Differences between revisions 22 and 37 (spanning 15 versions)
Revision 22 as of 2020-09-03 17:12:17
Size: 3012
Editor: scot
Comment:
Revision 37 as of 2023-09-07 17:19:44
Size: 3148
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:

Create a new VM:

 1. Add a new Windows 10 virtual machine
  a. Change its network address to be IP=192.168.1.5, subnet=255.255.255.0, DNS=192.168.1.2 and verify that you can access the internet.
  a. Change its name to be cpte230w
  a. Add the new Windows 10 computer to the top Active directory domain.
     1. Right click start, system, advanced settings
     1. Under Computer Name, click "Change..." and add it to your active directory.
     1. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
        1. Right click start
        1. Select System, Advanced System Settings
        1. Select Remote, Select Users and Add "Domain Users" to the list.
 1. Find and install the remote administration tools. (Hint: you can do this through powershell easier than through the GUI)
 1. Instal Windows Admin Center
 1. Enable remote desktop connections
Line 27: Line 11:
  a. Change your DNS from 10.10.129.2|3 to your IP address (192.168.1.2).   a. Change your DNS from 10.10.129.2|3 to your IP address (192.168.1.2 or 127.0.0.1).
Line 29: Line 13:

Back on the Windows 10 machine:
 1. Before you add your computer to the domain, you must update the dns to point to the new dns server on your windows server.
    a. On your firewall change the DHCP service for your LAN to use 192.168.1.2 as the DNS server. See: [[attachment:dhcp_dns_update.png]]
 1. Add the Windows 10 computer to the top Active directory domain. (You have to use [username]\administrator, [password])
     a. Right click start, system, advanced settings
     a. Under Computer Name, click "Change..." and add it to your active directory.
     a. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
        1. Right click start
        1. Select System, Advanced System Settings
        1. Select Remote, Select Users and Add "Domain Users" to the list.
 1. Add a Domain user with your southern username
    a. Bring up server manager, goto tools, and select Active Directory Users and Computers
    a. Under your domain in the Users folder, create a user with a username matching your southern username.
 
Line 43: Line 42:


||<table
width="867px" tablestyle="text-align:left">Video walks throught the doucmentation page "Domain" linked from the Documentation Wiki home page with all four parts shown ||30 ||
||Video shows that the server indeed does have AD installed <<BT>>PS> Get-Service adws,kdc,netlogon,dns<<BR>>PS> Get-ADDomainController<<BR>>PS> Get-ADDomain <<BR>>PS> Get-ADForest scot.local<<BR>>PS> Get-SmbShare<<BR>>Hostname changed as required<<BR>>Domain name changed as required<<BR>>Timezone set to Eastern ||70 ||
||Video walks through the documentation page "Domain" linked from the Documentation Wiki home page with all four parts shown ||30 ||
||Video shows that the server indeed does have AD installed <<BR>>PS> Get-Service adws,kdc,netlogon,dns<<BR>> PS> Get-ADDomainController<<BR>>PS> Get-ADDomain <<BR>>PS> Get-ADForest scot.local<<BR>>PS> Get-!SmbShare<<BR>>Hostname changed as required<<BR>>Domain name changed as required<<BR>>Timezone set to Eastern ||70 ||

Lab 2

We are going to install AD in a single Domain for right now. For this lab we will perform the following:

  1. Change the hostname of your server to match the naming convention. Namely: "cpte230a" (if you haven't done this, do this first!!!)
  2. Install a new Forest with a single domain cpte230.internal

    1. > Install-WindowsFeature -name AD-Domain-Services -IncludeManagementTools

    2. > Install-ADDSForest -DomainName "scot.local" -CreateDnsDelegation:$false -DomainMode WinThreshold -DomainNetbiosName "scot" -ForestMode WinThreshold -InstallDns:$true

  3. Some Clean up...
    1. Make sure you are in the Eastern Time Zone
    2. Change your DNS from 10.10.129.2|3 to your IP address (192.168.1.2 or 127.0.0.1).
    3. Check to make sure your installation went as expected. Use some of the tools I've shown you in class (AD Users and Comps., ADSIEdit ...)

Back on the Windows 10 machine:

  1. Before you add your computer to the domain, you must update the dns to point to the new dns server on your windows server.
    1. On your firewall change the DHCP service for your LAN to use 192.168.1.2 as the DNS server. See: dhcp_dns_update.png

  2. Add the Windows 10 computer to the top Active directory domain. (You have to use [username]\administrator, [password])
    1. Right click start, system, advanced settings
    2. Under Computer Name, click "Change..." and add it to your active directory.
    3. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
      1. Right click start
      2. Select System, Advanced System Settings
      3. Select Remote, Select Users and Add "Domain Users" to the list.
  3. Add a Domain user with your southern username
    1. Bring up server manager, goto tools, and select Active Directory Users and Computers
    2. Under your domain in the Users folder, create a user with a username matching your southern username.

Documentation

Document the process that you used in installing your active directory in a new page "Domain". Make sure to include the commands you entered in PowerShell!

  1. Computer Name: [...]
  2. Domain Name: [...]
  3. Commands used in order from the Power Shell prompt.
  4. Any other changes you made at this point.

Create a video that talks through the documentation you created and shows the server has active directory installed and operational. The easiest way to do this is pull up the Active Directory Users and Computers tool and show the domain.

Grade Guide

Topics

Points

Video walks through the documentation page "Domain" linked from the Documentation Wiki home page with all four parts shown

30

Video shows that the server indeed does have AD installed
PS> Get-Service adws,kdc,netlogon,dns
PS> Get-ADDomainController
PS> Get-ADDomain
PS> Get-ADForest scot.local
PS> Get-SmbShare
Hostname changed as required
Domain name changed as required
Timezone set to Eastern

70

WindowsAdministration/Lab02SetupActiveDirectory (last edited 2023-09-07 17:19:44 by scot)