‫‪11/25/2013‬‬

‫اﻟﺪﻟﯿﻞ اﻟﻔﻌﺎل‬
‫) ‪Active Directory ( AD‬‬

‫‪Network dept.‬‬
‫‪2nd level.‬‬
‫‪Eng.ebraheem alkoli.‬‬

‫ﺧﺪﻣﺔ اﻟﺪﻟﯿﻞ ‪Directory service‬‬

‫‪ ‬ھﻲ ﺧﺪﻣﺔ ﺗﻘﻮم ﺑﺎﻟﺘﺤﺪﻳﺪ و اﻟﺘﺤﻜﻢ ﻟﺠﻤﯿﻊ ﻣﻮارد اﻟﺸﺒﻜﺔ وﺟﻌﻞ ھﺬه اﻟﻤﻮارد ﻣﺘﺎﺣﺔ‬
‫ﻟﻠﻤﺴﺘﺨﺪﻣﯿﻦ واﻟﺘﻄﺒﯿﻘﺎت ‪.‬‬
‫‪ ‬ﻳﻮﺟﺪ ﻣﻌﯿﺎرﻳﻦ ﻣﺸﮫﻮرﻳﻦ ﻟﺨﺪﻣﺔ اﻟﺪﻟﯿﻞ ھﻤﺎ ‪:‬‬
‫‪x.500 - ١‬‬
‫‪Lightweight Directory Access Protocol (LDAP)- ٢‬‬
‫‪ ‬ﺑﺎﻟﻨﺴﺒﺔ ﻟﻠﻤﻌﯿﺎر اﻻول ﻓﮫﻮ ﻳﺴﺘﺨﺪم اﺳﻠﻮب ھﯿﻜﻠﻲ ﻟﺘﻨﻈﯿﻢ اﻟﻜﺎﺋﻨﺎت ﺑﻄﺮﻳﻘﺔ ﻣﻤﺎﺛﻠﺔ ﻟﺘﻨﻈﯿﻢ‬
‫اﻟﻤﻠﻔﺎت واﻟﻔﮫﺎرس ﻓﻲ ﻣﺤﺮك اﻟﻘﺮص اﻟﺼﻠﺐ ‪.‬‬
‫‪ ‬اﻣﺎ اﻟﻤﻌﯿﺎر اﻟﺜﺎﻧﻲ ﻓﮫﻮ ﻣﻌﯿﺎر ﺻﻨﺎﻋﻲ ‪ ، Industry Standard‬وﻳﻌﻤﻞ ﻋﻠﻰ ﺷﺒﻜﺎت ال‬
‫‪. TCP/IP‬‬

‫‪Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.‬‬

‫‪1‬‬
 ‫‪11/25/2013‬‬

‫ﻣﺎھﻮ اﻟﺪﻟﯿﻞ اﻟﻔﻌﺎل ‪What is Active‬‬

‫‪Directory‬‬
‫‪ ‬ﺧﺪﻣﺔ ﻣﻘﺪﻣﺔ ﻣﻦ ﺷﺮﻛﺔ ﻣﯿﻜﺮوﺳﻮﻓﺖ ‪ Microsoft‬ﻹدارة اﻟﺸﺒﻜﺎت وﻣﻮاردھﺎ وﻣﺴﺘﺨﺪﻣﯿﮫﺎ‬
‫وﺗﺨﺰن ﻓﯿﮫﺎ ﺟﻤﯿﻊ اﻟﺒﯿﺎﻧﺎت اﻟﻤﺘﻌﻠﻘﺔ ﺑﺎﻟﻤﺴﺘﺨﺪﻣﯿﻦ واﻻﺟﮫﺰة وﻣﻮارد اﻟﺸﺒﻜﺔ وﻗﻮاﻋﺪ اﻟﺒﯿﺎﻧﺎت‬
‫واﻟﺴﯿﺎﺳﺎت اﻻﻣﻨﯿﺔ ‪ ،‬وﻗﺪ ﺻﻤﻤﺘﻪ ﺷﺮﻛﺔ ﻣﯿﻜﺮوﺳﻮﻓﺖ ﻟﻜﻲ ﻳﺘﻮاﻓﻖ ﻣﻊ ﺑﺮوﺗﻮﻛﻮل ‪LDAP‬‬
‫)‪(Lightweight Directory Access Protocol‬‬
‫‪ ‬ﻳﺘﺤﻜﻢ وﻳﺤﺪد ﻛﻞ ﻣﻮارد اﻟﺸﺒﻜﺔ وﻳﺠﻌﻠﮫﺎ ﻣﺘﺎﺣﺔ ﻟﻠﻤﺴﺘﺨﺪﻣﯿﻦ‪.‬‬

‫‪ LDAP ‬ھﻮ ﺑﺮوﺗﻮﻛﻮل ﺻﻤﻢ ﻟﺘﺤﻘﯿﻖ إدارة ﻣﺮﻛﺰﻳﺔ ﻟﻠﺸﺒﻜﺎت ﻋﻦ طﺮﻳﻖ ﺧﺪﻣﺔ اﻟﺪﻟﯿﻞ‬
‫‪. Directory‬‬

‫‪Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.‬‬

‫ﺗﻌﺎرﻳﻒ ھﺎﻣﺔ ‪.‬‬

‫اﻟﻤﺠﺎل ‪: Domain‬‬ ‫‪‬‬

‫ﻋﺒﺎرة ﻋﻦ ﻣﺠﻤﻮﻋﺔ ﻣﻦ اﺟﮫﺰة وﻣﺴﺘﺨﺪﻣﯿﻦ وﻣﺠﻤﻮﻋﺎت ﺗﺮﺑﻂ ﺑﯿﻨﮫﻢ ﻋﻼﻗﺔ ‪ ،‬وﺗﺘﺸﺎرك ﻓﻲ ﺑﻌﺾ اﻟﺨﺼﺎﺋﺺ وﻟﮫﺎ ﻗﺎﻋﺪة ﺑﯿﺎﻧﺎت واﺣﺪة ‪.‬‬

‫‪: Forest‬‬ ‫‪‬‬

‫ﻋﺒﺎرة ﻋﻦ ﻣﺠﻤﻮﻋﺔ ﻣﻦ ال ‪ Domains‬ﻟﮫﺎ ﺧﺼﺎﺋﺺ واﺣﺪة ‪.‬‬

‫‪: Tree‬‬ ‫‪‬‬

‫ﻣﺠﻤﻮﻋﺔ ﻣﻦ اﻟﻤﺠﺎﻻت ذات ﻋﻼﻗﺔ ﻣﺘﻌﺪﻳﺔ ﺑﺈﺗﺠﺎھﯿﻦ )‪(Parent domain, Child domain‬‬

‫‪: Member Server‬‬ ‫‪‬‬

‫ﺟﮫﺎز ﻳﻌﻤﻞ ﻋﻠﻰ وﻳﻨﺪوز ﺳﯿﺮﻓﺮ وﻋﻀﻮ ﻓﻲ اﻟﻤﺠﺎل ‪ Domain‬وﻟﻜﻦ ﻟﯿﺲ ‪. DC‬‬

‫‪Stand-alone Server‬‬ ‫‪‬‬

‫ﺟﮫﺎز ﻳﻌﻤﻞ ﻋﻠﻰ وﻳﻨﺪوز ﺳﯿﺮﻓﺮ وﻟﻜﻦ ﻻ ﻳﻨﺘﻤﻲ ﻷي ﻣﺠﺎل )‪ ( Domain‬وﻳﻌﻤﻞ ﻓﻲ ﻣﺠﻤﻮﻋﺔ ﻋﻤﻞ )‪ ( Workgroup‬وﻟﯿﺲ ﻣﺘﺤﻜﻢ ﺑﺎﻟﻤﺠﺎل )‪.( DC‬‬

‫‪: Authentication‬‬ ‫‪‬‬

‫ھﻲ ﻋﻤﻠﯿﺔ اﻟﺘﺤﻘﻖ ﻣﻦ اﻟﺼﺤﺔ ‪ ،‬ﻳﺘﻢ ﻓﯿﮫﺎ اﻟﺘﺄﻛﺪ ﻣﻦ ھﻮﻳﺔ اﻟﻤﺴﺘﺨﺪم أو اﻟﺠﮫﺎز ﻗﺒﻞ ﻣﻨﺤﻪ اﻟﺼﻼﺣﯿﺔ اﻟﻮﺻﻮل ﻟﻤﻮارد اﻟﺸﺒﻜﺔ وﺧﺪﻣﺎﺗﮫﺎ ‪.‬‬

‫‪: Authorization‬‬ ‫‪‬‬

‫ھﻲ ﻋﻤﻠﯿﺔ اﻟﺴﻤﺎح ﻟﻠﻤﺴﺘﺨﺪم ‪ ،‬ﻳﺘﺄﻛﺪ ﻓﯿﮫﺎ اﻟﻨﻈﺎم أﻧﻪ ﻻ ﻳﻮﺟﺪ ﻣﺎﻳﻤﻨﻊ ﺻﺎﺣﺐ اﻟﺤﺴﺎب ) اﻟﺬي ﺗﻤﺖ اﻟﺘﺤﻘﻖ ﻣﻦ ﺻﺤﺘﻪ ﻓﻲ ﻣﺮﺣﻠﺔ اﻟــــ ‪Authentication‬‬
‫( ﻣﻦ ﺗﺴﺠﯿﻞ دﺧﻮﻟﻪ ﻟﻠﻨﻈﺎم واﻋﻄﺎءه اﻟﺼﻼﺣﯿﺎت اﻟﺨﺎﺻﺔ ﺑﻪ ‪.‬‬

‫‪Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.‬‬

‫‪2‬‬
 ‫‪11/25/2013‬‬

‫اﻟﻤﺘﺤﻜﻢ ﺑﺎﻟﻤﺠﺎل )‪Domain Controller (DC‬‬

‫‪ ‬ﻋﺒﺎرة ﻋﻦ ﺟﮫﺎز ﻳﻌﻤﻞ ﻋﻠﻰ ﻧﻈﺎم وﻳﻨﺪوز ﺳﯿﺮﻓﺮ ﺗﻢ ﺗﻨﺼﯿﺐ ﺧﺪﻣﺔ اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ ‪ AD‬ﻓﻲ ھﺬا‬
‫اﻟﻨﻈﺎم ‪ ،‬وھﻮ اﻟﻤﺴﺌﻮل اﻟﺮﺋﯿﺴﻲ ﻋﻦ ﻋﻤﻠﯿﺎت اﻟﺘﺤﻘﻖ ﻣﻦ اﻟﺼﺤﺔ ﻟﺠﻤﯿﻊ اﻟﻤﺴﺘﺨﺪﻣﯿﻦ‬
‫واﻻﺟﮫﺰة وﻋﻤﻠﯿﺎت ﺗﺴﺠﯿﻞ اﻟﺪﺧﻮل ) ‪ ( Logon‬واﻟﻮﺻﻮل اﻟﻰ ﻣﻮارد اﻟﺸﺒﻜﺔ ‪.‬‬
‫‪ ‬إذن اي ﺟﮫﺎز ﻋﻠﯿﻪ وﻳﻨﺪوز ﺳﯿﺮﻓﺮ ﻳﺸﻐﻞ اﻟﺪﻟﯿﻞ ‪ AD‬ﻳﻤﻜﻦ أن ﻧﻄﻠﻖ ﻋﻠﯿﻪ ﻣﺘﺤﻜﻢ ﺑﺎﻟﻤﺠﺎل‬
‫‪. DC‬‬

‫‪Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.‬‬

‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل ( ‪Configuring Active Directory‬‬

‫‪Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.‬‬

‫‪3‬‬
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

4
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

5
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

6
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

7
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

8
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

9
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

10
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

11
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

12
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

13
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

14
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

15
 11/25/2013

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept. 2nd lev el. Eng.Ebraheem Alkoli.

Configuring Active Directory ( ‫اﻋﺪاد اﻟﺪﻟﯿﻞ اﻟﻨﺸﻂ )اﻟﻔﻌﺎل‬

Network Dept.
2nd level.
Eng.Ebraheem Alkoli.

16