Lời nói đầu
!"#$%&!'()*"
+,-.+/+01%%
2)!3+4
56(7)*)" -/%8
9:)-3!;<=>/?
/6@((AB/C>
5/DD/?30E
D%
2<F/?*B(A/5
/D/?@**++
6(8+-G)H8.IJ
1
KJ4&5!08L,,7/5/A?/
KM<F/N/OPLLQRRS4&C(2;NLK
/? 45!%
Page 1 of 86
Chương I. Giới Thiệu Hệ Điều Hành Window Server 2003
I. Giới thiệu về Hệ Điều Hành Window Server 2003
N/O<PLLQRRS)<(TBCN/O<PLL0G(!
9C<"46(0"U6(8*'+8'/V/
(A%W&<7<X36IC<(TN/O<PLLQRRS+
8* JY46(UNL6Z/+P//
Z/+ZL<LZ/[LLZ/
1.Các phiên bản của họ Windows Server 2003
46( BN/O<PLLQRRS0G! !#GC
(!6A&DB %\4Y46('6(B
N/O<PLLQRRS]NL6+P//^4T_+ZL<L^[_
[LL^7/J)_`C446(#G
&DaY6*$%W&!L<X36!'C
4+46(NL6)6o&B&TB
NL6&+6o ;<=sLLs=PLL<^ssP_a+LO m/
\)^m\_+;<=iPW%Z%
[8+4)46(NL6 ()C(-G
B0%e'ID B
NL64/?+ #G& BOL6 &
!<F/?B%
1.2 Phiên bản Tiêu chuẩn (Standard Edition)
W46(P//<F/?C(BDc
9/A?0?^[L_+=)L+9+D/?+)L//A?
sLL/wKM%P7)9C-
c46(BCU
lDirectory services (Dịch vụ Thư mục)UW46(P// (c#G
&B*"iL[LeB)
B4dB(AC%0(A
<F/?? :LC (A*
0GiL[L+-<^gW`gW)_/A
? /54CiL[L%
lDịch vụ Internet: W46(P//6ossPa%R9/A?NL6
tWx0& <F/?3
BNL60/A?76@(^m\`LO m/\)_%D
cm\eCBNL6q/3^<_NL6<L
'+<u4& !*B)L*SQBo
9 (c*)#*%
lCác dịch vụ cơ sở hạ tầng: W46(P//6o/A?;<=
[fWPLL+[LP<L^[P_PLL+N/O<sLLL
PLL^NsP_PLL+9/A?'6(6
4sLL%
lĐịnh tuyến TCP/IP ^WysWh_U;B46(P//
50L"9C936oA!mi
$A/>0G>+-c6(8sW^sWPL]
sW<L_E+]<F/?J -<*>/J)0" C4
+-c0)Fst`A)8*")o/J)K
sLL-c<F/?W6)rLs=<L^Wrs_`
9 (c6(8/54>6@ D
8<*%
1.3 Phiên bản Doanh nghiệp (Enterprise Edition)
W46(ZL<L0G! !4B93B
ID/wK)"%W46( 46(P//B!E
D#G&D%-/?U\(ZL<L#G*€6,F)-<"Y6
B6(P//*SQg\6"hi;<" (cB6(P//j)
Yg\%
W46(ZL<L6I<4<*-c
6(P//+6o&<U
l Microsoft Metadirectory Services - MMS (Dịch vụ Siêu Thư mục
Microsoft)UMetadirectory 6(9)0?B0?`0'
Page 4 of 86
-GCo0?'+*9%;;P
e$ !GiL[L"/A
?0? +3I9(C
4%W46(ZL<Lj9#G;;P
()&C;;P5<5+&C6()9K;<=
<)PLL^[A?09;<=];P_dM
8"*;;P%
lServer Clustering (Chuỗi Máy chủ)U#B)B
0)0B'9 (c<•<
D/?%-<•<0Gp)
3BD/?0G76*CB
#+((4#B9 (cA)#!69 3
B6A<5*%B#+0G)$+C (c
*T8+/q5()H/J)0/q+
6(8o40G7*+e0'"0?
%4+iL[L0G! !d60 !*
0G76IL %
iL[L0G)"<"N/O<QRRR
PLL0G7*'N/O<PLLQRRS+E
&BC%N/O<PLLQRRSiL[L
9!+0G)/L<LL+!9(*0G
+o<L+<+L+L+)L<<%
2"0/qd(A4+iL[L9 3
-9$K/V/8()H9(4%
1.1.Tại sao cần thực thi Active Directory?
<*)H/)H(7M4%;<=iL[L0G,L0
)60"! <"N/O<PLLY%R/8-
B</)L%iL[L'!(A84
6%x9 (c/55I/5
dC/))L0G /%
iL[L<X5()H<5CJ/))L6(
(0G/3%0/q89(44
'!c8)&%9(40G6(6E
'!6(8 +'!6(8 8/0
/qCB#8*"4%
iL[Lec9+9/))LB
4/V/%*0G()H0G6(
-<gW)L<%b7)3IDD68)+
e()H/V/B(A%;d/q89
k)iL[L (c()H*0G64C%
1.2.Những đơn vị cơ bản của Active Directory
iL[L0GID6@<F/?Y 'A9$
?%\*'A0G=L<+/+‚)<L%
TAc8C%
0" N/O<+6C C-]/))L
^W[_6C C6 ]6 /))L^\[_))L
0GB-<F/?C
N/O<%N/O<><F/?H0EC()H<58*"
4^D/?++1_0/q%0/qj&
c8C)84+J4
@4<*B %
;B0G6!!0W[+()H'<E/J)0/q;<LC%
;d<*B 0G! !0\[%W[FA ƒ
6('<E/J)!\[%;\[0
W[!BW[6A)#xG$76@)o!
68%
2"N/O<QRRRPLL+ /))Lk0G/3+)LB
W[\['6(0G!6EiL[L%0/qx
C767dC(A%\4iL[L+
0/qBdC(A/54}{%
C 6A!6E<*)0GYR%RRR0/q%CiL
[L()H*0G%23 oW[\[
4iL[L<F/?6(<)]<LL)9(/
))LC%
}‚)<M)'e()H/V/'<"
C%}{e60G (c)&0+6+
,}{"!&%;d/qCx-9C/u%$
6A,"+43/V/k!w0<"}{
x4!%
LAp+sites )DsW<6L)4 !C8
J<%\@<F/?<L+6 <(<*)0G)0
)0GC(4)4 !Ni8%
1.3.Infrastructure Master và Global Catalog
7U
• 0?*
• +#)
• }‚<+#}‚)
• }‚)<^'A+6+1_+}{
• s//)<^+o0+=)L4<u+•0
L_
;0?m[iW0G7*JCB%;#B
46(<B0?I0Go6L ƒ%
Page 9 of 86
(A4&(m[iW 3 !iL
[L+&9m[iWJ/? 3 !0G)0
'<E/J)iL[L%
1.5.Sự quản lý Group Policy và Active Directory
r!iL[L||$(C8!gW)%
(A4<F/?gW)iL[LAp
!)80/q-%!)80G930G
)0gW)}6„L<^gW}<_+&<<X0G !G"
*0GiL[L+o/<L%b7-)'!B
!/?I-0/q0
N/O<%
()HgW)+(A493?!)8
/L< 4-0/q+!de8*"=)L
d0?64%
4$x&(gW}0G<F/?0!%g
W)}6„L0G/?LD5<U-<60G<F/?
0"+<)-<<L+-<C+-<0G<F/?
}{4%…+*0G0/qd-j
C<LdC+38$<Xj8gW})4 !"<L
dC%
]e$MCB3C^<6/_
'AID}{^}‚){_%P$BC
(A468()HK68M%
3 . Diectory Services
3.1. Giới thiệu Directory Services
[LPLL<^/A?/6_)*D[P%[s
0'3()H+ 8%[A?/6)/A?'<E)
C(3*i[%;*"J-c0G
B;<=%
3.2 Các thành phần trong Directory ServicesU
b&4+6(6!0GJ&94/A?/6†\
<</A?/6"<I)0<*%(CD/
<BC*0G x0-)4!
*0G%
3.2.1 Object (đối tượng)U
*'<E/J)+*0G6o+0/q+
Page 11 of 86
<LL++0?/q+/A?+1b*0G-)
*c6(9B/A?/6%
3.2.2 Attribute (thuộc tính)U
;-(*0G%2-/?+8 T4)-B*0G
0/q%*0G /<- +
4*0G x<*-*+)9-/?
0+(C-)AjsW%
3.2.3 Schema (cấu trúc tổ chức)U
;<LAp/<-/q()*0G
%2-/?+@9(*0GC0GAp6@
-4+)W[m*%[<*0G34<L
)"*0G‡ˆ%PLd-)q6!0G+p)-
/qAp)"*0G<FI0G%)PL
;-/? +(<F680G0K04\L[LE6
8 !%b0B6A|,e6 6!0G<*
B%\/qg)6))3C4+
60G<*B%
r*0G0G"g)6))+*0G0G<*
76)g{s[^g)6){Ls/L=L_%g{s[0G9*A/q
6/*0G! 5 %
4 . Kiến trúc của Active Diectory
4.1 . ObjectsU
0" 3 }6„L+$(30" }6„L
)<<L<i6L<%
]}6„L)<<L<)6(! !k k*0G6
iL[L%S)}6„L)<<L</?)U{<L+
L+WL%
]i6L<)8AqG0G !G"*0G?%
08+}6„L)*0G/90GAp6EA0G
-B}6„L)<<<L<%
Page 13 of 86
4.2 Organizational Units U
}‚){<}{)'AM9*iL[L+
0G,L)8D*0G^}6„L_0G/q<|,!*0G
???-(AB6%}{x0G!)8/54
<6LsW0GAp)‡dC<6L !**"ˆ%2<F
/?}{/?-0<U
]C <8G (0/q+-!6A
0?(A4^<6]/<_+K
(6"(A0(A6*%
]r< 6"<*Dc4B0/q}{
<F/?*0G-<^gW)_%
4.3 DomainU
DsZt^sLLZLL< tL_>D[fW
^[f<=W)_%
gD0G(htn~SS+n~SY+n~Ynn~YQ%\3
9htAjUyyOOO%L=%y=%)%b)[fW
PLL+-N/O<PLLQRRS(DC <U
]b>/A?[fW%
];#L=L(0G936@AjsWp%
]b>T6A<•/<AjsWA9)L%
Page 15 of 86
[A?[fWe$9<*93
^)L_%CB;<=C 0{,
d;<C#G'!8<*+p)4C
([fW)L%
'!<F/?<*0G90'<"'!
6p<*0U
]r|?0G3?AjsW(-(A*
%
]g$9/A?^sPW_! 0G<*)0GAjsW8
^W6)sW_%
]WqG-0,4/)J%
]r!G"* /7^NL)L<<_9f<0U
+<76+01
Q%f}‘b’g“igsi}f”[fW%
gD[fW)L3)Ly<LL%L+30'J
[fW)L<LL/VL60"<U
]r)L E+<XF6/<[fW[sP}2Zh+4&
<LL??3%gxDAj;iB)L%
]PLL4 80G4&+! (c
9AjsW+CF))L[fW}ttZh+CA4
AjsW (9A+ :L)<6L< Aj
))%
+ !*9Aj[P<LL6@[fW3) }6
[P<LL//L<<))%
f3a
9}r !$3d[fW<LL
4. Nguyên lý làm việc của DHCP
Y60"9BsW//L<<[fW)L
+ sW)L<LLL<
+ sW)L<L==L
+ sW)L<L<L)L
+ sW)L<L O)L/LL
Page 19 of 86
4.1. IP Lease Request
b&4+)L<X6/<L<<L4)[fW[sP}2Zh+3)L)$
0AjsW4<X/qAj<L^o_)R%R%R%R
x3)L 6!AjB[fW<LL4<XF!Aj
6/<)Q~~%Q~~%Q~~%Q~~%m$[fW[sP}2Zh<X6/<
)4%
gxDAj;i^;L/iL<<)_^)Aj#
LO /L^/_<X0G<(,99)><*7
6/"6!/B3;i//L<<)3+
]]•/]]•=y))]]•<XL,o
CsW+[P+/L=)LO%%%
43W<)i//L<<^;i//L<<)URR]RQ]i~]Q]\~]Qt_
oxDLLB)L[fW<LL6!
0G)L>E4&!%
f3–
4.2. IP Lease Offer
![fWPLLG)^p)9AjsW)L_
80G[fW[sP}2ZhB)L<X())6@
2IJ[fW<LL[fW)L<X<F/?{[W
)a–a€^{<L[W)_%;<O<X e
IL 6/<+4&(=J<O
0G6/<J%
5. Cơ chế tự động refresh lại lease time
r[fW)L>)L<L0GsW//L<<o%LdAB[fW<LL
3#sW)L<Lj0G€%!L0dA^€_3[fW
)L< ()~R™^D)Y_<X5,)sW
//L<<"[fW>,6&%
[fW)L)$<XE<XE[fWhZv{ZP5!^<_!
[fW<LL>,6&%
Page 21 of 86
![fW<LLš<*š+<X()6@ [fWir
LLO^4")_"[fW)L+6o<*9
3"8894[fW<LL%![fW<LLš>!š+3[fW
)L<X!?<F/?93B%2!<€–%~™^–_
B4B+<X6/< [fW[sP}2Zh
/LAjsWB%2)$+ !"[fW<LL6&
4J)<X9869D[fW<LL %
!)L<L>!+3)L<X)8D/K)<F/?sW
//L<<)L<L%2[fW)L<<X6|&!34Aj0
6&%
Chú ý:
E^L<_)[fW)L3<X5LLO)sW//L<<
28! <5IC934[fW<LL*
/?!)L)8DLLOsW)L<Lš6@š*"
[fW)L0<U
2+/]]•))=yLLO%r<XE
[fWhZv{ZP![fW<LL/LC93+
)L<L"%20G)+! *)L<LsW//L<<J
) ;L‚L/<LL<%
f3€
+ ;L‚L/<LL<i‚L%
Page 23 of 86
f3˜
+ i‚L[fWPLL+84dAjsWB[fW
*‚L
f3nR
9}r]]•) ‰L<=<%
7.Cấu hình một DHCP server
7 .1. Tạo và cấu hình một Scope
+ PL) (sWG)>,A4[fW<LL
(/q9)L4&4Aj%^
/q)L<=[fW_%
+ b6|&93LOPLO‚/+E[fWKi/<L
)<+
Page 24 of 86
f3nn
+ h) 4B[fW<LL*LOPL) LO
PL%
f3nQ
3PLL8U
—LU4B<L%
—[L<U<5()•C<L6A%
P9L,!?`3sWi//L<<hL,90<U
Page 25 of 86
Copyright: Tài liệu đại học ©