131yorken Domain Controller’lar\u0131n yerl\u0259rini ifad\u0259 etm\u0259kdir v\u0259 bu qeydl\u0259r DNS serverl\u0259rd\u0259 tutulur. SRV qeydl\u0259rinin olmad\u0131\u011f\u0131 bir m\u00fchitd\u0259, client’lar domain’in logon ola bilm\u0259y\u0259c\u0259kl\u0259r.
\nAyr\u0131ca Windows Server 2003, DNS m\u0259lumatlar\u0131n\u0131n Active Directory bazas\u0131 il\u0259 inteqrasiya olaraq saxlanmas\u0131na imkan verir. Bu say\u0259d\u0259 DNS m\u0259lumatlar\u0131n\u0131n replikasyonu daha effektiv v\u0259 etibarl\u0131 bir hala g\u0259lm\u0259kd\u0259dir.
\nWindows Server 2003, Active Directory t\u0259\u015fkilat\u0131n\u0131 qurmadan, \u0259vv\u0259l yarad\u0131lacaq olan domain DNS infrastrukturunu \u0259vv\u0259ld\u0259n meydana g\u0259tirm\u0259yi t\u0259l\u0259b edir. \u018fg\u0259r yarad\u0131lacaq olan domain DNS infrastrukturu qura\u015fd\u0131rma \u0259vv\u0259lind\u0259n haz\u0131rlanmam\u0131\u015fsa, qura\u015fd\u0131r\u0131lma \u0259snas\u0131nda da DNS infrastrukturu qu rula bil\u0259r.
\n
\nWindows Server 2003 \u0130dar\u0259 Yollar\u0131<\/strong><\/p>\n

Windows \u0259m\u0259liyyat sistemi v\u0259 Active Directory qurulu\u015fu, t\u0259\u015fkilat i\u00e7\u0259risind\u0259ki b\u00fct\u00fcn komp\u00fcterl\u0259rin masa\u00fcst\u00fc y\u00f6netimininin merkezile\u015ftirmesinde istifad\u0259 method v\u0259 \u00fcsullar\u0131 Administrator’a t\u0259qdim edir. Administrator’u Network m\u00fchitind\u0259ki idar\u0259etm\u0259 funksiyas\u0131:
\nM\u0259rk\u0259zi r\u0259hb\u0259rlik: \u00c7ox sayda istifad\u0259\u00e7i, komp\u00fcter, printer v\u0259 Network qaynaqlar\u0131n\u0131n; m\u0259rk\u0259zi bir lokasyonda idar\u0259 edilm\u0259si. \u0130stifad\u0259 t\u0259l\u0259bl\u0259r\u0259 \u0259sas\u0259n, Network qaynaqlar\u0131n\u0131n m\u0259rk\u0259zi olaraq istifad\u0259\u00e7il\u0259r\u0259 t\u0259qdim t\u0259min olunur.
\n\u0130stifad\u0259\u00e7il\u0259rin r\u0259hb\u0259rliyi: Active Directory i\u00e7\u0259risind\u0259 t\u0259\u015fkilat vahidl\u0259rin\u0259 uygulan\u0131labilen Group Policy ayarlar\u0131 il\u0259 t\u0259sirli bir istifad\u0259\u00e7i n\u0259zar\u0259ti t\u0259min edil\u0259r. \u018fvv\u0259lc\u0259 istifad\u0259\u00e7i v\u0259 ya komp\u00fcter \u00fc\u00e7\u00fcn; Group Policy ayarla edilir, daha sonra s\u00f6z m\u00f6vzusu ayarlar, Windows \u0259m\u0259liyyat sistemi \u00fcz\u0259rind\u0259n h\u0259yata ke\u00e7irilir.
\n\u0130stifad\u0259 idar\u0259l\u0259r \u00fc\u00e7\u00fcn n\u00fcmay\u0259nd\u0259 t\u0259yin edilm\u0259si: Active Directory, Administrator’\u0131n t\u0259\u015fkilat i\u00e7\u0259risind\u0259ki bir istifad\u0259\u00e7iy\u0259 v\u0259 ya qrupa qism\u0259n v\u0259 ya tamamil\u0259 s\u0259lahiyy\u0259t verm\u0259sin\u0259 imkan yarad\u0131r.
\nActive Directory; Administrator’\u0131n Network qaynaqlar\u0131n\u0131 m\u0259rk\u0259zi olaraq idar\u0259 etm\u0259sin\u0259 imkan verir.
\nQaynaqlar\u0131n m\u0259rk\u0259zi r\u0259hb\u0259rliyinin \u00fcst\u00fcnl\u00fcy\u00fc: Tek bir administrator t\u0259r\u0259find\u0259n, Network qaynaqlar\u0131n\u0131n m\u0259rk\u0259zi n\u0259zar\u0259t v\u0259 idar\u0259 edilm\u0259si. Active Directory, b\u00fct\u00fcn objelere aid m\u0259lumatlar il\u0259 x\u00fcsusiyy\u0259tl\u0259ri daxildir. Bu x\u00fcsusiyy\u0259tl\u0259r, qaynaqlar\u0131n t\u0259rifini ehtiva ed\u0259n m\u0259lumatd\u0131r. Active Directory, obyektl\u0259rin m\u0259lumatlar\u0131n\u0131 yerl\u0259\u015fdirm\u0259d\u0259 asanl\u0131q t\u0259min ed\u0259r. Bu m\u0259lumatlar\u0131 istifad\u0259 ed\u0259r\u0259k, edil\u0259n axtar\u0131\u015f \u0259m\u0259liyyatlar\u0131nda obyekt, Active Directory kataloq h\u0259r harada olursa olsun, asanl\u0131qla tap\u0131la bil\u0259r. T\u0259\u015fkilat vahidl\u0259ri i\u00e7\u0259risind\u0259 qrup obyektl\u0259ri yarada bil\u0259rsiniz. OU b\u00fcny\u0259sind\u0259 Group Policy t\u0259tbiq oluna kimi, n\u00fcmay\u0259nd\u0259 t\u0259yin da imkan tan\u0131yar. N\u00fcmay\u0259nd\u0259, Administrator t\u0259r\u0259find\u0259n \u00f6z\u00fcn\u0259 veril\u0259n s\u0259lahiyy\u0259t nisb\u0259tind\u0259, \u0259m\u0259liyyat ed\u0259 bil\u0259r.
\nGroup Policy ayarlar\u0131: Site, Domain v\u0259 ya OU strukturlar\u0131na t\u0259tbiq. T\u0259tbiq sonras\u0131nda Active Directory, s\u00f6z m\u00f6vzusu param etrl\u0259r \u0259laq\u0259dar istifad\u0259\u00e7i v\u0259 komp\u00fcterl\u0259r \u00fcz\u0259rind\u0259 t\u0259sirli hala g\u0259lm\u0259sini t\u0259min ed\u0259r.<\/p><\/div>\n<\/blockquote>\n

<\/div>\n
<\/div>
\r\n