Lời nói đầu
!"#$%&!'()*"
+,-+.+/0%%
1)!2+3
/45(6)*)" -.%7
89)-2!:;<=.>
.5?((@A.B=
/4.CC.>2/D
C%
1;E.>*A(@.F
.C.>?**++
5(7+-4)G7HIJ
0
KJ3&F!/7L,,6.F.@>.
KM;E.N.OPLLQRRS3&B(1:NLK
.> 3F!%
1
Chương I. Giới Thiệu Hệ Điều Hành Window Server 2003
I. Giới thiệu về Hệ Điều Hành Window Server 2003
N.O;PLLQRRS);(TABN.O;PLL/4
(!8B;"35(/"U5(7*'+7'
.V.(@%W&;6;X25IB;(TN.O;PLL
QRRS+7* JY35(UNL5Z.+
P..Z.+ZL;LZ.[LLZ.
1. Các phiên bản của họ Windows Server 2003
35( AN.O;PLLQRRS/4! !#4
B(!5@&CA %\3Y35('5(
AN.O;PLLQRRS]NL5+P..^3T_+ZL;L^[_
[LL^6.J)_`B335(#4
&CaY5*$%W&!L;X25!'B
3+35(NL5)5n&A&TA
NL5&+5n :;<rLLr<PLL;^rrP_a+LO l.
\)^l\_+:;<iPW%Z%
[7+3)35(NL5 ()B(-4
A/%e'IC A
NL53.>+ #4& AOL5 &
!;E.>A%
1.2 Phiên bản Tiêu chuẩn (Standard Edition)
W35(P..;E.>B(ACc
8.@>/>^[L_+<)L+8+C.>+)L..@>
rLL.vKM%P6)8B-
c35(ABU
Directory services (Dịch vụ Thư mục)UW35(P.. (c#4&A
*"iL[LeA)A
3dA(@B%/(@;E.>>
9LB (@*/4iL[L+
3
-; ^gW `g W)_ .@ > .F3 BiL
[L%
Dịch vụ Internet: W35(P..5nrrPa%R8.@>NL5
sWw/& ;E.>2 ANL5/
.@>65?(^l\`LO l.\)_%Ccl\e
BANL5p.2^;_NL5;L'+;t3& !
*A)L*SQAn8 (c*)#
*%
Các dịch vụ cơ sở hạ tầng: W35(P..5n.@>:;<[fW
PLL+[L P;L^[P_ PLL+ N.O; rLL L PLL
^NrP_PLL+8.@>'5(5 3
rLL%
Định tuyến TCP/IP ^WxrWh_U:A35(P..
.=/4=+-c5(7rW^rWPL]rW;L_D+];E.>J
-;*=.J)/" B3+-c/)Ers`
@)7*")n.J)KrLL-c;E
.>W5)qLr<;L^Wqr_`8 (c5(7.F3=
5? C7;*%
1.3 Phiên bản Doanh nghiệp (Enterprise Edition)
W35(ZL;L/4! !3A82
AIC.vK)"%W35( 35(P..
A!DC#4&C%-.>U\(ZL;L#4*•5,E)-;
"Y5A5(P..*SQg\5"hi:;" (cA5(
P..j)Yg\%
W35(ZL;L5I;3;*-c
5(P..+5n&;U
Microsoft Metadirectory Services - MMS (Dịch vụ Siêu Thư mục Microsoft)U
Metadirectory 5(8)/>A/>`/'-4B
n/>'+*8%::Pe$ !
4iL[L".@>/> +
2I8(B3%W35(ZL;L
j8#4::P ()&B::PF;F+&B
5
5()8K:;<;)PLL^[@>/8:;<]:P_
dM7"*::P%
Server Clustering (Chuỗi Máy chủ)U#A)A/
)/A'8 (c;~;
C.>%-;~;/4o)2
AC.>/465*BA#+((3#
A8 (c@)#!58 2A5@;F*%A
#+/4)$+B (c7!n.J)
+/))/J)"^PLiLLO ]Pi_+e
$)/4.2pn.J)';D%W35(ZL;L
/465IL %
iL[L/4)";"N.O;QRRR
PLL/46*'N.O;PLLQRRS+D
&AB%N.O;PLLQRRSiL[L
8!+/4).L;LL+!8(*/4
+n;L+;+L+L+)L;;%
1"/.pd(@3+iL[L8 2
-8$K.V.7()G8(3%
1.1.Tại sao cần thực thi Active Directory?
;*)G.)G(6M3%:;<iL[L/4
,L/)5/"! ;"N.O;PLLY%R.
7-A;.)L%iL[L'!(@7
35%w8 (c.FFI
.F dB.))L/4 .%
iL[L;XF()G;FBJ.))L5(
(/4.2%/.p78(33
'!c7)&%8(3/45(5D
'!5(7 +'!5(7 7./
.pBA#7*"3%
iL[Lec8+8.))LA
3.V.%*/4()G/45(
7
-;gW)L;%b6)2ICC57)
+e()G.V.A(@%:d.p7
8k)iL[L (c()G*/453
B%
1.2.Những đơn vị cơ bản của Active Directory
iL[L/4IC5?;E.>Y '@
8$>%\*'@/4<L;+.+•)
;L%
/" N.O;+5B B-].
))L^W[_5B B5 ]5 .))L^\[_)
)L/4A-;E.>
BN.O;%N.O;=;E.>G/DB()G;F7*"
3^C.>++0_/.p%/.p
j&c7B)73+J3
?3;*A %
:A/45!!/W[+()G';D.J)/.p:;L
B%:d;*A /4! !/\[%W[E@
‚5(';D.J)!\[%:\[/
9
W[!AW[5@)#w4$65?)n!
57%
1"N.O;QRRRPLL+ .))Lk/4.2+)L
AW[\['5(/4!5DiL[L%/.pw
B656dB(@%\3iL[L+
/.pAdB(@.F3|z%
B 5@!5D;*)/4YR%RRR/.p%BiL[L
()G*/4%12 nW[\[3iL
[L;E.>5(;)];LL)8(.))LB
%
|•);M)'e()G.V.';"
B%|ze5/4 (c)&/+5
+,|z"!&%:d.pBw-8B.t%
$5@,"+32.V.k!v/;
"|zw3!%
L@o+sites )CrW;5L)3 !B7
J;%\?;E.>;L+5 ;(;*)/4
)/)/4B(3)3 !Ni7%
1.3.Infrastructure Master và Global Catalog
6U
- />*
- +#)
- |•;+#|•)
- |•);^'@+5+0_+|z
- r..);^+n/+<)L3;t+€/
L_
:/>l[iW/46*JBA%:#A
35(;A/>I/4n5L ‚%
11
(@3&(l[iW 2 !iL
[L+&8l[iWJ.> 2 !/4)/
';D.J)iL[L%
1.5.Sự quản lý Group Policy và Active Directory
q!iL[L{{$(B7!gW)%
(@3;E.>gW)iL[L@o
!)7/.p-%!)7/482/4
)/gW)|5ƒL;^gW|;_+&;;X/4 !4"
*/4iL[L+n.;L%b6-)'!A!
.>I-/.p/N.O;%
()GgW)+(@382>
!)7.L; 3-/.p+!de7*"
<)Ld/>53%
3$w&(gW|/4;E.>/!%
gW)|5ƒL/4.>LCF;U-;5/4;E
.>/"+;)-;;L+-;B+-;/4;E.>
|z3%„+*/4/.pd-j
B;LdB+27$;Xj7gW|)3 !";L
dB%
gW|/46&35UgW)L)L
'@IC|z^|•)z_%P$AB(
@357()GK57M%
3 . Diectory Services
3.1. Giới thiệu Directory Services
[LPLL;^.@>.5_)*C[P%[r
/'2()G+ 7%[@>.5).@>';D
)B(2*i[%:*"J-c/4
A:;<%
3.2 Các thành phần trong Directory ServicesU
13
b&3+5(5!/4J&83.@>.5…
\;;.@>.5";I)/;*%(BC
.;AB*/4 w/-)3
!*/4%
3.2.1 Object (đối tượng)U
*';D.J)+*/45n+/.p+
;LL++/>.p+.@>+0b*/4-)
*c5(8A.@>.5%
3.2.2 Attribute (thuộc tính)U
:-(*/4%1-.>+7 T3)-A*
/4/.p%*/4 .;- +
3*/4 w;*-*+)8-
.>/+(B-)@jrW%
3.2.3 Schema (cấu trúc tổ chức)U
:;L@o.;-.p()*
/4%1-.>+?8(*/4B/4@o5?
-3+)W[l*%[;*/423;L
)"*/4†‡%PLd-)p5!/4+o)
-.p@o)"*/4;EI/4%)PL
,L).5A.5i[%
D57 !%b/A5@{,e5 5!/4;*
A%\.pg)5))2B3+
5/4;*A%
q*/4/4"g)5))+*/4/4
;*65)gzr[^g)5)zLr.L<L_%gzr[/48*@
.p5.*/4! F %
4 . Kiến trúc của Active Diectory
4.1 . ObjectsU
/" 2 |5ƒL+$(2/"
|5ƒL);;L;i5L;%
15
]|5ƒL);;L;)5(! !k k*/4
5iL[L%S)|5ƒL);;L;.>)Uz;L+
L+WL%
]i5L;)7@p4/4 !4"*/4>%
/7+|5ƒL)*/4.8/4@o5D@/4
-A|5ƒL);;;L;%
4.2 Organizational Units U
|•)z;|z)'@M8*iL[L+
/4,L)7C*/4^|5ƒL_/4.p;{,!*
/4 >>>-(@A5%|zw/4!)7.F
3;5LrW/4@o)†dB;5L !**"‡%1
;E.>|z.>-/;U
]B ;74 (/.p+-
! 5@ / > ( @ 3 ^;5]
.;_+K(5"(@/(@5*%
]q; 5";*Cc3A/.p
|z;E.>*/4-;^gW)_%
4.3 DomainU
[)'@Cc*A8$)iL[L%)
,+ICrZs^rLLZLL; sL_=C[fW
^[f;<W)_%
gC/4(hsm}SS+m}SY+m}Ymm}YQ%\
28hs@jUxxOOO%L<%x<%)%b)[fW
PLL+-N.O;PLLQRRS(CB ;U
]b=.@>[fW%
]:#L<L(/4825?@jrWo%
]b=T5@;~.;@jrW@8)L%
[@>[fWe$8;*82
^)L_%BA:;<B /z,
17
d:;B#4'!7;*+o)3B
([fW)L%
'!;E.>;*/48/';"'!
5o;*/U
]q{>/42>@j rW (-(@*
%
]g$8.@>^rPW_! /4;*)/4@j rW 7
^W5)rW_%
]Wp4-/,3.)J%
]q!4"* .6^NL)L;;_8f;/U
+;65+/0
2 . HOẠT ĐỘNG CỦA GIAO THỨC DHCP.
gC[fW)L2)Lx;LL%L+2/'J
[fW)L;LL.VL5/";U
]q)L D+;XE5.;[fW[rP|1Zh+3&
;LL>>2%gwC@j:iA)L%
]PLL3 7/43&+! (c
8@jrW+BE))L[fW|ssZh+B@3
@jrW (8@+ 9L);5L; @j
!*8@j[P;LL5?[fW2) |5[P;LL
..L;;))%
21
f2a
8|q !$2d[fW;LL
4. Nguyên lý làm việc của DHCP
Y5/"8ArW..L;;[fW)L
+ rW)L;LLL;
+ rW)L;L<<L
+ rW)L;L;L)L
+ rW)L;L O)L.LL
4.1. IP Lease Request
b&3+)L;X5.;L;;L3)[fW[rP|1Zh+2)L)$
/@jrW3;X.p@j;L^n_)R%R%R%Rw
2)L 5!@jA[fW;LL3;XE!@j5.;)
Q}}%Q}}%Q}}%Q}}%l$[fW[rP|1Zh;X5.;)3%
gwC@j:i^:L.iL;;)_^)@j#
LO .L^._;X/4;(,88)=;*65
."5!.A2:i..L;;)2+]]Œ
.]]Œ<x))]]Œ;XL,n
BrW+[P+.L<)LO%%%
32W;)i..L;;^:i..L;;)URR]RQ]i}]Q]\}]Qs_
nwCLLA)L[fW;LL5!/4
)L=D3&!%
22
f2•
4.2. IP Lease Offer
![fWPLL4)^o)8@jrW)L_
7/4 [fW[rP|1Zh A)L;X())5?
[fW|ssZh+J 9L/;U
)a•a•^z;L[W)_%:;O;X e
IL 5.;+3&(<J;O/4
5.;J%
5. Cơ chế tự động refresh lại lease time
q[fW)L=)L;L/4rW..L;;n%Ld@A[fW;LL
2#rW)L;Lj/4•%!L/d@^•_2[fW
)L; ()}R•^C)Y_;XF,)rW..L;;
"[fW=,5&%
[fW)L)$;XD;XD[fWhZuzZPF!^;_!
[fW;LL=,5&%
![fW;LL‘;*‘+;X()5? [fWiq
LLO^3")_"[fW)L+5n;*82
"7783[fW;LL%![fW;LL‘=!‘+2[fW)L
;X!>;E.>82A%1!;••%}•^•_A
3A+;X5.;[fW[rP|1Zh.L@jrWA
24
%1)$+ !"[fW;LL5&3J);X
8758C[fW;LL %
!)L;L=!+2)L;X)7C.K);E.>rW..L;;
)L;L%1[fW)L;;X5{&!23@j/5&%
Chú ý:
q D^L;_)[fW)L2;XFLLO)rW..L;;
17! ;FIB823[fW;LL*
.>!)L)7CLLOrW)L;L‘5?‘*"[fW
)L/;U
1+.]]Œ))<xLLO%q;XD
[fWhZuzZP![fW;LL.LB82+)L;L
"%1/4)+! *)L;LrW..L;;J)
<xL)L;L%l$+;XD![fW;LL[fWhZlZiPZ%P)
+)L;X )3)"LO 5?WxrWJ%