Table of Contents
Advertisement
Aurora Edit Security
Configuring the Domain Controller
A Domain Controller is a separate machine running Windows 2003 Server software
and con gured with Active Directory. If purchased from Grass Valley, a Conform
Server is used. If the sole responsibility of the machine is to act as a domain controller,
SMG- or customer-furnished equipment may be used, provided that it meets the
speci cations necessary to host Windows 2003 Server.
Guidelines
In general, you need to follow these guidelines for the Domain Controller:
Each news organization has different infrastructure and policies regarding the
con guration of domains. What NewsShare SAN security requires is an Active
Directory zone with at least one dedicated Windows 2003 Server domain controller;
there are several ways to achieve this, and the choice appropriate for your organization
depends on your organization s culture, infrastructure, and IT policies.
In planning, you need to determine the relationship of the new domain to its tree;
whether it will use integrated, delegated, or standalone DNS; and whether the domain
controller s mode will be mixed, in order to interoperate with pre-Windows 2000
domain controllers, or native, allowing advanced features, particularly greater
opportunity in con guring user groups. The recommended con guration to effect the
most exible control of the technical domain is to run integrated DNS on a native-mode
domain controller.
This chapter details two of the many ways to set up a domain controller with Active
Directory:
128
Aurora Edit Installation Guide
The Domain Controller cannot be an FSM.
A separate Domain Controller and related domain node should be allocated to the
technical LAN subnet. This Domain Controller should also have suf cient access
to all related LANs to establish trusts and provide authentication services.
A Conform Server can be used to host another Aurora Edit product, SmartBins.
The domain controller may be remote to the SAN, but needs high availability and
direct con gurability by your newsroom engineering department.
Consistent with the Windows domain model, the domain controller may also use
a backup within the SAN subnet.
You can either create a Domain Controller as a new domain tree or as a child
domain to an existing Domain Controller on your network.
For normal newsroom operation, if the domain controller is a member of a forest
or tree, the Domain Controller can be subordinate: trusting but not trusted.
First node in a domain tree, integrated DNS, (mixed-mode) permissions compatible
with pre-Windows 2003 servers.
Child node in an existing domain tree, (integrated) DNS in the parent, (native-mode)
permissions compatible with Windows 2003 servers and higher.
4 October 2010
Advertisement
Table of Contents
