AD Reading: Windows Server 2012 Active Directory Features

The following are extremely useful resources for Windows Server 2012 Active Directory Features.

Windows 2012 Features

• TechED: What’s New in Active Directory in Windows Server 2012 (Dean Wells’ presentation at TechEd)
• How many Windows Server 2012 domain controllers do I need initially and where should I put them?
• PowerShell version 3 commandlets including Active Directory Replication and Topology:Introduction & Advanced Topics

Group Managed Service Accounts (gMSA)

• Getting Started with Group Managed Service Accounts
• Group Managed Service Accounts Overview
• Windows Server 2012: Group Managed Service Accounts

RID Protection

• TechNet Article: Managing RID Issuance
• ASKDS Blog Article: Managing RID Issuance in Windows Server 2012

DC Cloning & SafeGuarding

• Virtual Domain Controller Cloning in Windows Server 2012
• Microsoft Article: Introduction to Active Directory Domain Services (AD DS) Virtualization (Level 100)
• Microsoft Virtual Machine Generation ID Whitepaper document
• Virtualize your Windows Server 2012 domain controllers
• Things to consider when you host Active Directory domain controllers in virtual hosting environments
• Virtualized Domain Controller Deployment and Configuration
• ms-DS-Generation-Id Attribute
• Virtual Domain Controller Cloning in Windows Server 2012
• Safely Cloning an Active Directory Domain Controller with Windows Server 2012 – Step-by-Step
• Virtualized Domain Controller Deployment and Configuration
• New-ADDCCloneConfigFile

Dynamic Access Control (DAC)

• Introduction to Windows Server 2012 Dynamic Access Control
• Understand and Troubleshoot Dynamic Access Control in Windows Server 2012 (Word doc download)
• Getting started with Central Access Policies – Reducing security group complexity and achieving data access compliance using Dynamic Access Control
• MSDN Article on Dynamic Access Control (DAC)
• DAC Scenario

Kerberos FAST

• RFC6113   A Generalized Framework for Kerberos Pre-Authentication
• What’s New in Kerberos Authentication
• Access Control and Authorization Overview– covers domain requirements for Kerberos armoring and group policy settings.

Kerberos Constrained Delegation Enhancements

• Kerberos Constrained Delegation Overview
• How Windows Server 2012 Eases the Pain of Kerberos Constrained Delegation

o   Part 1

o   Part 2

• [MS-SFU]: Kerberos Protocol Extensions: Service for User and Constrained Delegation Protocol Specification

Kerberos Proxy

• Kerberos Authentication Overview
• Enriched Remote Access experience in Windows Server 2012
• Delegation of Authentication
• [MS-KKDCP]: Kerberos Key Distribution Center (KDC) Proxy Protocol