Configuring the Domain Controller
A Domain Controller is a separate machine running Windows 2003 Server software
and configured with Active Directory. If purchased from Grass Valley, a Conform
Server is used. If the sole responsibility of the machine is to act as a domain controller,
SMG- or customer-furnished equipment may be used, provided that it meets the
specifications necessary to host Windows 2003 Server.
Guidelines
In general, you need to follow these guidelines for the Domain Controller:
•
The Domain Controller cannot be an FSM.
•
A separate Domain Controller and related domain node should be allocated to the
technical LAN subnet. This Domain Controller should also have sufficient access
to all related LANs to establish trusts and provide authentication services.
•
A Conform Server can be used to host another Aurora Edit product, SmartBins.
•
The domain controller may be remote to the SAN, but needs high availability and
direct configurability by your newsroom engineering department.
•
Consistent with the Windows domain model, the domain controller may also use
a backup within the SAN subnet.
•
You can either create a Domain Controller as a new domain tree or as a child
domain to an existing Domain Controller on your network.
•
For normal newsroom operation, if the domain controller is a member of a forest
or tree, the Domain Controller can be subordinate: trusting but not trusted.
Each news organization has different infrastructure and policies regarding the
configuration of domains. What NewsShare SAN security requires is an Active
Directory zone with at least one dedicated Windows 2003 Server domain controller;
there are several ways to achieve this, and the choice appropriate for your organization
depends on your organization’s culture, infrastructure, and IT policies.
In planning, you need to determine the relationship of the new domain to its tree;
whether it will use integrated, delegated, or standalone DNS; and whether the domain
controller’s mode will be mixed, in order to interoperate with pre-Windows 2000
domain controllers, or native, allowing advanced features, particularly greater
opportunity in configuring user groups. The recommended configuration to effect the
most flexible control of the technical domain is to run integrated DNS on a native-mode
domain controller.
This chapter details two of the many ways to set up a domain controller with Active
Directory:
•
First node in a domain tree, integrated DNS, (mixed-mode) permissions compatible
with pre-Windows 2003 servers.
•
Child node in an existing domain tree, (integrated) DNS in the parent, (native-mode)
permissions compatible with Windows 2003 servers and higher.
128
Aurora Edit Installation Guide
4 October 2010
Aurora Edit Security
