Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Mastering Active Directory

You're reading from   Mastering Active Directory Understand the Core Functionalities of Active Directory Services Using Microsoft Server 2016 and PowerShell

Arrow left icon
Product type Paperback
Published in Jun 2017
Publisher Packt
ISBN-13 9781787289352
Length 742 pages
Edition 1st Edition
Languages
Arrow right icon
Author (1):
Arrow left icon
Dishan Francis Dishan Francis
Author Profile Icon Dishan Francis
Dishan Francis
Arrow right icon
View More author details
Toc

Table of Contents (20) Chapters Close

Preface 1. Active Directory Fundamentals FREE CHAPTER 2. Active Directory Domain Services 2016 3. Designing Active Directory Infrastructure 4. Active Directory Domain Name System 5. Placing Operations Master Roles 6. Migrating to Active Directory 2016 7. Managing Active Directory Objects 8. Managing Users, Groups, and Devices 9. Designing the OU Structure 10. Managing Group Policies 11. Active Directory Services 12. Active Directory Certificate Services 13. Active Directory Federation Services 14. Active Directory Rights Management Services 15. Active Directory Security Best Practices 16. Advanced AD Management with PowerShell 17. Azure Active Directory Hybrid Setup 18. Active Directory Audit and Monitoring 19. Active Directory Troubleshooting

Setting up PKI

Now, we have finished the theory part of this chapter and are moving on to the deployment part. In this section, I am going to demonstrate how we can set up a PKI using the two-tier model. I have used this model as it is the most commonly user model for mid and large organizations:

The preceding diagram explains the setup I am going to do. In there I have one domain controller, one stand-alone root CA, and one issuing CA. All are running with Windows Server 2016 with the latest patch level.

Setting up a stand-alone root CA

The first step is to set up the stand-alone root CA. This is not a domain member server, and it is operating in the workgroup level. By configuring it on separate VLAN will add additional...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime