Here and welcome back.
Now, in the earlier video we were discussing about the basics of acting directly now continuing our
journey.
Today we'll be discussing about the Eatables military service.
Now, for those who have actually set up the active directory in the compromise, knows that this can
be challenging and quite time consuming process.
Now, some of the challenges when you set up the attack directly on pomace can be the provisioning of
the infrastructure it would be installing of the directress software.
It would be related to getting that application set up between their domain controllers for the high
availability, as well as the things like monitoring, batching and many more.
Now, the instances that I have seen in the organization, specifically the ones who have their on premise,
Eddie, the one thing that I have seen is that they do not really bad the active director since then.
So the Windows Server where the active director is running, they do not really bad ones, the active
directory set up and everything is working primarily because if you patch it, there can be certain
changes where things can.
So most of the instances they remain and best and also can have a lot of vulnerabilities that now in
order to overcome these challenges, which are Windows administrator would typically face, eatables
has come up with the direct service in the cloud.
So the database directress service is a managed service on the cloud that allows us to create directress
and let database experts handed and manage other things like the high availability, monitoring, backups,
recovery.
And let us know when you discuss about the directly servicing cloud.
There are three important components that we need to remember.
First one is the active directress service with Microsoft active directly.
So this is the actual Microsoft active director here.
Then you have a simple Aidi and then you have the EDI Connector.
So let's quickly look into it before we discuss in more detail.
So this is the directory service console.
And if you look good under the set up directly, there are a few options which are available.
The three important ones for today's video is the enablers manage the Microsoft active directly.
The second one is the simplicity and the third one is the Connector.
Now, for example, these are the three important things at a high level overview.
You should know about them and also know in which case one of them would be useful.
Now, the first one is the directory service with the Microsoft Aidi.
So the item is directory service for Microsoft.
It is powered by and actually Microsoft Windows Server active directly in the cloud.
Now, within a year, there are two types which are available.
One is the standard edition and second one is the Enterprise Edition.
So Standard Addition is recommended for small and midsize organizations, up to five thousand users.
And if you have more and you need capability of more objects, then you will have to opt for Enterprise
Edition, which is capable for larger deployments.
The second component that you should be aware is the EDI Connector.
So it is connected.
It basically acts as a proxy service that provides an easy way to connect the application England to
an existing on premise.
So you have an active directly in your on premise which is working at all the rules.
Policies are configured here and you have your applications within the cloud.
So if you want these applications to be any of it, you can make use of the connectors specifically
when the EDI is in on premise.
So in such cases, when a user logs into the application, the EDI Connector will forward the signing
request to your on premise active directly domain controller for authentication.
So your application is in cloud.
The user logs in your the request is forwarded to the on premise 80 for authentication and that is the
capability with the EDI Connector provides.
The third one is the symbol.
So a symbol.
It is a Microsoft active, directly compatible directly for the database delivery service that is powered
by this Sambar four.
So you can consider this to be a free version of Active Directory.
It is not a full fledged active directly from Microsoft, but it supports some of the essential features
of active directly so simple.
It supports the basic active military features like user accounts, group memberships, joining a Linux
domain or a Windows with.
Two instances, you have got a bruise with a single sign on group policies, etc., now it basically
provides a monitoring daily snapshot as well as recovery as part of this specific service.
So there are certain disadvantages of this service as well as we're discussing that, although it is
a compatible directress service, but it does not support all the features of a full fledged Microsoft
baby.
So some of the things that it does not support is that trust relationship.
Their DNA is a dynamic update, the schema extension, the multifactor authentication, the communication
of the S or even the FSA module transfer.
So at a high level, Wardo, just be aware about this.
Now, before we conclude, let's have a quick demo that will allow us to understand this topic in a
better detail.
So what I have done for today's demo, I have basically set up directly.
So let's go to the directories here and I have one directorially is set up.
Now, this is a simple IDP's directly service and decide this month as we are discussing even the simplicity
it provides basic features like user accounts, group membership, joining Linux domain, etc..
So if you need the basic features, you can opt with simple.
It is simple is much more cheaper then compared to the full fledged Microsoft 80 or so for today's demo.
What I have done, I have set up disemboweled and I had basically associated Linux with the simple Alerian.
So let me also show you this.
So I have an easy to instance here.
And what I have done is I have Boomin joined us to Instant's with the simple Adelia.
So what would typically happen is that any users who are present within the simplicity and depending
upon the permissions, that user will be able to log into the easy to instant's based on the credentials
which are specified Pollini.
So the users are stored in.
Similarly, the credentials are also stored in simplicity and through those you can connect to the easy
to understand.
So let's try it out.
So coming back to the.
This is as simple as this is where we are basically specifying the users associated.
So you're making use of the administrator user and simply did not exempt dot com.
And this is basically the IP address of the server.
So now let's press enter and it is asking for the password.
So let's quickly add a password here.
And you see that we are connected to the Ekta instance, so this credentials through which we are connected
to the U.S. to instance, they are stored in the same place that we have created.
Great.
So I hope at a high level or will you understood what the directress services are now?
Again, we took a simple example that the username and password, which was stored in the symbol, it
was used to connect to the U.S. to instance.
When it comes to the Microsoft data, if you are to username and password stored, then you can do a
lot of things like you can install identity Breuker like IDFC and through the username and password
you can even connect to the eyewitness account.
You can connect to various other applications which are running in your investments.
Essentially, you will just have a single username and password stored within your active directorate.
And from that you will be able to login to all the applications as well as the cloud environments which
are running in your organization.
So a very powerful thing can be achieved here.
So that's the high level overview with this will conclude this video.
I hope this video has been informative for you.
And I look forward to see you in the next video.