資源描述：
《How the Global Catalog Works》由會(huì)員上傳分享，免費(fèi)在線閱讀，更多相關(guān)內(nèi)容在行業(yè)資料-天天文庫。
1、Updated:June3,2010AppliesTo:WindowsServer2003,WindowsServer2003R2,WindowsServer2003withSP1,WindowsServer2003withSP2,WindowsServer2008,WindowsServer2008R2Inthissection·GlobalCatalogArchitecture·GlobalCatalogProtocols·GlobalCatalogInterfaces·GlobalCatalogPhysicalStructure·Gl
2、obalCatalogProcessesandInteractions·NetworkPortsUsedbytheGlobalCatalog·RelatedInformationInamultidomainActiveDirectory?DomainServices(AD?DS)forest,theglobalcatalogprovidesacentralrepositoryofdomaininformationfortheforestbystoringpartialreplicasofalldomaindirectorypartition
3、s.Thesepartialreplicasaredistributedbymultimasterreplicationtoallglobalcatalogserversinaforest.NoteInWindows?Server??2003andMicrosoftWindows??2000?Server,thedirectoryserviceisnamedActive?Directory.InWindowsServer?2008?R2andWindowsServer?2008and,thedirectoryserviceisnamedAc
4、tive?DirectoryDomainServices.TherestofthistopicreferstoAD?DS,buttheinformationisalsoapplicabletoActive?Directory.Theglobalcatalogmakesthedirectorystructurewithinaforesttransparenttouserswhoperformasearch.Forexample,ifyousearchforallprintersinaforest,aglobalcatalogserverpro
5、cessesthequeryintheglobalcatalogandthenreturnstheresults.Withoutaglobalcatalogserver,thisquerywouldrequireasearchofeverydomainintheforest.Duringaninteractivedomainlogon,thedomaincontrollerauthenticatestheuserbyverifyingtheuser’sidentity,andalsoprovidesauthorizationdatafort
6、heuser’saccesstokenbydeterminingallgroupsofwhichtheuserisamember.Becausetheglobalcatalogistheforestwidelocationofthemembershipofalluniversalgroups,accesstoaglobalcatalogserverisarequirementforauthenticationinamultidomainforest.Assuch,anidealdistributionoftheglobalcatalogis
7、tohaveatleastoneglobalcatalogserverineachAD?DSsite.Whenaglobalcatalogserverisavailableinasite,theauthenticatingdomaincontrollerisnotrequiredtocommunicateacrossaWANlinktoretrieveglobalcataloginformation.Inbranchofficescenarios,itisoftennotfeasibletodeployaglobalcatalogserve
8、rineverybranchsite.Atthesametime,itisnotcosteffectivetocontactaglobalcatalogserveroveraWA
