1 00:00:06,430 --> 00:00:14,920 The Active Directory data store contains information that aided is distributed to all domain controllers 2 00:00:15,130 --> 00:00:17,920 throughout the forest infrastructure. 3 00:00:17,920 --> 00:00:25,360 Much of the information that the data store contains is distributed within a single domain. 4 00:00:25,360 --> 00:00:34,930 However some information may relate to or replicate throughout the entire forest regardless of the domain 5 00:00:34,930 --> 00:00:42,990 boundaries to help provide replication efficiency and scalability between domain controllers. 6 00:00:43,150 --> 00:00:52,000 The Active Directory data is separated logically into several partitions each partition is a unit of 7 00:00:52,000 --> 00:00:58,340 replication and each partition has its own replication topology. 8 00:00:58,480 --> 00:01:06,880 The default partitions include the following configuration partition schema partition the main partition 9 00:01:07,210 --> 00:01:09,640 and application partition. 10 00:01:09,640 --> 00:01:17,110 Let's take a closer look at each of these partitions configuration partition the configuration partition 11 00:01:17,170 --> 00:01:25,780 is created automatically when you create the first domain controller in a forest the configuration partition 12 00:01:25,780 --> 00:01:35,560 contains information about the forest wide a tedious structure including which domains and sites exist 13 00:01:35,920 --> 00:01:40,230 and which domain controllers exist in each domain. 14 00:01:40,310 --> 00:01:48,760 The configuration partition also stores information about forest wide services such as Dynamic Host 15 00:01:48,760 --> 00:01:54,840 Configuration Protocol authorisation and certificate templates. 16 00:01:54,850 --> 00:01:59,530 This partition replicates to all domain controllers in the forest. 17 00:01:59,620 --> 00:02:06,530 It is smaller than the other partitions and its objects do not change frequently. 18 00:02:06,580 --> 00:02:10,000 Therefore replication is also infrequent. 19 00:02:10,030 --> 00:02:12,370 Next stop is schema partition. 20 00:02:12,490 --> 00:02:21,010 The schema partition contains definitions of all the objects and attributes that you can create in the 21 00:02:21,010 --> 00:02:29,670 data store and the rules for creating and manipulating them schema information replicates to all domain 22 00:02:29,680 --> 00:02:31,870 controllers in the forest. 23 00:02:31,870 --> 00:02:41,080 Therefore all objects must comply with the schema object and attribute definition rules ADT s contains 24 00:02:41,080 --> 00:02:46,360 a default set of classes and attributes that you cannot modify. 25 00:02:46,690 --> 00:02:54,730 However if you have schema admins or group credentials you can extend the schema by adding new attributes 26 00:02:54,730 --> 00:02:59,700 and classes to represent application specific classes. 27 00:02:59,710 --> 00:03:08,170 Many applications such as Microsoft Exchange Server and Microsoft System Center Configuration Manager 28 00:03:08,470 --> 00:03:15,700 may extend the schema to provide application specific configuration enhancements. 29 00:03:15,700 --> 00:03:24,100 These changes target the domain controller that contains the forest schema master role only the schema 30 00:03:24,100 --> 00:03:32,350 master can make additions to classes and attributes similar to the configuration partition the schema 31 00:03:32,350 --> 00:03:40,870 partition is small and needs to replicate only when changes a cure to the data that is stored there. 32 00:03:40,870 --> 00:03:47,020 This does not happen frequently except in those cases when the schema is extended. 33 00:03:47,020 --> 00:03:49,350 Next up is domain partition. 34 00:03:49,390 --> 00:03:56,950 When you create a new domain aid it is automatically creates and replicates an instance of the domain 35 00:03:56,950 --> 00:04:05,350 partition to all of the domains domain controllers the domain partition contains information about all 36 00:04:05,350 --> 00:04:14,380 domain specific objects including a user's groups computers organizational units and domain related 37 00:04:14,380 --> 00:04:15,790 system settings. 38 00:04:15,790 --> 00:04:23,830 This usually the largest of the eight it is partitions because it stores all the objects that the domain 39 00:04:23,860 --> 00:04:25,030 contains. 40 00:04:25,030 --> 00:04:33,090 Changes to this partition is fairly constant because every time an object is created deleted or modified 41 00:04:33,340 --> 00:04:39,340 by change changing and attributes well you those changes must then be replicated. 42 00:04:39,460 --> 00:04:47,860 All objects in every domain partition in a forest are stored in the global catalogue with only a subset 43 00:04:47,860 --> 00:04:50,140 of their attribute values. 44 00:04:50,140 --> 00:04:59,140 And finally application partition the application partition stores non domain application related information 45 00:04:59,500 --> 00:05:07,740 that might tend to be updated frequently or have a specified lifetime such as the domain name system 46 00:05:07,740 --> 00:05:16,500 partition when Active Directory integrated DNS is enabled an application typically is programmed to 47 00:05:16,500 --> 00:05:24,600 determine how its doors categorizes and user's application specific information that is stored in the 48 00:05:24,690 --> 00:05:32,290 Active Directory database to prevent unnecessary replication of an application partition. 49 00:05:32,310 --> 00:05:40,440 You can designate which domain controller is in a forest will host the specified applications partition 50 00:05:40,770 --> 00:05:48,780 unlike a domain partition and application partition does not store security principal objects such as 51 00:05:49,110 --> 00:05:50,360 user accounts. 52 00:05:50,700 --> 00:05:58,000 Additionally the global catalog does not store data that is contained in application partitions. 53 00:05:58,020 --> 00:06:06,780 The application partition size and replication frequency can vary widely according to usage. 54 00:06:06,780 --> 00:06:15,300 Use an Active Directory integrated DNS with a large and robust DNS zone of many domain controller Soros 55 00:06:15,440 --> 00:06:24,050 and client computers will result in the frequent replication of the partition and a small tip for you. 56 00:06:24,120 --> 00:06:34,200 You can use the Active Directory Services interfaces Ed or Ada DSA added to connect to the partitions 57 00:06:34,290 --> 00:06:35,580 and to view them.