Sunday, August 25, 2013

Q&A for AD LDS

Here are some Q&A regarding for AD LDS (Active Directory Lightweight Directory Services)

Q: What is AD LDS ?
A: Good details that define the LDS can be found here
http://technet.microsoft.com/en-us/library/cc754361(v=ws.10).aspx

Q: How can I know which Instance are running and on which port?
A:
  1. Open CMD
  2. DSDBUTIL
  3. List Instance
The return will be similar to this:












Q: How do I know the number of servers replicating the Instance?
A: Several method, the one of them is using DSMGMT (its similler to NTDSUTIL)

dsmgmt: roles
fsmo maintenance: connection
server connections: connect to server in my case Server Name is TMG and the port is 4000
# Incase the instances is hosted on a Domain Controller make sure to write the port number or you will be connected to windows active directory
Binding to tmg:4000 ...
Connected to tmg:4000 using credentials of locally logged on user.
server connections: quit
fsmo maintenance: select operation target
select operation target: list site
Found 1 site(s)
0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={B58A2601-7FFB-49D2-
8B7B-6317403594AB}
select operation target: Select site 0
Site - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={B58A2601-7FFB-49
D2-8B7B-6317403594AB}
No current domain
No current server
No current Naming Context
select operation target: list servers in site
Found 1 server(s)
0 - CN=TMG$TestInstance,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={B58A2601-7FFB-49D2-8B7B-6317403594AB}


Note that the Server name is combined with the Instance Name

Another Method: simply use Active Directory Site and server Console
Right click on the tree root, select Change Domain Controller
Write the server that hold the instance with the port, ServerName:Port

















Q: Can I have the instance running on my DC?
A: Yes you can, and you have several instances, each one with different port.

Q: Can I sync the AD LDS with AD DS?
A: Yes, read this http://www.thegeekispeak.com/archives/64

Q: How can I force replication for AD LDS?
A: repadmin /syncall ServerName:Port ApplicationDN

Q: Is there any roles for AD LDS?
A: Yes, There are 2 roles "Schema Master - Naming Master", They also can be seized or transfer


Like it, please share or comment.
Thanks

No comments: