Grade

12
TVL - ICT
COMPUTER SYSTEMS SERVICING (CSS NC-II)
QUARTER 1 – MODULE 2
Setting Up Computer Servers: Active Director
 MELC: SETTING UP COMPUTER SERVERS: ADDS
K to 12 BEC CG: TLE_IACSS9-12SUCS-IIIf-j-IVa-j-38

Objective: LO 1.2 Configure user access level based on NOS features

I. INTRODUCTION

In Windows NT, administrators were introduced to the concept of domains. Active

Directory Domain Services (ADDS) builds on that concept by creating a dynamic, easily
accessible structure through which directory and management information can be stored and
accessed centrally throughout an organization.

By using ADDS, you create a structure for managing your equipment and the people
who use that equipment, which is a helpful feature for all but the smallest of operations.

II. MODULE CONTENT

Active Directory is the brain of a Window Server

Network.
It is a database that keeps track of a huge amount
of stuff and gives us a centralized way to manage
all our network machine, users, and resources.

These items are objects in the Active Directory database

As a matter of fact, every time you log-in into a

corporate network, you’re using an Active Directory.

Domain Controller

A domain controller is a machine that runs Active Directory Services.

A domain controller (DC) is a server that responds to security

authentication requests within a Windows Server domain. It is a server on
a Microsoft Windows or Windows NT network that is responsible for
allowing host access to Windows domain resources.

1
Domain
Domain
It is a logical group of computers that Controller
share a central directory database. The machine
is all named with part of domain name like
LNHS.com (also called a “suffix”) and registered
in the active directory database so they can be
managed.

CSS1.LNHS.
lnhs.com (forest root) CSS2.LNHS. CSS3.LNHS.
COM
COM COM

Forest
Forest is comprised of all the domains in your
css1.lnhs.com enterprise. Your forest may only have one domain.

Server Role

Server role is a major job that a server can perform. It’s recommended that a server not have
too many roles

Common Server Role

a. Active directory domain services

b. Domain name services

Domain Name Service

 It is a service provided by a server that allows you to find other computers in your
network.
 Allows you to type a friendly name of a machine instead of its IP address, allowing
your client to get the IP address from the DNS server and go find the resources.

Configuring Active Directory

2
Step 1 –

Open Server Manager and click

on roles, this will bring up the
Roles Summary on the right side
where you can click on the Add
Roles link.

Figure 1. Selecting role in the Server Manager

Step 2 –

Select server role. Check Active Directory Domain Services then click install (see Figure
1.1) from the list, you will be told that you need to add some features, click on the Add
Required Features (see Figure 2.2) button and click next to move on.

Figure 2.1 Selecting server role Figure 2.2: Add features requirements

Step 3 -
A brief introduction to Active Directory will
be displayed as well as a few links to
additional resources, you can just click
next to skip past here and click install to
start installing the binaries for Active
Directory.

Figure 3: Confirm Installation

Step 4 -
When the installation is finished you will
be shown a message of successful
configuration, just click Close.

Figure 4. Installation Result

Domain Controller Promotion

Step 1 -
Open Server Manager, expand Roles (click +) and click on Active Directory Domain

3
Services. On the right side click on the Run the Active Directory Domain Services
Installation Wizard (dcpromo.exe) link that show in Figure 1.6a or you can use an
alternative method shows in Figure 1.6b.

Figure 1.6a Setting up active directory domain services

Figure 1.6b Using dcpromo.exe

Step 2 -
It will show another wizard, this time to
configure the settings for your domain, click
next to continue.

Figure 1.7 Active Directory Domain Services Installation Wizard

Step 3 -
The message that is shown now relates to
older clients that do not support the new
cryptographic algorithms supported by
Server 2008 R2, these are used by default
in Server 2008 R2, click next to move on.

Figure 1.8 Operating System Compatibility

Step 4 –
Choose to create a new domain in a new
forest.

Figure 1.9 Deployment Configuration

Step 5 -
You are now able to create name for your
domain, in this lesson, I will be using a .com
suffix.

Figure 1.10 Naming the forest root domain

4
Step 6 -
Change forest functional level to Server
2008 R2.

Figure 1.11 Set forest functional level

Step 7 -
Include DNS in our installation as this
will allow us to have an AD Integrated
DNS Zone, when you click next you will
be prompted with a message just click
yes to continue.

Figure 1.12 Additional domain controller options

Step 8 -
A delegation for this DNS server cannot
be created because the authoritative
parent zone cannot be found or it does
not run Windows DNS server. If you are
integrating with an existing DNS
infrastructure, you should manually
create a delegation to this DNS server
in the parent zone to ensure reliable
name resolution from outside the
domain “itsmeismael.com”. Otherwise,
no action is required.
Figure 1.13 A warning message for active directory
If you are installing a forest root domain domain service installation
controller that is using Active Directory-
integrated DNS, you typically do not
need to be concerned about this
warning message.

Step 9 -
You will need to choose a place to store
log files, it is a best practice to store the
database and SYSVOL folder on one
drive and the log files on a separate
drive, but since this is in a lab
environment, just leave them all on the
same drive.

Figure 1.14 Location for database, Log Files, and

SYSVOL
Step 10 -
Assign password for Administrator account that will be used when this domain controller is

5
started in Directory Service Restore
Mode.

Choose a STRONG Active Directory

Restore Mode Password and click next
twice to continue the configuration.

Figure 1.15 Directory Services Restore Mode Administrator’s Password

Step 11 -
Review the summary of the configure
services

Review Summary
Step 12 -
You will be able to see what components are being installed by looking in the following box.
If the reboot on completion check box was not checked you will proceed to manual reboot
shows in Figure 1.16b

Figure 1.16b Completing the Active Directory

Figure 1.16a Completing active directory domain services Domain Services Installation Wizard

III. ACTIVITY PROPER

A. Read each sentence carefully and choose the letter of the correct answer.

1. What introduces the concept of domains?

A. Windows XP C. Windows ME
B. Windows NT D. all of the above

2. Complete the phrase, “Active Directory Domain Services builds on the concept by
creating a , easily accessible structure through which directory and
management information can be stored and accessed centrally throughout an

6
 organization.”
A. central C. dynamic
B. domain D. none of the above

3. It is considered as the brain of a Windows Server Network.

A. Active Directory C. Folder Directory
B. File Directory D. Phone Directory

4. These items are objects in the Active Directory database EXCEPT .

A. Printers C. Users
B. Folders D. Phone numbers

5. Complete the phrase, “As a matter of fact, every time you log-in into a
, you’re using an Active Directory.”
A. central network C. corporate network
B. domain D. none of the above

6. It is a machine that runs Active Directory Services.

A. central network C. network controller
B. server controller D. none of the above

7. This machine responds to security authentication requests within a Windows Server

domain.
A. Domain Controller C. Network Controller
B. Server Controller D. File Controller

8. is a logical group of computers that share a central directory

database.
A. Domain C. Network
B. Server D. File Controller

9. It is comprised of all domains in your enterprise.

A. Network C. Controller
B. Forest D. File Controller

10. This is a major job that a server can perform.

A. Personal Role C. Network Role
B. Server Role D. all of the above

B. Write TRUE if the statement is correct, otherwise, write FALSE if the statement is
incorrect.

1. Among the objects in the Active Directory database is Email.

2. By using ADDS, you create a structure for managing your equipment and
the people who use that equipment.
3. DNS is a service provided by a server that allows you to find other
computer in your network.
4. It also allows you type a friendly name of a user instead of its IP address.
5. Among the common server role is Domain Name Services.

7
ANSWER KEY

A. Multiple Choice B. Completion Type

1. B 6. D 1. TRUE
2. C 7. A 2. TRUE
3. A 8. A 3. TRUE
4. D 9. B 4. FALSE
5. C 10. A 5. TRUE

REFERENCES:
A. E-Handouts
CSS MODULE
By: DEV ISMAEL

B. Portal
https://www.varonis.com/blog/active-directory-domain- services/#:~:text=Active%20Directory
%20Domain%20Services%20(AD%20DS)%20are% 20the%20core%20functions,%2C%20LDAP
%2C%20and%20rights%20management.

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-
dc/active-directory-domain-services-overview

8
 SUMMATIVE EVALUATION
COMPUTER SYSTEMS SERVICING (CSS-12)
Quarter 1, Module 2

Name: _ Date:
Grade/Section: Score:
Test I.

Directions: Write TRUE if the statement is correct and if it is FALSE, change the
underlined word or group of words to make the statement correct. Write
your answer in your answer sheet. (10 pts)
1. Open File Manager and click on roles, this will bring up the Roles
Summary on the right side where you can click on the Add Roles link.

2. Check Active Directory Domain Services then click Install.

3. Following the above instruction, from the list, you will be told that you
need to add some features, click on the Add Required Features
button and click next.

4. Among the steps in Configuring Active Directory, there is a brief

introduction about active directory, few links, additional equpment and
others.

5. In the last part, when installation is finished you will be shown a

message of successful configuration.

6. Using the Domain Controller Promotion, you can just type on the run or
search bar “dcpromo” and then hit Enter.

7. Continuing the steps, it will show another window, this time to configure
the settings for your domain.

8. The message that is shown now relates to older clients that do not
support the new cryptographic algorithms support by Server 2008 R2.

9. Assign password for User account that will be used when this domain
controller is started in Directory Service Restore Mode.

10. Change group functional level to Server 2008 R2.

9
Test II.

Directions: Find the weaving patterns in the grid. Use the clues given inside the
parenthesis. Write your answer in your answer sheet. (5 pts)

(domain, controller, account, dcpromo, client)

c h e y g p m a n g

o j o w b s n a g u

n i a c e t a t k i

t d r c a i n c l s

r o l o u e l c d s

o m l e l n o n h d

l a c c o u n t n o

l i a e k e t e f l

e n s d c p r o m o

r c c u o n t i o d

Test III.

Directions: Read carefully and answer the questions below based on your
understanding. Write your answer in your answer sheet.

1. Explain the Role of Active Directory Domain Services with regards to the
services that the server can offer. (5 pts)

1
 2. The principle behind the Active Directory, how would you apply it in real life?

Essay Rubrics

Features 4 Expert 3 Accomplished 2 Capable 1 Beginner

Quality of Writing Piece was written Piece was written Piece had little Piece had
in an in an interesting style or voice no style or
extraordinary style and voice voice
style and voice Gives some new
Somewhat information but Gives no
Very informative informative and poorly organized new
and well organized information
organized and very
poorly
organized

Grammar, Usage Virtually no Few spelling and A number of So many

& Mechanics spelling, punctuations spelling, spelling,
punctuation or errors, minor punctuation or punctuation
grammatical grammatical errors grammatical and
errors errors grammatical
errors that
interferes
with the
meaning