Anyway I can Learn AD?
-
@IRJ said in Anyway I can Learn AD?:
AD is something you have to know if you want to step up to more of a system administration role, but its something that is fading out. AD will still be around for another 10 years, but adoption will only decrease going forward.
Very true, I agree completely. Definitely a "need to know", but it's had a good 20 year run and isn't the "go to" solution that it once was.
-
@scottalanmiller said in Anyway I can Learn AD?:
@IRJ said in Anyway I can Learn AD?:
AD is something you have to know if you want to step up to more of a system administration role, but its something that is fading out. AD will still be around for another 10 years, but adoption will only decrease going forward.
Very true, I agree completely. Definitely a "need to know", but it's had a good 20 year run and isn't the "go to" solution that it once was.
Definitely not a good path for someone early in their career to focus on. As mentioned its a need to know, but not something I would spend alot of time on if I was early in my career. 90% of the IT market already has this skill so it doesnt help your marketability at all.
-
Thanks,
I'll pick up a book,
Scott how about the AD Learning environment? -
@WrCombs said in Anyway I can Learn AD?:
A lot of jobs in the neighborhood here are requesting AD knowledge.
Does anyone know of a way I can start learning AD?
What is Active Directory?
how is it used? (I think I understand this on a basic level)
What would you suggest for getting started ?What are best practices?
Start with YouTube IMHO:
Active Directory Tutorial for Beginners
Youtube Video -
@WrCombs said in Anyway I can Learn AD?:
Thanks,
I'll pick up a book,
Scott how about the AD Learning environment?I don't know that someone else's environment is worth it.
get the ISO and install it yourself. That way you get to start from the ground up.
-
@Dashrender said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
Thanks,
I'll pick up a book,
Scott how about the AD Learning environment?I don't know that someone else's environment is worth it.
get the ISO and install it yourself. That way you get to start from the ground up.
fair enough - I'll try that
-
@Obsolesce said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
A lot of jobs in the neighborhood here are requesting AD knowledge.
Does anyone know of a way I can start learning AD?
What is Active Directory?
how is it used? (I think I understand this on a basic level)
What would you suggest for getting started ?What are best practices?
Start with YouTube IMHO:
Active Directory Tutorial for Beginners
Youtube VideoThat looks promising
-
Honestly there really isn't much to AD that you will encounter on a day-to-day basis. A book may be overkill for it. The YouTube videos may be a good place to start but setting up an environment and using it will be the best way to learn.
-
@coliver said in Anyway I can Learn AD?:
Honestly there really isn't much to AD that you will encounter on a day-to-day basis. A book may be overkill for it. The YouTube videos may be a good place to start but setting up an environment and using it will be the best way to learn.
Without a book there are many aspects you'll never just bump into, especially in a small environment - like sites and domains and trusts - granted, is most SMB you won't bump into these much either (well sites might be something if you have multiple DCs in different locations)... I think a book is best to ensure a rounded view of AD.
-
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
-
@Obsolesce said in Anyway I can Learn AD?:
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
DC= Domain Controller?
Anything i need to know about setting up a DC?
-
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
What would you use below 12 Devices ?
Say for a Small mechanic shop running ~8 PC's (2 at the front desk, 5 in service bays, one in the bosses office, etc.)
-
@WrCombs said in Anyway I can Learn AD?:
@Obsolesce said in Anyway I can Learn AD?:
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
DC= Domain Controller?
Anything i need to know about setting up a DC?
At a basic level, it can be a single command. I'd just start with that video first, then go from there.
-
@Obsolesce said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
@Obsolesce said in Anyway I can Learn AD?:
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
DC= Domain Controller?
Anything i need to know about setting up a DC?
At a basic level, it can be a single command. I'd just start with that video first, then go from there.
Thanks
-
@WrCombs said in Anyway I can Learn AD?:
@Obsolesce said in Anyway I can Learn AD?:
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
DC= Domain Controller?
Anything i need to know about setting up a DC?
He just told you - check out Cqure or google "securing a Windows Domain Controller"
-
@Dashrender said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
@Obsolesce said in Anyway I can Learn AD?:
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
DC= Domain Controller?
Anything i need to know about setting up a DC?
He just told you - check out Cqure or google "securing a Windows Domain Controller"
yeah, but nothing about the initial set up, which is something I'll have to figure out.
-
@WrCombs said in Anyway I can Learn AD?:
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
What would you use below 12 Devices ?
Say for a Small mechanic shop running ~8 PC's (2 at the front desk, 5 in service bays, one in the bosses office, etc.)
This is the crux in my mind.
Some will say - just use a NAS or some online storage solution - like OD or OD4B or NextCloud or Dropbox, etc.
Have the users log in locally - or remove local logins completely, depending on your needed level of workstation security.
Basically you'd set them up as a LANless setup - all security comes from the applications you use, not the workstation.
-
@WrCombs said in Anyway I can Learn AD?:
@Dashrender said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
@Obsolesce said in Anyway I can Learn AD?:
@scottalanmiller said in Anyway I can Learn AD?:
@WrCombs said in Anyway I can Learn AD?:
What are best practices?
Some rules of thumb...
- AD is never a foregone conclusion.
- Never consider AD until you have at least 12 computers or users on your network (officially MS used to say 10, but that's absurdly low, 12 is more reasonable.)
- Don't run any applications from your AD DC.
- Never refer to an AD Domain Controller (DC) as a PDC or BDC, there is no such thing in the AD world and anyone using the term is very confused and is thinking of NT SAM from the 1990s which is unrelated.
- Your entire AD network, everything in it, is not any more secure than your DC. Keep your DC locked down tight, as secure as possible. There are many guidelines. Check out Cqure.
DC= Domain Controller?
Anything i need to know about setting up a DC?
He just told you - check out Cqure or google "securing a Windows Domain Controller"
yeah, but nothing about the initial set up, which is something I'll have to figure out.
This is something the video or book should guide you through. Though initial setup is generally pretty easy. though things are different in the 2019 days than the ol' 2016 or older days - the idea of a desktop on server is mostly gone - you can still get it, but it's not simply assumed anymore....
-
you can download virtualbox to your laptop and use that to setup an environment to play on... FYI, you shouldn't share that network to your corporate network - you could run into issues.
-
@WrCombs you'll get so much more out of that video than from here right now. I'd go watch that and ignore this all until ur finished.
