Windows Server 2016 Active Directory...

Copyright 2016-2018 FUJITSU LIMITED

1.1

2018 2

Windows Server 2016 Active Directory



Microsoft Windows Server 2008 Active DirectoryMicrosoft Windows

Server 2008 R2 Active DirectoryMicrosoft Windows Server 2012 Active

DirectoryMicrosoft Windows Server 2012 R2 Active Directory

Microsoft Windows Server 2016 Active Directory

& 2

Active Directory

Microsoft Windows Server 2008 Active DirectoryMicrosoft Windows

Server 2008 R2 Active DirectoryMicrosoft Windows Server 2012 Active

DirectoryMicrosoft Windows Server 2012 R2 Active Directory

/SE

/SE/

Windows Server

Windows

http://jp.fujitsu.com/platform/server/primergy/technical/construct/

http://jp.fujitsu.com/platform/server/primergy/technical/construct/



Microsoft Windows Server 2003 Windows Server 2003


Microsoft Windows Server 2008 R2 Windows Server 2008 R2


Microsoft Windows Server 2012 R2 Windows Server 2012 R2


Windows 7 Windows 7

Windows 8.1 Windows 8.1

Windows 10 Windows 10

Microsoft Windows Server 2003 Active

Directory

Windows 2003


Directory

Windows 2008

Microsoft Windows Server 2008 R2

Active Directory

Windows 2008 R2


Directory

Windows 2012

Microsoft Windows Server 2012 R2

Active Directory

Windows 2012 R2


Directory

Windows 2016

DC

Active Directory AD

Active Directory ADDS

Windows Server 2016



2016.11 1.0

2018.02 1.1 ADMT

FSMO



1 Windows 2016 ...................................................... 1 2 .................................................................................................................. 2

2.1 ..................................................................................................................................2 2.2 ......................................................................................................................................................3

2.2.1 ............................................................................................................4 2.2.2 & .......................................................................................................6

3 (Windows 2008/ 2008 R2 ) ............ 8 3.1 ................................................................................................................................................................8 3.2 ............................................................................................................................................................. 10

3.2.1 / ......................................................................................... 10 3.2.2 Windows Server 2016 DC .................................................................................................. 14 3.2.3 FSMO ............................................................................................................................................ 23 3.2.4 Windows Server 2008 DC .................................................................................................. 33 3.2.5 / ......................................................................................... 37 3.2.6 SYSVOL ................................................................................................................... 40

4 (Windows 2012/2012 R2 )........... 47 4.1 ............................................................................................................................................................. 47 4.2 ............................................................................................................................................................. 49

4.2.1 Windows Server 2016 DC .................................................................................................. 49 4.2.2 FSMO ............................................................................................................................................ 58 4.2.3 Windows Server 2012 DC .................................................................................................. 69 4.2.4 / ......................................................................................... 74 4.2.5 SYSVOL ................................................................................................................... 76

5 ..................................................................................................................................... 77



1 ..................................................................................... 8 2 ................................................................................... 47

1 DC .................................................................................................................................... 9 2 / ...................................................................................... 9 3 IP ............................................................................................................................................ 36 4 IP .................................................................................................................................. 36 5 DC .................................................................................................................................. 48 6 / .................................................................................... 48 7 IP ............................................................................................................................................ 73 8 IP .................................................................................................................................. 73


- 1 - Copyright 2016-2018 FUJITSU LIMITED

1 Windows 2016 Windows 2016 2

Microsoft Passport

Microsoft Passport Windows 10 PIN

Microsoft Azure ADWindows Server 2016 Active Directory Windows 10

Azure AD Connect Azure AD Active Directory ID Windows Server 2016 Active Directory Microsoft Passport

(PAM)

Windows 2016 Microsoft Identity Manager (MIM) 2016 (Privileged Access Management, PAM)

MIM 2016 PAM Windows Server 2012 R2 Active Directory

OS

Microsoft

Windows 2008/2008 R2 Windows 2012/2012 R2 Windows 2016



2 Windows 2016 2.1

DC

Windows 2016 DC Windows Server 2003 /Windows Server 2003Windows Server 2003 Windows Server 2003 DC Windows Server 2008 AD DNSDHCPWINS

/

POINT!

POINT!

POINT!



DC

2.2 Windows 2016 2

/ &

& M&A

& Windows Server 2012 R2 ADMTActive Directory 2017 6 ADMT Windows Server 2016 ADMTADMT ADMT Windows 10/Windows Server 2016 ADMT https://blogs.technet.microsoft.com/jpntsblog/2017/06/02/windows-10windows-server-2016-%e3%81%ae%e7%92%b0%e5%a2%83%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8b-admt-%e3%82%92%e4%bd%bf%e7%94%a8%e3%81%99%e3%82%8b%e5%a0%b4%e5%90%88%e3%81%ae%e5%af%be%e5%bf%9c%e7%8a%b6/

POINT!

POINT!

https://blogs.technet.microsoft.com/jpntsblog/2017/06/02/windows-10windows-server-2016-%e3%81%ae%e7%92%b0%e5%a2%83%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8b-admt-%e3%82%92%e4%bd%bf%e7%94%a8%e3%81%99%e3%82%8b%e5%a0%b4%e5%90%88%e3%81%ae%e5%af%be%e5%bf%9c%e7%8a%b6/https://blogs.technet.microsoft.com/jpntsblog/2017/06/02/windows-10windows-server-2016-%e3%81%ae%e7%92%b0%e5%a2%83%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8b-admt-%e3%82%92%e4%bd%bf%e7%94%a8%e3%81%99%e3%82%8b%e5%a0%b4%e5%90%88%e3%81%ae%e5%af%be%e5%bf%9c%e7%8a%b6/https://blogs.technet.microsoft.com/jpntsblog/2017/06/02/windows-10windows-server-2016-%e3%81%ae%e7%92%b0%e5%a2%83%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8b-admt-%e3%82%92%e4%bd%bf%e7%94%a8%e3%81%99%e3%82%8b%e5%a0%b4%e5%90%88%e3%81%ae%e5%af%be%e5%bf%9c%e7%8a%b6/



& 2.2.1

DC

DC

Windows Server 2016ADDSDC DC

POINT!



FSMO DC

DC DC

Windows Server 2016

Windows 2008/2008 R2 Windows 2016 3 (Windows 2008/2008 R2 ) Windows 2012/2012 R2 Windows 2016 4 (Windows 2012/2012 R2 )



2.2.2 & & 2017 6 ADMT Windows Server 2016 ADMT Windows 2016

Windows 2016



3 (Windows 2008/2008 R2 )

Windows 2008/2008 R2 Windows 2016

Windows 2008 Windows 2008 R2

3.1

1

POINT!



1 / 1 2

1 DC 2008DC-1

IP 192.168.1.11 OSSP Windows Server 2008 DNS 127.0.0.1()192.168.1.12() DC(FSMOGC)DNS(fujitsu.local )

2008DC-2 IP 192.168.1.12 OSSP Windows Server 2008 DNS 127.0.0.1 ()192.168.1.11() DC(GC)DNS(fujitsu.local )

2016DC-1 IP 192.168.1.1 OSSP Windows Server 2016 DNS 127.0.0.1 ()192.168.1.12() DC(FSMOGC)DNS(fujitsu.local )


2 /

2012R2File

IP 192.168.1.50 OSSP Windows Server 2012 R2 DNS 192.168.1.11()192.168.1.12()

Win7 IP 192.168.1.101 OSSP Windows 7 SP1 DNS 192.168.1.11()192.168.1.12()

Win81 IP 192.168.1.102 OSSP Windows 8.1 DNS 192.168.1.11()192.168.1.12()

Win10 IP 192.168.1.103 OSSP Windows 10 DNS 192.168.1.11()192.168.1.12()



3.2 3.2.1 / Windows Server 2016 DC Windows Server 2003 Windows Server 2008 Windows Server 20033.2.2 Windows Server 2016 DC

2008DC-1 1 2 Active

Directory

3 Active Directory



4 Windows Server 2008

5 OK

6 OK

7 3

Windows Server 2008



2008DC-1 1 Active

Directory

2 Active Directory

Active Directory

3

Windows Server 2008

4 OK



5 OK

6 2

Windows Server 2008



3.2.2 Windows Server 2016 DC Active Directory

2016DC-12016DC-2

Windows Server 2016 OS DC DNS

1 2

3

4

POINT!



5 2016DC-1

6

Active Directory

7 Active Directory



8

9 Active Directory

10



11 Active Directory

12 Active Directory



2016DC-12016DC-2 1 Active Directory

- 11

2 Windows

OK

POINT!



3 OK

4

5

(DNS) (GC)

(DSRM)

Windows Server 2016 DC DNS

POINT!



6 DNS

7

8



9

10

11



12 []

13

Active Directory



3.2.3 FSMO

FSMO DC DC FSMO DC

repadmin /showrepl

net shareNETLOGONSYSVOL

SYSVOL FSR [ ]-[File Replication Service]

ID:13516 SYSVOL DFSR

wmic /namespace:rootmicrosoftdfs path DfsrReplicatedFolderInfo get * /format:textvaluelistReplicatedFolderName=SYSVOL ShareState=4

[ ]-[DFS Replication] ID:4604

2008DC-1 1 Schema Admins

2

regsvr32 schmmgmt.dllOK

3

OK

POINT!



4 mmcOK

5 1

6

Active Directory

7 Active

Directory OK



8 Active Directory []Active Directory

9

AD LDS 2016DC-1 OK

10 OK

11 Active Directory

[]



12

13

14 OK

15



2008DC-1 1 2 Active

Directory

3 Active Directory

Active Directory Active Directory

4

AD LDS 2016DC-1 OK



5 Active Directory

6

7

8 OK

9



PDC RID

2008DC-1 1 2 Active

Directory

3 Active Directory

Active Directory

4

AD LDS 2016DC-1 OK



5 Active Directory Active Directory

6



7

DC

8 OK

9 PDC

10

11 OK

POINT!



12 RID

13

14 OK

15



3.2.4 Windows Server 2008 DC DC

2008DC-12008DC-2

DC DNS DC IP

1 2 2008DC-1

dcpromoOK

3 Active Directory

4 OK

POINT!



5

6 Administrator

7



8 AD

9 Active Directory

10

11 2008DC-1 12 1 11 2008DC-2



IP

2016DC-12016DC-2

DC DNS DC DNS TCP/IP DNS Active Directory DC IP Windows Server 2016 DC IP IP

3 IP

IP IP 2016DC-1 192.168.1.1 192.168.1.11( DC IP

) 2016DC-2 192.168.1.2 192.168.1.12( DC IP

)

DC IP

DC IP 4

4 IP

IP DC IP DC IP DC

IP TCP/IP

TCP/IP TCP/IP DNS IPDC

DNS IP

TCP/IP

DHCP DNS IP

DHCP DNS IPDHCP DNS IP

POINT!



3.2.5 /

2016DC-1 1 2

Active Directory

3 Active Directory

()

4

Windows Server 2016OK

5 OK



6 OK

7 3

Windows Server 2016

2016DC-1 1 Enterprise Admins

2

Active Directory

3 Active Directory

()



4


5 OK

6 OK

7 3

Windows Server 2016



3.2.6 SYSVOL Windows Server 2008DCDFSR(Distributed File System Replication)SYSVOLWindows 2008/2008 R2 Windows 2003 FRS(File Replication Service)FRS Windows 2016 FRS DFSRFRSDFSRDFSR SYSVOL DFSR DFSR

2016DC-1 1 DFSR

dfsrmig /GetGlobalState

DFSR

2 DFSR

dfsrmig /SetGlobalState 0

AD DFSR

DFSR DFSR

3 DFSR

dfsrmig /GetGlobalState

DFSR



4

dfsrmig /GetMigrationState

5 DFSR


DFSR DFSR DFSR SYSVOL SYSVOL_DFSR DC 15 1

6



7 () DFS Replication ID 80108014



8


C:Windows SYSVOL_DFSR C:WindowsSYSVOL C:WindowsSYSVOL_DFSR

9 DFSR


DFSR DFSR SYSVOL DFSR SYSVOL_DFSR



10 () DFS Replication ID 80158017 DFSRC:Windows SYSVOL_DFSR DFSR FRS



11 DFSR


DFSR DFSR RODC /DeleteRoNtfrsMembers



12 () DFS Replication ID 80188019

13




4 (Windows 2012/2012 R2 )

Windows 2012/2012 R2 Windows 2016

Windows 2012 Windows 2012 R2

4.1

2

POINT!



2 / 5 6

5 DC 2012DC-1

IP 192.168.1.21 OSSP Windows Server 2012 DNS 127.0.0.1()192.168.1.22() DC(FSMOGC)DNS(fujitsu.local )


2016DC-1 IP 192.168.1.1 OSSP Windows Server 2016 DNS 127.0.0.1 ()192.168.1.22() DC(FSMOGC)DNS(fujitsu.local )


6 /

2012R2File

IP 192.168.1.50 OSSP Windows Server 2012 R2 DNS 192.168.1.21()192.168.1.22()

Win7 IP 192.168.1.101 OSSP Windows 7 SP1 DNS 192.168.1.21()192.168.1.22()

Win81 IP 192.168.1.102 OSSP Windows 8.1 DNS 192.168.1.21()192.168.1.22()

Win10 IP 192.168.1.103 OSSP Windows 10 DNS 192.168.1.21()192.168.1.22()



4.2 4.2.1 Windows Server 2016 DC Active Directory

2016DC-12016DC-2

Windows Server 2016 OS DC DNS

1 2

3

POINT!



4

5

2016DC-1

6

Active Directory



7 Active Directory

8

9 Active Directory



10

11 Active Directory

12 Active Directory



2016DC-12016DC-2 14 Active Directory

- 11

15 Windows

OK

POINT!



16 OK

17

18

(DNS) (GC)

(DSRM)

Windows Server 2016 DC DNS

POINT!



19 DNS

20

21



22

23

24



25 []

26

Active Directory



4.2.2 FSMO

FSMO DC DC FSMO DC

repadmin /showrepl

net shareNETLOGONSYSVOL

SYSVOL FSR [ ]-[File Replication Service]

ID:13516 SYSVOL DFSR

wmic /namespace:rootmicrosoftdfs path DfsrReplicatedFolderInfo get * /format:textvaluelistReplicatedFolderName=SYSVOL ShareState=4

[ ]-[DFS Replication] ID:4604

2012DC-1 1 Schema Admins

2 regsvr32

schmmgmt.dllActive Directory

3

OK

4 mmc

Microsoft

POINT!



5 1

6

Active Directory

7 Active

Directory OK



8 Active Directory []Active Directory

9

AD LDS 2016DC-1 OK

10 OK

11 Active Directory

[]



12

13

14 OK

15



2012DC-1 1 2

Active Directory

3 Active Directory

Active Directory Active Directory

4

AD LDS 2016DC-1 OK



5 Active Directory

6

7

8 OK



9

PDC RID

2012DC-1 1 2

Active Directory

3 Active Directory

Active Directory



4 AD LDS 2016DC-1 OK

5 Active Directory

Active Directory

6



7

8 OK

9 PDC



10

11 OK

12 RID

13



14 OK

15



4.2.3 Windows Server 2012 DC DC

2012DC-12012DC-2

DC DNS DC IP

1 2 2012DC-1

3

4

2012DC-1

POINT!



5 Active Directory

6 Active Directory

7



8

9

10



11 Administrator

12

DC

13 DC

14 2012DC-1 15 1 14 2012DC-2



IP

2016DC-12016DC-2

DC DNS DC DNS TCP/IP DNS Active Directory DC IP Windows Server 2016 DC IP IP

7 IP

IP IP 2016DC-1 192.168.1.1 192.168.1.21( DC IP

) 2016DC-2 192.168.1.2 192.168.1.22( DC IP

)

DC IP

DC IP 8

8 IP

IP DC IP DC IP DC

IP TCP/IP

TCP/IP TCP/IP DNS IPDC

DNS IP

TCP/IP

DHCP DNS IP

DHCP DNS IPDHCP DNS IP

POINT!



4.2.4 /

2016DC-1 1 2

Active Directory

3 Active Directory

()

4


5 OK



6 OK

7 3

Windows Server 2016

2016DC-1 8 Enterprise Admins

9

Active Directory

10 Active Directory

()



11


12 OK

13 OK

14 3

Windows Server 2016

4.2.5 SYSVOL Windows Server 2008DCDFSR(Distributed File System Replication)SYSVOLWindows 2012/2012 R2 Windows 2003 FRS(File Replication Service)FRS Windows 2016 FRS DFSRFRSDFSRDFSR SYSVOL DFSR 3.2.6 SYSVOL DFSR



5 Windows 2008/2008 R2Windows 2012/2012 R2 Windows 2016

Windows Server 2016 Windows NT



PC FUJITSU Server PRIMERGY PC FUJITSU Server PRIMERGY http://www.fujitsu.com/jp/products/computing/servers/primergy/ FUJITSU Server PRIMERGY http://jp.fujitsu.com/platform/server/primergy/products/lineup/select-spec/ FUJITSU Server PRIMERGY http://jp.fujitsu.com/platform/server/primergy/products/lineup/select-model/

PC FUJITSU Server PRIMERGY

PC FUJITSU Server PRIMERGY http://www.fujitsu.com/jp/products/computing/servers/primergy/contact/

IA FUJITSU Server PRIMEQUEST IA FUJITSU Server PRIMEQUEST

http://www.fujitsu.com/jp/products/computing/servers/primequest/ FUJITSU Server PRIMEQUEST 3000

http://www.fujitsu.com/jp/products/computing/servers/primequest/products/3000/index.html IA FUJITSU Server PRIMEQUEST

http://www.fujitsu.com/jp/products/computing/servers/primequest/contact/

http://www.fujitsu.com/jp/products/computing/servers/primergy/http://jp.fujitsu.com/platform/server/primergy/products/lineup/select-spec/http://jp.fujitsu.com/platform/server/primergy/products/lineup/select-model/http://www.fujitsu.com/jp/products/computing/servers/primergy/contact/http://www.fujitsu.com/jp/products/computing/servers/primequest/http://www.fujitsu.com/jp/products/computing/servers/primequest/products/3000/index.htmlhttp://www.fujitsu.com/jp/products/computing/servers/primequest/contact/



MicrosoftWindowsWindows ServerActive DirectoryAzureMicrosoft Passport

Microsoft Corporation

1 Windows 20162 2.1 2.2 2.2.1 2.2.2 &

3 (Windows 2008/2008 R2)3.1 3.2 3.2.1 /3.2.2 Windows Server 2016DC3.2.3 FSMO3.2.4 Windows Server 2008 DC3.2.5 /3.2.6 SYSVOL

4 (Windows 2012/2012 R2)4.1 4.2 4.2.1 Windows Server 2016DC4.2.2 FSMO4.2.3 Windows Server 2012 DC4.2.4 /4.2.5 SYSVOL

5

Windows Server 2016 Active Directory...

Documents

Transcript of Windows Server 2016 Active Directory...