Active Directory 인프라를 쉬운 방법으로 문서화하기
???? : Documenting Active Directory Infrastructure the Easy Way
?????, ?????. ??? ???? ??? ????, ???? ????, ??? ????? ???? ?????? ?? Active Directory ??? ????? ??? ??? ???.
???? ?? ??? ??? ??? ??? ? ?? ??? ??? ???? ????. ??? ? ??? ?? ???? ? ? ?? ?? ??? ?? ????? ???. ???? ??? ?? ?? ??? ??? ?????.
- ???? ???? ??
- OU ??
- ???
- Exchange
- ???? ?? ? ??
? ??? ?? ??? ? ?? ??? ????? ??? ???? ??? ?????? ???? ???.
- ADTD(Active Directory Topology Diagrammer)
- ???? ?? ??(GPMC : Group Policy Management Console)
ADTD? ???? Microsoft Office Visio 2003 ?? 2007? .NET Framework 2.0? ?????. Windows Vista?? GPMC? ????? GPMC ????? ?? ?????? ???. ? ????? XP? ????? ?????.
GPMC? ????? ???? ?????? ??? ??? ?????. ?? ???(??? ? ???) ????? ???? ????. ADTD? ??? ???? ???? ??? ????? ?? ???? ?? ???? Visio ???? ??? ?? ??? ????. ??? ???? ?? ????, ?? ???? ??? ?? ???? ??? ????? ? ? ??? ? ???? ? ? ???, ?? ??? ?? ? ? ??? ??? ???.
?? ?????.
1. Windows XP Professional ?? Windows Server 2003 server? Visio, ADTD, ??? GPMC? ?????.
2. ADTD? ?????.(?? ???? 'Microsoft Active Directory Topology Diagrammer'?? ?????)
3. ??? ???? ???? ??? ?? ??? ???.
??? ?? ??? ?? ??? ???? ??? ????? ?????. GC? ?? ?? LDAP ??? ???? ?? ? ?? ???? ????? ??? ??? ????. ADTD?? ??? ?? ??? ??? ??????? Visio? ??? ? ???. ???? ??? ?????.(?? ????? ?? ?? ?? ??? ????? ???) ???? ???? ? ? ?? ?? GC? ??? ? ????. ???? 'Use DNS and connect to each domain'? ???? ????? ???? DC? ??? ? ?? ?? ?????, ???? ?? ?? ???? ??? ??? ????.
OU ?? ???? ?? Organizational Units? ?? ????. ???? ?? ??? ???? ?? ??? ??? ??? ?? ?? ??? ?? ????.
??? ?? ??? ??, ?? ??, ??? ???? ??? ?? ??? ? ????. 'suppress empty sites' ??? ?? ?? ?? ?? ??? ????? ???? ??? ?? ? ?????.
?? Microsoft Exchange? ????? Exchange ?? Microsoft Exchange ??? ?? ??? ??? ?? ?? ? ????. ??? ?????, ??? ????? ?? ????, ??? ??? AD ???? ?? ?? DC/GC? ??? ???? ?????? ? ? ????.
?? Windows Server 2003 ??? ?? ???? ??? AD ?? DNS? ?????, ?? DC? ? ???? ?????? ?? ?? ??? ? ????.
?????, ADTD? ?? QFDN(fully qualified domain names), ?? ??? ??? ?, ?? ??? ?? ?? ??? ?? ???? ?? ??? ?? ? ????. ?? ?????, ??? ???? ??? ?? ???? ?? DC? ?? ???? ?? ?? AD ???? ??? ? ?????.
4. ??? ?????. Discover? ?????. ?? ?? LDAP lookup? ???? ???? ?? ????. Draw ?????, ??? ??? ?? ?? ???. (?? ??? ????, ?? ???? DC? ????? ???) Visio? ?? ??? ?? ? ???. ????, ADTD ?? ?????? ???? ??? ?????.
??? ? ?? ??? ?? Visio ??? ????.(?????, ADTD ?? ???? ??? ??? ? ????) ??? ??? ????.
- fabrikam.com ??? ? ?? DC? Exchange server? ????.
- ?? DC? fabchild.fabrikam.com ??? ?? ???? ????.
- ?? ???? ???? blueyonderairlines.com? ????.
- ?? ???? ?? ???? byachild.blueyonderairlines.com? ????.
?? Visio? ?? ?? ????.
?? ??? AD Domains.vsd???. 4?? ???? ????? ?????. FABRIKAM ???? ??? ????.
? 45?? ???? ? ?? DC? ????. ?? FSMO ??? ??? ?? ?? ????, ??? ??? ??? ?? ??? ????? ?????. AD Sites.vsd? ????.
Fabrikam.com ????? ? ?? ???? ?? ?? ? ? ??, ?? ???? ????, DC ??? ??? ????. Main-Office ???? ??? ????.
????, GC, ??? ????, ????? ???? ??, ??? ?? ??? ??, ??? ??? ISTG? ???? DC?? ? ? ????. ?? ??? ?????? ?? ????? ???? Active Directory ?? ???? ????? ?????.
AD Application Partitions.vsd? ????, ?? ? ?? ?? ??? DC? 2003 ???? ?? DNS? ???? ?? ? ? ????.
? ??? Exchange 2003 server? ?? ???, Ex Organization.vsd? Main-Office ???? ??? ?????.
?? 2003SRV12? ???? 'First Administrative Group'? ???? Exchange 2003 Service Pack 2? ???? ?? ? ? ????. It has 32 mailboxes. 32?? ????? ??? ????. DC/GC? ???? ? ???? ?? ? ?? DC? ????.
ADTD?? ?????, OU ??? ??????. ADTD? ?? OU? ???? ???, ??? ??? ?? ?? ??? ??? ?? ?????, ?? ??? ???? ???? ????.
??? ??? GPMC ????? ? ? ?? ??? ????.
1. ??? ??? ??? ???? CMD ????? ?? (????? ?????? ????) ??? ?????.
C:\Program Files\GPMC\Scripts
2. ??? ?????.
MD c:\GPMCReports
3. ?????. (?? ???? ?????)
Cscript ListSOMPolicyTree.wsf /domain:fabrikam.com > c:\gpmcreports\fabrikamgpotree.txt
4. ??? c:\gpmcreports\fabrikamgpotree.txt? ?????. ??? ??? ?? ??? ????.
--------------------------------------------
=== GPO Links for domain fabrikam.com ===
DC=fabrikam
GPO=Default Domain Policy
GPO=AllCheck
OU=Domain Controllers
GPO=Default Domain Controllers Policy
OU=csc
OU=UserRepros
OU=foo
OU=rar
OU=RenamedPuters
OU=gpotest
OU=FolderRedir
OU=RedirectedTest
OU=nested1
OU=nested2
GPO=Logoff Screensaver
OU=nested3
OU=nested4
GPO=Password Screensaver
OU=wmi
OU=Admins
OU=Exchange
GPO=No Boot
=== GPO Links for sites in forest DC=fabrikam,DC=com ===
CN=Main-Office
CN=Remote-Office
--------------------------------------------
5. ?? ??? ?????.
Cscript GetReportsForAllGPOs.wsf c:\gpmcreports /domain:fabrikam.com
6. ??? Fabrikam.com? ?? ?? ??? ??? c:\gpmcreports ??? ?? ????.
--------------------------------------------
== Found 6 GPOs in fabrikam.com
Generating XML report for GPO 'No Boot'
Generating HTML report for GPO 'No Boot'
Generating XML report for GPO 'Default Domain Policy'
Generating HTML report for GPO 'Default Domain Policy'
Generating XML report for GPO 'Logoff Screensaver'
Generating HTML report for GPO 'Logoff Screensaver'
Generating XML report for GPO 'Password Screensaver'
Generating HTML report for GPO 'Password Screensaver'
Generating XML report for GPO 'Default Domain Controllers Policy'
Generating HTML report for GPO 'Default Domain Controllers Policy'
Generating XML report for GPO 'AllCheck'
Generating HTML report for GPO 'AllCheck'
Report generation succeeded for 12 reports.
Report generation failed for 0 reports.
--------------------------------------------
7. ?? ? HTML ???? ??? ??, ??? ?? ?? ? ? ?? ?? ?? ? ? ????. ?? ??, 'nested4' OU? ???? ?? 'Password Screensaver' GPO? ??, ??? ?? ??? ????.
?? ??? ?? ??? ?????.
?? ?? ??? ?????.
?? ?????.
??? ?? HTML? XML?? ???, OU VSD? ??? ??? ? ??, ?? ??? XML ???? ????? ??? ? ? ????.(??? ?? Visio ??? ?????.) ??? ?? GPO ??? ?????? ?? ???? ??? ??? ?? ??? ??? fabrikamgpotree.txt?? ???? ????? ? ? ????.
??? ?? ??? ????? ???? 2? ??? ?? ???? ??? ????.
??? ?? ?? ??? ??? ?????.
Group Policy Management Console Scripting Samples
??? ??? ?????. ?? ?? Visio ??? ??? ?????. ???? ???????!
- Ned Pyle