액티브 디렉토리 스키마 확장시 충둘방지 테스트
Published: May 12, 2010
https://technet.microsoft.com/en-us/library/testing-for-active-directory-schema-extension-conflicts(WS.10).aspx
???? : Windows Server 2008, Windows Server 2008 R2
? ??? ?? ???? ???? ?????? ???? ?? ??? ??? ? ?? ??? ??? ?????.
??? ??? ???? ? ?? ??? ??? ????. ??????? ??? ??? ?? ?? ?? ??? ?? ??? ??? ????? ??? ???? ?? ??? ?? ??? ??? ?? ????.
1. ?????? ???? ????? ?? ?? ? ?? .ldf ??? ???? ??? ????? ???? ??? ??? ???? ????? ??? ? ????. ????? ??? ??? ?????? ??? ?? ?? ??????? ??????? ???? ???? ?? ??? ? ?? .ldf ??? ?????. ??? ????? .ldf ??? ???? ??????? ??? ??? ? ????.
2. ??????? ??? ??? ?? .ldf ??? ???? ??? ????? ?? ??? ???? ???? ?? ??? ??? ???? ??????? ???? ? ????. ????? ?? ??? ?? ??? ??? ?? ????? ???? ?????. ??????? ?????? ?? ?? ???? ?? ???? ?????? ???? ?????. ??? ???? ?????? ???? ? ??? ??? ?????. ? ????? ??? ???? ??? ???? ???? ????? ??? ???? ?????.
??? ??
??? ??? ?? ???? ? ????? ????? ?????.
???? ???? : ????? ??? ?????? ?? ??? ????? ???? ??? ??? ??. ?? ??, ????? ??? ????? ??? ?? 2003? ??? ?? 2008 R2? ???, ??? ??? ????? ??? ?? 2008 R2? ??? ???.
????? ???? : ?????? ??? ???? ??? ???? ???? ??? ????? ???? AD LDS? ???? AD LDS ????? ???? ???? ???? ? ????. ? ??? ????? ??? AD DS/LDS ??? ???(Schema Analyzer)? ???? ???? AD LDS ?? ?? ?? ??(RSAT : Remote Server Administration Tool)? ???? ???. AD LDS RSAT? ??? ?? 2008? ??? ?? 2008 R2? ???? ??? ?? ????? ???? ?????(https://go.microsoft.com/fwlink/?LinkID=177813).
??? ???? ?? ??? ?? ????
??? ??? ????? ADSchemaExtensionConflictAnalyzer.ps1 (https://go.microsoft.com/fwlink/?LinkId=191133)? ?? ???? ???? ???? ??????? ??? ??? ?? .ldf ??? ??? ? ?? ??? ??, ??? ?????. ?? ??, ?????? ??? ??? ??? ?? ??? ???? ??????? ??? ?? ??? ??? ?????.
??
AD DS ?????? Adprep.exe? ???? ??? ???? ?? ADSchemaExtensionConflictAnalyzer.ps1? ???? ????. Adprep? ??? ??? ???? ???? ??? ??????? ? ??? ???? ????.
ADSchemaExtensionConflictAnalyzer.ps1? ??? ??? ?? ??? ????. ??? ??? ??? ???? ???? .ldf??? ??? ? ????. ??? ??? ??? ????? ??? ???? ??? ?? ???? ?????.
??? ???? ??? ?? ????? ???? ???? ??? ?????? ADSchemaExtensionConflictAnalyzer.ps1? ??? ? ????. ????? ??? ?????? ?????, ????? ????? ??? ????? ?? ????. ??? ??? ?????? ?????, –CurrentSchema ????? ?? ????? ???? ??? ???? ???. ??? ??? ??? ??? ??? ????? ????? ???.
ADSchemaExtensionConflictAnalyzer.ps1 ????
1. ??? ??? ???? ??? ??? ??? ???. ??? ???? ?? ????, ?? ????, ??? ???, ??? ??? ?????? ??? ????, ??? ???? ??? ?????.
2. ??? ?????.
set-executionpolicy unrestricted
? ??? ??? ?????? ???? ????? ?? ???? ??? ?????.
3. ?? ??? ???? ADSchemaExtensionConflictAnalyzer? ?????.
.\ADSchemaExtensionConflictAnalyzer.ps1 –inputfile NewSchemaExtension1.ldf, [NewSchemaExtension2.ldf, NewSchemaExtension3.ldf] –outputfile results.ldf [-CurrentSchema ProductionSchema.ldf]
??
ADSchemaExtensionConflictAnalyzer.ps1 ????? ?? ????? ?????? ????? ??? ???? ???. ?? ?? PS C:\Users\Administrator?? ???? ????? C:\Scripts? ??????, C:\Scripts\ADSchemaExtensionConflictAnalyzer.ps1?? ???? ???.
4. ?? ??? ??? ??? ?????. ????? ????? ??? ??? ???? ??? ??????.
??? ?? ??? ?????? ??? ?? ???
? ???? AD DS/LDS ??? ???(Schema Analyzer)? ?? ????? ???? ??? ??? ??? ??? ???? ?? ??? ?????. ??? ????? ?????? ??? ?? ???? ??? ? ????.
AD DS/LDS Schema Analyzer? ???? ????? ???? ??? ????? ???? ?????. ??? ? ??? ??? ??? ?? ??? ?????. ?? ??? ??? ??? ????? ???? ??????? ???? ? ????.
??? ?? ?? ??? ???? ?? Builtin\Administrator ??? ??? ? ????. ??? ??? ????? ?????, 7??? ???? ??? ??? ???? ??? ??? ??? ??? ???? ???.
??? ??? ????? ??? ?????.
1. ??? ????, ????? ??? ??????? ?? ??? ??? ???? ???? ???? ??? ????(?? ?? ??)? ????. ?????? ???? ?? ?? ???? ????? ??? ?? ??? ????? ???? ???.
2. ??? ??? ??????, AD LDS RSAT? ?????. AD LDS ?? AD DS/LDS Schema Analyzer? ???? ????. ??? ?? AD LDS ?? ?????.
a. ?? ???? ???.
b. Feature? ???? Feature ??? ?????.
c. RSAT, Role Administration Tools, AD DS and AD LDS Tools? ??? ?????.
d. AD LDS ???? ???? ????? ?? ???? ??? ????.
e. ??? ????, ??? ?????. ??? ?????.
3. ??? ??? ?? ?????? c:\windows\adam? ????? ???? adschemaanalyzer? ?????.
4. ????? ??? ?????? ???? AD DS/LDS Schema Analyzer? ???? ??? ? ????. ???? ??? ???? ????. ??? ??? ????? ?? ????? ???? ??? (a) ??? ?????.
a. ? ????? ??? ???? ?? AD DS/LDS Schema Analyzer? ???? ???? ?????. ? ??? ??? ?? ?????.
i. ??? ???? ?????. ???? ????? ??? ????? ??? ?? ??? server_name:port(?: ProdDC:389) ????, ??? ????? ???? ?? ? ??? ??? ???.
ii. ?? ???? ?????. ??? ????? ??? ????? ??? ?? ??? server_name:port(?: ProdDC:389) ????, ??? ?????.
b. ? ????? .ldf ??? ???? ?? Ldifde.exe? ???? ? ??? ?????. ? ??? ????? ??? ?? ???.
i. ????? ??? ??????, ?? ??? ???? ???? ???? Production_Schema.ldf? ?????. SchemaNamingContext? ??? ???? DN(Distinguished Name)?? ?????(?? ??, cn=schema,cn=configuration,dc=contoso,dc=com)
ldifde –f Production_Schema.ldf –d SchemaNamingContext
ii. Test_Schema.ldf? ??? ????? ??? ???? DN? ?? ??? ??? ????? ? ??? ?????.
iii. Production_Schema.ldf? ??? ??? ????? ?????.
iv. AD DS/LDS Schema Analyzer??, ??? ????, ?? ??? ??? ????, LDIF ??? ?????. Ldifde.exe ??? .txt ??? ???? ???, ?? ?? (*.*)? ???? ???. ???? ????? ??? Production_Schema.ldf ??? ?????. ? ??? AD DS/LDS Schema Analyzer?? ?????. ??? ??? ???? ???? ??? ??? ????? ??? Test_Schema.ldf??? ?????.
5. AD DS/LDS Schema Analyzer??, ???? ????, Hide present elements? ????, ??? ?? non-present elements? ?????.
? ??? ?? ??? ??? ???? ??? ???? ???? ??? ???? ????? ???? ?? ??? ?????.
6. ??? ????, LDIF ?? ??? ?????. ?? ??? ??? ??? ???? ??? ????.
7. ??? ?????? ?? ??? ???? ?? ?? ??? ?????.
ldifde –i –f DiffFileName.ldf –k –c dc=x dc=adatum,dc=com
??? adatum.com? ??? ????? ?????.
8. ? ????, ??? ????? ???? ????? ?? ???? ??? ????. ?? ??? ????? ??????? ???? ???? ??? ??? ??? ??? ? ? ????.
????
Ldifde https://go.microsoft.com/fwlink/?LinkId=191132
ADSchemaExtensionConflictAnalyzer.ps1 https://go.microsoft.com/fwlink/?LinkId=191133