"Azure AD is not AD in the cloud" I’ve said many times in past videos. But what IS AD then? Well in this video I answer that! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 Thanks for watching! ☁🤙💪
I'm a long time AD admin/engineer/architect since the Windows 2000 days. Just wanted to say this was an excellent over view and I will be recommending it to some of my colleagues to better understand AD under the hood. I even learned a couple things I didn't know about!
Microsoft discarding MCSA so early was such a bad decision. The study path for Windows server was so critical in teaching you not just how to use windows servers but also sys admin practices. I feel bad for the new comers without this knowledge getting in to the workspace.
Actually true, this is required by younger professionals who are working on AD without any conceptual knowledge. I take AD interviews and have never identified anyone with such skills.
I have found AD to baffle some of the newer folks getting into IT. It's just so much different (and both good and bad ways) from newer auth and 'directory' solutions. I put directory in quote because most are just glorified address books focused on people and not resources or vice versa. Combining these as principles all of thier own with unique attributes is one thing AD does so well. This combined with security delegation aspects (on such granular levels nothing else comes close to) is one of the reasons why AD is still so prevalent today despite being a little long in the tooth. In any case traditional AD is going to be around for at least a couple more decades so It folks need to know the basics.
John, excellent video, very important knowledge for newer IT members that they may have missed if they started with the cloud. What do you think about doing a case study series where you take an existing lab network for the Justice League, with dc, exchange, sharepoint, file, rds, rras vpn, print services, and a workstation; and then use the series migrating the environment into modern AAD, MS365, Azure Files, AVD etc?
Love that fact that you're creating a vid about AD on your Azure channel! Most companies still run On-Prem or Hybrid so this stuff is important to know. As always you're rocking it hard. Thanks! 🤙
Fantastic video John. I hope I had this video back in my time instead of 600 pages to prepare for the MCP path of MCSA. This will be definitely the video to share with some colleagues.
Thanks John - I found it really helpful to watch this prior to reading the Microsoft Online Docs for AD DS. It's much easier to visualize and digest all the minutia of the docs when you have the big picture to hang it on. I really appreciate your style and cadence as well.
John, thank you so much for your time and effort to make these videos. Great information and I’ve learned so much from your content. Much appreciated!!!
Love this video! For someone who grew up with cloud being a mature offering and the preferred approach, for most use cases, this is really helpful to understand historic tech context!
Generic comment to show my appreciation. Keep winning John! I've worked in IT for over a decade, from Service Desk up to SysAdmin and, as such I have worked with AD for a long time but regrettably never did any official certs. I usually score quite high on tests related to AD but I found this video enormously helpful, I learned so much. Thanks bigly John! In a generic way of course 😛
I have been working with AD for more than half a year, but I am still confused. After looking at this picture, I suddenly understood what site link, PDC, and inter-domain replication are. Thank you John.
This is brilliant, perfect for those who want to understand how AD DS actually works. You have painted a very clear picture on how all this works and ties in together. Excellent video
How would sites come into play if I have two sites connected by 20 Gb fiber with about 1-2 ms latency? Right now I have it architected as a single AD site and it's worked well but idk if anything of value would be gained by separating into different sites.
if the link broke the services would still try and equally use the DCs in the other but if can't talk would try and use others. If you broke into separate would always use local but would slow down replication between them.
Old school AD guy here. Cloud identity still makes my head spin. It's just so disjoined and difficult to get right when the on-prem environment is such a mess. Yes, 90% of AD implementations out there are a heap. They are over 2 decades old after all.
This has taken me years to learn. Even though I use it on a daily basis, it's as if I was a taxi driver and drove passengers all over the city, yet this showed me the whole map of the city I've been driving for years. I havent seen all of your videos, but do you have a shirt that says "Bro do you even Azure?" (instead of lift).
I am repeating myself but great video John ! One little question : you demonstrated Forest root trust between rood domain in the same forest. Don't we say in that context ? - Forest trust between different forests - Tree-Root trust between root domain in the same forest ?
What? Just in time!!! In my new job I encountered some alerts related to AD that I have to investigate, and nothing bothers me more than doing something I don't understand, thank you very much for this!
I live a breathe this stuff, and when this came up in my feed I thought it would be an interesting watch. Just have to say that never in a month of Sundays could I have put together such a clear and digestible explanation! Highly recommend this to anyone.
My college offers a Microsoft pathway for cybersecurity that dabbles with active directory and Azure but I'm already almost done with the cisco/network heavy pathway. Would you recommend learning AD and azure from third party sources/or on the job( if applicable) or formal education?
I would post this question to Reddit to get broad input and best guidance. I learn by doing and researching but everyone is different. I’m sure both your options are great but get those broader inputs. Best of luck!
I looked it up and docs say 5. docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj852172(v=ws.11). Maybe it reduced with newer version?
"Azure AD is not AD in the cloud" I’ve said many times in past videos. But what IS AD then? Well in this video I answer that!
Please make sure to read the description for the chapters and key information about this video and others.
⚠ P L E A S E N O T E ⚠
🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there!
🕰 I don't discuss future content nor take requests for future content so please don't ask 😇
Thanks for watching!
☁🤙💪
I'm a long time AD admin/engineer/architect since the Windows 2000 days. Just wanted to say this was an excellent over view and I will be recommending it to some of my colleagues to better understand AD under the hood. I even learned a couple things I didn't know about!
Love the shirt...now I feel old. 🤓
Actually some younger IT professionals should watch this. I have a few colleagues in the second level that are missing this essential knowledge :)
Microsoft discarding MCSA so early was such a bad decision. The study path for Windows server was so critical in teaching you not just how to use windows servers but also sys admin practices.
I feel bad for the new comers without this knowledge getting in to the workspace.
Actually true, this is required by younger professionals who are working on AD without any conceptual knowledge. I take AD interviews and have never identified anyone with such skills.
I have found AD to baffle some of the newer folks getting into IT. It's just so much different (and both good and bad ways) from newer auth and 'directory' solutions. I put directory in quote because most are just glorified address books focused on people and not resources or vice versa. Combining these as principles all of thier own with unique attributes is one thing AD does so well. This combined with security delegation aspects (on such granular levels nothing else comes close to) is one of the reasons why AD is still so prevalent today despite being a little long in the tooth. In any case traditional AD is going to be around for at least a couple more decades so It folks need to know the basics.
John, excellent video, very important knowledge for newer IT members that they may have missed if they started with the cloud. What do you think about doing a case study series where you take an existing lab network for the Justice League, with dc, exchange, sharepoint, file, rds, rras vpn, print services, and a workstation; and then use the series migrating the environment into modern AAD, MS365, Azure Files, AVD etc?
You can be proud of your shirt, keep smiling😁
I feel like I am back in time 20 years ago. :)))
lol. only 20? :-D
Love the shirt! I started visiting your site back when I was getting my NT 4.0 certification.
Awesome! Thank you!
Love that fact that you're creating a vid about AD on your Azure channel! Most companies still run On-Prem or Hybrid so this stuff is important to know. As always you're rocking it hard. Thanks! 🤙
Fantastic video John. I hope I had this video back in my time instead of 600 pages to prepare for the MCP path of MCSA. This will be definitely the video to share with some colleagues.
I really appreciate you for this video.take care
Thank you! You too!
Thanks John - I found it really helpful to watch this prior to reading the Microsoft Online Docs for AD DS. It's much easier to visualize and digest all the minutia of the docs when you have the big picture to hang it on. I really appreciate your style and cadence as well.
Glad it was helpful!
John, thank you so much for your time and effort to make these videos. Great information and I’ve learned so much from your content. Much appreciated!!!
Very welcome
Hi John Savill was waiting for this course from long time. First viewer
lol, wow, you were fast!
@@NTFAQGuy That's because of the quality of videos you post
Thanks John for your video I heard about your channel from one ofyour ex collogue while he was giving us windows 2022 training.
John I wanted to replicate all of your mind database and partitions in my mind's domain controller.
Lol, not much is up there ;)
I been watching some of your other videos. Awesome work on explaining ad domain service.
Brilliant refresher video, can't believe how much you got through in an hour, thanks so much. I also remember the BDC days! :)
Most waited content 😌
Love this video! For someone who grew up with cloud being a mature offering and the preferred approach, for most use cases, this is really helpful to understand historic tech context!
Thanks so much man
Brilliant overview of Active Directory. Well presented. Thanks for all the content you make.
My pleasure 🤙
amazing content
I think today this is a good starting point. NT? You go back. I was a part of upgrading Microsoft Datacenter from nt351 to 4.0. Bring back memories
Thank you John, I don't have prior experience with on-prem AD so this is very useful.
joyful video for learning today, thanks so much!
Thank you so much!
Excellent video again, this was for me the missing information about ADDS, very well explained
Life goals here: Knows what AD is and got the guns to stop you from questioning him
Great video but I got very distracted by how swole you are
Lol
John you did a wonderful job making this video. 10/10 thank you much.
Thanks John.
nice way to tie everything in and it made complete sense. Thank you.
Awesome video.
These are always great videos. Thank you for the content
Thanks
Very informative & clear! Was happy to learn some of the AD services deployment details I missed earlier. Thank you!
Dear John, It has been a great idea to make this video. Thanks.
before all this crap we had novell with ipx and no google lol
Lol
Generic comment to show my appreciation. Keep winning John!
I've worked in IT for over a decade, from Service Desk up to SysAdmin and, as such I have worked with AD for a long time but regrettably never did any official certs. I usually score quite high on tests related to AD but I found this video enormously helpful, I learned so much. Thanks bigly John! In a generic way of course 😛
Generic thank you ;) I appreciate that.
Fancy lecture! Thanks John!!!
Love this. Always learning and always refreshing. Thanks for this one too, John.
I have been working with AD for more than half a year, but I am still confused. After looking at this picture, I suddenly understood what site link, PDC, and inter-domain replication are. Thank you John.
Fantastic!
Thanks John!!! great video
This is brilliant, perfect for those who want to understand how AD DS actually works. You have painted a very clear picture on how all this works and ties in together. Excellent video
Glad you enjoyed it!
Holy Cow, I am new to Active Directory. I think I need a simpler course. LOL!
🤷♂️
How would sites come into play if I have two sites connected by 20 Gb fiber with about 1-2 ms latency? Right now I have it architected as a single AD site and it's worked well but idk if anything of value would be gained by separating into different sites.
if the link broke the services would still try and equally use the DCs in the other but if can't talk would try and use others. If you broke into separate would always use local but would slow down replication between them.
Please do more videos for on-prem stuff
John, you made me nostalgic while you were quoting Windows NT. This stuff is super awesome. I remembered my those days. I have a special place for AD.
Hehe, good old days :)
This was awesome !!! thank you for making this video, it really helped me understand AD without my eyes glazing over.
You're so welcome!
Old school AD guy here. Cloud identity still makes my head spin. It's just so disjoined and difficult to get right when the on-prem environment is such a mess. Yes, 90% of AD implementations out there are a heap. They are over 2 decades old after all.
Yes getting the on prem tidy first really can be a nightmare. :(
This has taken me years to learn. Even though I use it on a daily basis, it's as if I was a taxi driver and drove passengers all over the city, yet this showed me the whole map of the city I've been driving for years. I havent seen all of your videos, but do you have a shirt that says "Bro do you even Azure?" (instead of lift).
Yep it’s for sale on my charity t shirt store :)
I am repeating myself but great video John !
One little question : you demonstrated Forest root trust between rood domain in the same forest.
Don't we say in that context ?
- Forest trust between different forests
- Tree-Root trust between root domain in the same forest ?
Yes.
I really love you man
hehe, thanks :-D Glad I can help.
What? Just in time!!! In my new job I encountered some alerts related to AD that I have to investigate, and nothing bothers me more than doing something I don't understand, thank you very much for this!
Awesome, glad could help
I live a breathe this stuff, and when this came up in my feed I thought it would be an interesting watch. Just have to say that never in a month of Sundays could I have put together such a clear and digestible explanation! Highly recommend this to anyone.
Glad you enjoyed it!
I want one of those T Shirts. Where did you get it from?
My wife made it for me. Maybe I'll add to my charity T-shirt store :-)
@@NTFAQGuy Please. I want one.
Love the shirt ♥
🐶🤙
Thank you so much it's refreshed memory and removed dust :)
Glad it helped!
Hello John could you share the tool you use to make red rectangle on the screen? Thank you!
zoomit
Ooo an Admin OU. Someone's got a DIAD tiering model in place!
Lol, my ad is so old :)
This is amazing
Fantastic overview John! Love the shirt!
Thank you kindly!
My college offers a Microsoft pathway for cybersecurity that dabbles with active directory and Azure but I'm already almost done with the cisco/network heavy pathway. Would you recommend learning AD and azure from third party sources/or on the job( if applicable) or formal education?
I would post this question to Reddit to get broad input and best guidance. I learn by doing and researching but everyone is different. I’m sure both your options are great but get those broader inputs. Best of luck!
@@NTFAQGuy Thank you John and will do! On a positive note your series on azure is super useful! Instantly subbed
@@Maiden4eva1995 awesome, thank you
Kerberos default accepted time difference should be 2 min not 5 min. Else good Explanation.
Edit: John was right it is 5min. My bad!
Interesting, always thought was 5 tolerance. Live and learn :)
I looked it up and docs say 5. docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj852172(v=ws.11). Maybe it reduced with newer version?
@@NTFAQGuy oh yeah ur right, seems like I am outdated haha! 😂
I am sorry mate ur 100% right!
No harm, so many numbers to track ;) Does me good to double check.
Fantastic video !
Thank you very much!
Love the T-shirt ! I feel it from back in my young IT days 😂 …. Many many eons ago ….
I couldn’t resist :)