Instalación de AD LDS (ADAM) en Windows 2008

Requirements for AD LDS Installation and Removal

AD LDS installation requirements include the following:

- A supported operating system such as W2008 Standard, Enterprise, or Datacenter
- An account with local administration access rights

To remove AD LDS from a W2008 server, you must log on to the server by using an account that has local administrator rights. You then do the following:

- Use Programs And Features in Control Panel to uninstall any instance of AD LDS youcreated after the role installation.

- Use Server Manager to remove the AD LDS role.

Take care to ensure that you remove all AD LDS instances from a server before you remove the role itself.

Remember that you need to remove all instances of AD LDS from a server before you can
remove the role from the server.

Installing AD LDS on Server Core

To install AD LDS on a Server Core installation of W2008, log on with local administrative
credentials to a W2008 member or standalone server running Server Core and enter the following
command:

start /w ocsetup DirectoryServices-ADAM-ServerCore

Note that this command is case-sensitive. Using the start /w command ensures that the command prompt does not return until the role installation is complete. You can verify that the role is installed and discover the role name (DirectoryServices-ADAM-ServerCore) by using the following command:

oclist | more

Granular Password Settings en Windows 2008

Hola a todos,
hoy vamos a contar la nueva funcionalidad de Windows 2008 "Granular Password Settings"

Como todos sabéis las Políticas de Password en Windows 2003 a través de la "Default Domain Policiy" solo permitían establecerlas y linkarlas a nivel de dominio, haciendo imposible el tener dos políticas de password diferentes

Este problema obligaba muchas veces en empresas donde era un requerimiento
a tener dos dominios distintos y hacer relaciones de confianza entre ambos.

Ahora Windows 2008 permite una política de password granular pudiendo tener mas de una "Password Policiy" en el dominio.

Os dejo un enlace sobre el tema , un virtual lab y un video explicativo:

AD DS: Fine-Grained Password Policies

http://technet.microsoft.com/en-us/library/cc770394.aspx

Granular Password Setting Video

In this video, Chris Henley shows you a new feature in Windows Server 2008 Active Directory that allows you to set additional password policies beyond the domain settings.

http://technet.microsoft.com/en-us/windowsserver/bb896051.aspx

TechNet Virtual Lab: Fine Grained Password Settings in Windows Server 2008

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032343981&EventCategory=3