Thursday, 31 October 2013

Active Directory Domain Services




Active Directory Domain Services (AD DS) act as tools that store information about the identities of users, computers, and services; authenticate individual users or computers and provide a mechanism with which a user or computer can access resources in the enterprise. This chapter focuses on the creation of a new Active Directory forest with a single domain in a single domain controller. The practice exercises in this chapter guide you through the creation of a domain named TamilITTraining.com that you will use for all other practices

Install a New Windows Server 2008 R2 Forest

1. Click Start, click Run, type Dcpromo.exe, and then click OK.
Note Dcpromo will add the AD DS role if necessary

2. Click Next.

3. On the Operating System Compatibility page, review the warning about the default security settings for Windows Server 2008 R2 domain controllers, and then click next.

4. On the Choose a Deployment Configuration page, select create a New Domain in a New Forest, and then click next.

5. On the Name the Forest Root Domain page, type TamilITTraning.com, and then click next. The system performs a check to ensure that the DNS and NetBIOS names for the forest are not already in use on the network.

6. On the Set Forest Functional Level page, choose a forest functional level of Windows Server 2008 R2, and then click Next.

Each of the functional levels is described in the Details box on the page. Choosing Windows Server 2008 R2 forest functional level ensures that all domains in the forest operate at the Windows Server 2008 R2 domain functional level, which enables several new features provided by Windows Server 2008 R2. The Additional Domain Controller Options page appears. DNS Server is selected by default. The Active Directory Domain Services Installation Wizard creates a DNS infrastructure during AD DS installation. The first domain controller in a forest must be a global catalog (GC) server and cannot be a read-only domain controller (RODC).

7. Click Next.
A warning appears that informs you that a delegation for the DNS server cannot be created. In the context of this exercise, you can ignore this error. Click Yes to dismiss the message.

8. On the Location for Database, Log Files, And SYSVOL page, accept the default locations for the database file, the directory service log files, and the SYSVOL files, and click Next.

The best practice in a production environment is to store these files on three separate volumes that do not contain applications or other files not related to AD DS. This best practices design improves performance and increases the efficiency of backup and restore.

9. On the Directory Services Restore Mode Administrator Password page, type a strong password in both the Password and Confirmed Password boxes. Click Next.
Do not forget the password you assigned to the Directory Services Restore Mode Administrator.

10. On the Summary page, review your selections. If any settings are incorrect, click Back to make modifications.

11. Click next, and then click Finish.
Configuration of AD DS begins. The server will require a reboot when the process is completed.

NOTE

To know how to install 2008 R2 Operating System please refer the following URL


To know how to install Active Directory Domain Services on 2012 R2, Please refer the following URL



10 comments: