= Lab 2 =

We are going to install AD in a single Domain for right now. For this lab we will perform the following:

 1. Change the hostname of your server to match the naming convention. Namely: "cpte230a" (if you haven't done this, do this first!!!)
 1. Install a new Forest with a single domain {{{cpte230.internal}}}
  a. {{{> Install-WindowsFeature -name AD-Domain-Services -IncludeManagementTools}}}
  a. {{{> Install-ADDSForest -DomainName "scot.local" -CreateDnsDelegation:$false -DomainMode WinThreshold -DomainNetbiosName "scot" -ForestMode WinThreshold -InstallDns:$true}}}
 1. Some Clean up...
  a. Make sure you are in the Eastern Time Zone
  a. Change your DNS from 10.10.129.2|3 to your IP address (192.168.1.2 or 127.0.0.1).
  a. Check to make sure your installation went as expected. Use some of the tools I've shown you in class (AD Users and Comps., ADSIEdit ...)

Back on the Windows 10 machine:
 1. Before you add your computer to the domain, you must update the dns to point to the new dns server on your windows server. 
    a. On your firewall change the DHCP service for your LAN to use 192.168.1.2 as the DNS server. See: [[attachment:dhcp_dns_update.png]]
 1. Add the Windows 10 computer to the top Active directory domain. (You have to use [username]\administrator, [password])
     a. Right click start, system, advanced settings
     a. Under Computer Name, click "Change..." and add it to your active directory.
     a. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
        1. Right click start
        1. Select System, Advanced System Settings
        1. Select Remote, Select Users and Add "Domain Users" to the list. 
 1. Add a Domain user with your southern username 
    a. Bring up server manager, goto tools, and select Active Directory Users and Computers
    a. Under your domain in the Users folder, create a user with a username matching your southern username.
 

'''Documentation'''

Document the process that you used in installing your active directory in a new page "Domain". Make sure to include the commands you entered in {{{PowerShell}}}!

 A. Computer Name: [...]
 A. Domain Name: [...]
 A. Commands used in order from the Power Shell prompt.
 A. Any other changes you made at this point.

Create a video that talks through the documentation you created and shows the server has active directory installed and operational. The easiest way to do this is pull up the {{{Active Directory Users and Computers}}} tool and show the domain.

== Grade Guide ==
||<tablewidth="867px" tablestyle="text-align:left">Topics ||Points ||
||Video walks through the documentation page "Domain" linked from the Documentation Wiki home page with all four parts shown ||30 ||
||Video shows that the server indeed does have AD installed <<BR>>PS> Get-Service adws,kdc,netlogon,dns<<BR>> PS> Get-ADDomainController<<BR>>PS> Get-ADDomain <<BR>>PS> Get-ADForest scot.local<<BR>>PS> Get-!SmbShare<<BR>>Hostname changed as required<<BR>>Domain name changed as required<<BR>>Timezone set to Eastern ||70 ||