Anyway I can Learn AD?

scottalanmiller

Remember, AD is a service like a web server. Microsoft AD is what most people use and is the original (kind of.) The only major competitor to Microsoft AD is Samba. Samba, since version 4, is also a full AD implementation and is every bit as much AD as MS AD is. One is not "more" AD than the other. One is just the first commercial implementation and the other is the second.

Dashrender

You can download the Server ISO from MS. You can then install it in a 180 day trial version on a VM anyplace you have the resources - they can build your own AD and do whatever you want to it.

This is what I did way back when - setup AD and Novell at home to have things to learn on.

IRJ

AD is something you have to know if you want to step up to more of a system administration role, but its something that is fading out. AD will still be around for another 10 years, but adoption will only decrease going forward.

I would do some AD training on Udemy or Youtube to get some basic knowledge as you do need it. However, I dont think its the most marketable skill to push you to the next level and make you stick out from the crowd. Nearly all IT people with any experience have some level AD experience.

Office 365 / Intune is a better choice for system administrators going forward IMO. Its a skill that less people have in comparasion to AD so it will make you a bit more valuable if you can show competency in both. It will eventually replace AD / Exchange in environments.

Once you master these areas, you can look towards more complex concepts like AWS and Azure.

scottalanmiller

@IRJ said in Anyway I can Learn AD?:

AD is something you have to know if you want to step up to more of a system administration role, but its something that is fading out. AD will still be around for another 10 years, but adoption will only decrease going forward.

Very true, I agree completely. Definitely a "need to know", but it's had a good 20 year run and isn't the "go to" solution that it once was.

IRJ

@scottalanmiller said in Anyway I can Learn AD?:

@IRJ said in Anyway I can Learn AD?:

AD is something you have to know if you want to step up to more of a system administration role, but its something that is fading out. AD will still be around for another 10 years, but adoption will only decrease going forward.

Very true, I agree completely. Definitely a "need to know", but it's had a good 20 year run and isn't the "go to" solution that it once was.

Definitely not a good path for someone early in their career to focus on. As mentioned its a need to know, but not something I would spend alot of time on if I was early in my career. 90% of the IT market already has this skill so it doesnt help your marketability at all.

WrCombs

Thanks,
I'll pick up a book,
Scott how about the AD Learning environment?

Obsolesce

@WrCombs said in Anyway I can Learn AD?:

A lot of jobs in the neighborhood here are requesting AD knowledge.

Does anyone know of a way I can start learning AD?

What is Active Directory?
how is it used? (I think I understand this on a basic level)
What would you suggest for getting started ?

What are best practices?

Start with YouTube IMHO:

Active Directory Tutorial for Beginners
Youtube Video

Dashrender

@WrCombs said in Anyway I can Learn AD?:

Thanks,
I'll pick up a book,
Scott how about the AD Learning environment?

I don't know that someone else's environment is worth it.

get the ISO and install it yourself. That way you get to start from the ground up.

WrCombs

@Dashrender said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

Thanks,
I'll pick up a book,
Scott how about the AD Learning environment?

I don't know that someone else's environment is worth it.

get the ISO and install it yourself. That way you get to start from the ground up.

fair enough - I'll try that

WrCombs

@Obsolesce said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

A lot of jobs in the neighborhood here are requesting AD knowledge.

Does anyone know of a way I can start learning AD?

What is Active Directory?
how is it used? (I think I understand this on a basic level)
What would you suggest for getting started ?

What are best practices?

Start with YouTube IMHO:

Active Directory Tutorial for Beginners
Youtube Video

That looks promising

coliver

Honestly there really isn't much to AD that you will encounter on a day-to-day basis. A book may be overkill for it. The YouTube videos may be a good place to start but setting up an environment and using it will be the best way to learn.

Dashrender

@coliver said in Anyway I can Learn AD?:

Honestly there really isn't much to AD that you will encounter on a day-to-day basis. A book may be overkill for it. The YouTube videos may be a good place to start but setting up an environment and using it will be the best way to learn.

Without a book there are many aspects you'll never just bump into, especially in a small environment - like sites and domains and trusts - granted, is most SMB you won't bump into these much either (well sites might be something if you have multiple DCs in different locations)... I think a book is best to ensure a rounded view of AD.

Obsolesce

@scottalanmiller said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

What are best practices?

Some rules of thumb...

AD is never a foregone conclusion.

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

Don't run any applications from your AD DC.

Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.

Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.

WrCombs

@Obsolesce said in Anyway I can Learn AD?:

@scottalanmiller said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

What are best practices?

Some rules of thumb...

AD is never a foregone conclusion.

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

Don't run any applications from your AD DC.

Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.

Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.

DC= Domain Controller?

Anything i need to know about setting up a DC?

WrCombs

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

What would you use below 12 Devices ?

Say for a Small mechanic shop running ~8 PC's (2 at the front desk, 5 in service bays, one in the bosses office, etc.)

Obsolesce

@WrCombs said in Anyway I can Learn AD?:

@Obsolesce said in Anyway I can Learn AD?:

@scottalanmiller said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

What are best practices?

Some rules of thumb...

AD is never a foregone conclusion.

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

Don't run any applications from your AD DC.

Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.

Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.

DC= Domain Controller?

Anything i need to know about setting up a DC?

At a basic level, it can be a single command. I'd just start with that video first, then go from there.

WrCombs

@Obsolesce said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

@Obsolesce said in Anyway I can Learn AD?:

@scottalanmiller said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

What are best practices?

Some rules of thumb...

AD is never a foregone conclusion.

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

Don't run any applications from your AD DC.

Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.

Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.

DC= Domain Controller?

Anything i need to know about setting up a DC?

At a basic level, it can be a single command. I'd just start with that video first, then go from there.

Thanks

Dashrender

@WrCombs said in Anyway I can Learn AD?:

@Obsolesce said in Anyway I can Learn AD?:

@scottalanmiller said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

What are best practices?

Some rules of thumb...

AD is never a foregone conclusion.

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

Don't run any applications from your AD DC.

Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.

Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.

DC= Domain Controller?

Anything i need to know about setting up a DC?

He just told you - check out Cqure or google "securing a Windows Domain Controller"

WrCombs

@Dashrender said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

@Obsolesce said in Anyway I can Learn AD?:

@scottalanmiller said in Anyway I can Learn AD?:

@WrCombs said in Anyway I can Learn AD?:

What are best practices?

Some rules of thumb...

AD is never a foregone conclusion.

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

Don't run any applications from your AD DC.

Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.

Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.

DC= Domain Controller?

Anything i need to know about setting up a DC?

He just told you - check out Cqure or google "securing a Windows Domain Controller"

yeah, but nothing about the initial set up, which is something I'll have to figure out.

Dashrender

@WrCombs said in Anyway I can Learn AD?:

Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)

What would you use below 12 Devices ?

Say for a Small mechanic shop running ~8 PC's (2 at the front desk, 5 in service bays, one in the bosses office, etc.)

This is the crux in my mind.

Some will say - just use a NAS or some online storage solution - like OD or OD4B or NextCloud or Dropbox, etc.

Have the users log in locally - or remove local logins completely, depending on your needed level of workstation security.

Basically you'd set them up as a LANless setup - all security comes from the applications you use, not the workstation.