Showing posts with label Domain. Show all posts

How to install Active Directory on win server 2012

Windows Server 2012: Set Up your first Domain Controller (step-by-step)


Using Server Manager (UI):
In order to make the windows server 2012 domain controller we will install ADDS (Active Directory Domain Services) role from the server manager on Windows Server 2012.
First we will change the server name let say server1 (you can try another one) and the IP address 10.10.21.1 (try to avoid using default 192.168.0.1)
  
Installing the AD DS role
 
“Before You Begin” screen provides you basic information such as configuring strong passwords, IP addresses and Windows updates.

On Installation Type page, select the first option “Role-based or Feature-based Installation“.
Scenario-based Installation option applied only to Remote Desktop services.

On the “Server Selection” Page, select a server from the server pool and click next.

To install AD DS, select Active Directory Domain Services in turn it will pop-up to add other AD DS related tools. Click on Add Features.

After clicking “Add Features” above, you will be able to click “Next >” as shown in the screen below.

On the “Select Features” Page, Group Policy Management feature automatically installed during the promotion. Click next.

 
On the “Active Directory Domain Services” page, it gives basic information about AD DS. Click Next.

On the “Confirmation” Page, You need to confirm this to continue with this configuration. It will provide you an option to export the configuration settings and also if you want the server to be restarted automatically as required.
 After clicking “Install” the selected role binaries will be installed on the server.
 After “Active Directory Domain Services” role binaries have been installed and now it is time to promote the server to a Domain Controller.
  
Promoting Windows 2012 Server to Domain Controller
To create a new AD forest called “Test.local”, select add a new forest.
 - Select Add a new forest,Type the name Test.local and click next.

Specify the FFL, DFL, whether or not it should be a DNS Server and also the DSRM administrator password.

As you can see, it has selected the GC option by default and you cannot deselect it.

The reason for this is that is the very first DC of the AD forest and at least one needs to be a GC.
-        - DNS delegation warning.

-       -  Checks the NetBIOS name already assigned.

-        Specify the location of the AD related folders and then click next.
-        - Summary Of All Installation Options/Selections will be display
- Before the actual install of AD, all prerequisites are checked. If All prerequisite checks are passed successfully then clickInstall.
When you click Install, DNS and the GPMC are installed automatically.

After the promotion of the server to a DC finished server restart automatically.
Once the server is booted and you logon to it, click on Server Manager | Tools , will notice that following have been installed:
  • Active Directory Administrative Center
  • Active Directory Domains and Trusts
  • Active Directory Module for Windows PowerShell
  • Active Directory Sites and Services
  • Active Directory Users and Computers
  • ADSI Edit
  • DNS
  • Group Policy Management



Join to the Domain

  • Join the Computer to the Domain
Important
To join a computer to a domain, you must be logged on to the computer with the local Administrator account or, if you are logged on to the computer with a user account that does not have local computer administrative credentials, you must provide the credentials for the local Administrator account during the process of joining the computer to the domain. In addition, you must have a user account in the domain to which you want to join the computer. During the process of joining the computer to the domain, you will be prompted for your domain account credentials (user name and password).


Windows Server 2008 and 2012,windows vista,7,8,10

Membership in Domain Users, or equivalent, is the minimum required to perform this procedure.
To join computers to the domain
  1. Log on to the computer with the local Administrator account.
  2. Click Start, right-click Computer, and then click Properties. The System dialog box opens.
  3. In Computer name, domain, and workgroup settings, click Change settings. The System Properties dialog box opens.
Note
On computers running Windows Vista and above, before the System Properties dialog box opens, the User Account Control dialog box opens, requesting permission to continue. Click Continue to proceed.
  1. Click Change. The Computer Name/Domain Changes dialog box opens.
  2. In Computer Name, in Member of, select Domain, and then type the name of the domain you want to join. For example, if the domain name is example.com, type example.com.
  3. Click OK. The Windows Security dialog box opens.
  4. In Computer Name/Domain Changes, in User name, type the user name, and in Password, type the password, and then click OK. The Computer Name/Domain Changes dialog box opens, welcoming you to the domain. Click OK.
  5. The Computer Name/Domain Changes dialog box displays a message indicating that you must restart the computer to apply the changes. Click OK.
  6. On the System Properties dialog box, on the Computer Name tab, click Close. The Microsoft Windows dialog box opens, and displays a message, again indicating that you must restart the computer to apply the changes. Click Restart Now.
Windows Server 2003 and Windows XP

Membership in Domain Users, or equivalent, is the minimum required to perform this procedure.
To join computers running Windows Server 2003 and Windows XP to the domain
  1. Click Start, right-click My Computer, and then click Properties. The System Properties dialog box opens.
  2. Click Change. The Computer Name Changes dialog box opens.
  3. In Computer Name Changes, in Member of, select Domain, and then type the name of the domain you want to join. For example, if the domain name is example.com, type example.com.
  4. Click OK. The Computer Name Changes dialog box opens. In User name, type the domain administrator account name, and in Password, type the administrator password, and then click OK.
  5. The Computer Name Changes dialog box opens, welcoming you to the domain.
  6. Click OK. The Computer Name Changes dialog box displays a message indicating that you must restart the computer to apply the changes.
  7. Click OK.
  8. On the System Properties dialog box, on the Computer Name tab, click OK, to close the System Properties dialog box. The System Settings Change dialog box opens, and displays a message, again indicating that you must restart the computer to apply the changes.
  9. Click Yes.