Shulou(Shulou.com)06/01 Report--

This article mainly introduces what are the new features of Windows Server 2016-ActiveDirectory. It is very detailed and has a certain reference value. Friends who are interested must finish reading it!

Windows Server 2016 time synchronization improvements, although time synchronization may only be a small detail, but it may be sufficient to affect the authentication and operation of the entire Active Directory deployment. Time synchronization involves ensuring that all domain members get accurate synchronization time from domain controllers and that these domain controllers are synchronized with some reliable sources.

Sometimes there are some problems that hinder inter-domain time synchronization: virtual machine clock deviation, time synchronization request failure, domain members set to servers that no longer exist to obtain time synchronization information, corporate laptops and other moving machines do not often connect to the domain and get time synchronization, and so on. Windows Server 2016 includes multiple domain time synchronization updates to help alleviate some of these issues, including:

Eliminate rounding errors that accumulate over time, resulting in synchronization errors.

Increase the frequency of synchronous adjustments, so deviation is not an important factor in time-based errors.

Improve the synchronization accuracy up to tens of microseconds, even if there is a time deviation, frequent and accurate adjustment can also solve the problem.

Improvement of active Directory federation service

Finally, the Active Directory Federated Authentication Service (AD FS) has a number of enhancements for software that authenticates and authorizes identities across security boundaries, including:

Conditional access control. Conditional access control allows administrators to set the minimum number of security baselines before allowing the machine to connect to any given application. These conditions may include multi-factor authentication, membership in a specific group, health of the device, patching and malware protection status, or several other options. This function is similar to network access protection, but it is not an attempt to protect wires; it is enforced on a per-application basis for finer control.

Use any LDAP3 (that is, LDAP V3, the third version of LDAP) active Directory with AD FS. Previously, in order to use AD FS,IT, you needed to set up a special Active Directory deployment that might contain a read-only domain controller or an Active Directory application mode domain. This requires considerable effort, especially in the case of mergers and acquisitions and cooperation with third parties, and is not worth the effort. You can now use any directory that supports LDAP3 (including open source directories), making it easier to integrate federated state-managed Office 365 applications into existing products.

OAuth/OpenID connections are supported. Web applications such as Salesforce,Microsoft Dynamics, social media software and other enterprise applications almost always use some kind of OAuth or OpenID to protect and manage identities. AD FS supports OAuth and OpenID in Windows Server 2016 to integrate these Web applications more directly into existing identity management deployments.

These are all the contents of the article "what are the new features of Windows Server 2016-ActiveDirectory?" Thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.