Professional Documents
Culture Documents
Install Windows Server 2003 Active Directory Domain Controller Howto
Install Windows Server 2003 Active Directory Domain Controller Howto
Install Windows Server 2003 Active Directory Domain Controller Howto
Kefa Rabah
Global Open Versity, Vancouver Canada
krabah@globalopenversity.org
www.globalopenversity.org
1
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
Introduction
A central component of the Windows platform, Active Directory directory service provides the means to
manage the identities and relationships that make up network environments. Windows Server 2003
makes Active Directory simpler to manage, easing migration and deployment.
Active directory has been around since the release of Windows 2000 several years ago, and is now a
standard sight in many offices. Its inclusion marked a radical change at the heart of the Windows Server
platform, one that people are still adjusting to today.
For organizations using Win 2k3 AD infrastructure that require flexible support for directory-enabled
applications, Microsoft has developed Active Directory Application Mode (ADAM). ADAM is a Lightweight
Directory Access Protocol (LDAP) directory service that runs as a user service, rather than as a system
service. Active Directory Application Mode represents a breakthrough in directory services technology that
provides flexibility and helps organizations avoid increased infrastructure costs.
LDAP is an acronym for Lightweight Directory Access Protocol; it is a simplified version of the X.500
protocol. The directory setup in this training manual will be later used for authentication. Nevertheless,
LDAP can be used in numerous ways: authentication, shared directory (for mail clients), address book,
etc.
In this Hands-on Systems Integration Training Lab, we’re going undertake a step-by-step installation,
configuration of Windows Server 2003 Active Directory DC.
This project was demonstrated entirely using VMware, however, once you perfect the setup you can
migrated them into physical servers if you so wish. You may also Virtual PC instead of VMware for your
demo setup.
2
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
3. Send the server to Windows Updates site to super-juice it with heavy dose of the latest Service Packs,
security updates and hot-fixes – and thereby acquiring a clean bill of health for our setup process.
4. finally open your CMD. First ensure that your static IP address is configured properly by issuing the
following command, see also Fig. 2:
c:\ipconfig /all
5. Next issue the dcpromo command to promote your server to AD DC as follows (see Fig. 2):
c:\dcpromo
Fig. 2
3
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
6. The Active Directory Installation Wizard, Fig. 3, will guide you to Finish installation. Click Next.
Fig. 5
8. From Fig. 6, select "Domain controller for a new domain" and then click Next
4
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
Fig. 6
9. From Fig. 7, select "Domain in a new forest" and then click Next
Fig. 7
5
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
10. From Fig. 8, type the Full DNS name for new domain: "mycompany.loc" and then click Next
Fig. 8
11. From Fig. 9, type the Domain NetBIOS name: "MYCOMPANY" and then click Next
Fig. 9
6
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
12. From Fig. 10, accept the default, and then click Next
Fig. 10
13. From Fig. 11, accept the default, and then click Next
Fig. 11
7
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
14. From Fig. 12, accept the default, or if you had installed DNS server, then select option 1, and then
click Next
Fig. 12
15. From Fig. 13, accept the default, and then click Next
Fig. 13
8
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
16. From Fig. 14, type the Restore Mode Password, and then click Next
Fig. 14
17. From Fig. 15, review the options listed and then click Next
Fig. 15
9
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
18. We are now in the AD installation process which may take several minutes, so grab yourself a cup
coffee, and sit back and relax while installation continues, see Fig. 16.
Fig. 16
Fig. 17
20. From Fig. 18, click Restart Now, to restart your computer to complete the Active Directory setup.
10
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
Fig. 18
11
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
3. Next, from Fig. 21, Welcome to the New Zone Wizard, click Next.
Fig. 21
12
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
Fig. 22
Fig. 23
13
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
6. From Fig. 24, enter the Network ID: 192.168.83, and click Next.
Fig. 24
Fig. 25
14
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
8. From Fig. 26, click Finish, to complete the Reverse Lookup Zone setup.
9. Our completed DNS Management console should now look as shown in Fig. 26.
10. Now we need to verify that our DNS server is running correctly. To do this open the CMD and issue
the following command:
C:\nslookup server03.mycompany.loc
Fig. 26
1. Click Start and the select Manager Your Server. Next from Manage Your Server, click "Add or
remove a role", see Fig. 27.
2. From Server Role dialog box, select "DHCP Server", and then click Next, see Fig. 28.
16
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
Fig. 28
3. From Summary of selection dialog box, review and then click Next, see Fig. 29.
Fig. 29
17
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
4. From Welcome to the New Scope Wizard windows, click Next, see Fig. 30.
Fig. 29
5. From Fig. 30, provide Scope Name and Description, and then click Next.
Fig. 30
18
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
6. From Fig. 31, provide IP Address Range, and then click Next.
Fig. 31
7. From Fig. 32, Add Exclusions, if you don’t have any as in our case, click Next.
Fig. 32
19
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
8. From Fig. 33, Lease Duration, accept the default or change as desired, and then click Next.
Fig. 33
9. From Fig. 34, Configure DHCP Options, select the desired option, and then click Next.
Fig. 34
20
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
10. From Fig. 35, Router (Default Gateway), enter the router IP address, click Add, and then click
Next.
Fig. 35
11. From Fig. 36, Domain Name and DNS Servers; enter the Parent domain, Server Name, and IP
Address, click Add, and then click Next.
Fig. 36
21
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
12. From Fig. 37, Wins Servers; enter the Server Name, and IP Address, click Add, and then click
Next.
Fig. 37
13. From Fig. 38, Activate Scope; select the desired option, and then click Next.
Fig. 38
22
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
14. From Fig. 39, Completing the New Scope Wizard; click Finish.
Fig. 39
15. From Fig. 40, This Server is Now a DHCP Server; click Finish.
Fig. 40
23
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
16. Click Start > Administrative Tools, and select DHCP; to access DHP Management Console, see
Fig. 41. Next right-click you domain name, and then click Authorize, to authorize your DHCP server.
17. From Fig. 41, you can Start/Stop/Pause your DHCP Server, by selecting all Tasks, and then choosing
the desired option, see Fig. 42.
Fig. 42
18. You’re done, you now have a fully functional DHCP Server and that is ready to dish-out IP addresses
to the host clients in your LAN, see Fig. 43.
24
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada
This guide will up-dated whenever there is new information, therefore, stay tuned – and keep checking.
-----------------------
Kefa Rabah is the Founder and CIO, of Serengeti Systems Group Inc. Kefa is knowledgeable in
several fields of Science & Technology, IT Security Compliance and Project Management, and
Renewable Energy Systems. He is also the founder of Global Open Versity, a Center of Excellence
in online eLearning.
25
© September 2008, Kefa Rabah, Global Open Versity, Vancouver Canada