Wednesday, 2 May 2012

How to install Active Directory on Windows 2003

Windows Server 2003 Note: If you plan to install a new Windows Server 2003 DC in an existing AD forest please read the  page BEFORE you go on, otherwise you'll end up with the following error:

Configuring the computer's TCP/IP settings

You must configure the would-be Domain Controller to use it's own IP address as the address of the DNS server, so it will point to itself when registering SRV records and when querying the DNS database.

Configure TCP/IP

  1. Click Start, point to Settings and then click Control Panel.
  2. Double-click Network and Dial-up Connections.
  3. Right-click Local Area Connection, and then click Properties.


Click Internet Protocol (TCP/IP), and then click Properties.
Assign this server a static IP address, subnet mask, and gateway address. Enter the server's IP address in the Preferred DNS server box.Note: This is true if the server itself will also be it's own DNS server.
If you have another operational Windows 2000/2003 server that is properly configured as your DNS server (read my Create a New DNS Server for AD page) - enter that server's IP address instead:
  • Click Advanced.
  • Click the DNS Tab.
  • Select "Append primary and connection specific DNS suffixes"
  • Check "Append parent suffixes of the primary DNS suffix"
  • Check "Register this connection's addresses in DNS". If this Windows 2000/2003-based DNS server is on an intranet, it should only point to its own IP address for DNS; do not enter IP addresses for other DNS servers here. If this server needs to resolve names on the Internet, it should have a forwarder configured.

  • Click OK to close the Advanced TCP/IP Settings properties.

  • Click OK to accept the changes to your TCP/IP configuration.

  • Click OK to close the Local Area Connections properties.

  • install and configure

    Windows 2003 Active Directory

    Setting up active directory using the run command dcpromo is a straightforward procedure. To begin, from your windows 2003 server desktop go to Start click on Run and type dcpromo and hit Enter.
    The “Welcome to the Active Directory Installation Wizard” should come up:
    Welcome to active directory installation wizard
    Click on Next.  On the following window, you will get a warning about comparability issues with other Operating Systems. Improve security settings in Windows Server 2003 affect older versions of windows:
    Operating System compatibity
    After reading and thinking about consequences, click Next.  On the next screen, you will get two options. The first option asks you if you want the server to become a domain controller for a new domain or if you want the server to be an additional domain controller for for an existing domain:
    Domain Contoller type
    Select the first option and click Next. On the next window, you will get three options. the first option is to setup the domain in a new forest. Select this option if its the first domain controller on your organization, or if you want it to be totally independent from any forest.
    Option two: Child domain in an existing domain tree. select this option if you want the domain to be a child domain from an existing domain. option three: Domain tree in an existing forest. if you don’t want any of the above, select this option.
    Create a new domain
    In our case, choose the first option, and click Next. On the next screen, we need to type the full DNS name for the new domain:
    New domain name
    Type the full DNS name like helpdeskgeek.com, and click on Next. On the next screen, we need to choose the NETBIOS name. This is the name earlier version of windows users will be using to identify the new domain.
    NetBios Domain name
    Choose the name, and click Next.  On the next screen, you need to select the location of where you want to store the database and log files. for best performance store them in separate disks.
    Database and log folders
    Choose the location where you want the active directory database and logs, and click Next.
    Next, the Shared system volume window will come up. here, you need to choose the location on where you want to store the SYSVOL files. this folder contains the domain public files and are replicated to all the domain controllers in the domain.
    Shared System Volume
    Choose the folder location, and click Next.  On the next window, the DNS registration diagnostic will show up. in here most likely you will get ” Diagnostic failed” and will give you three options. First option: it will allow you to perform the DNS diagnostic again,if you have corrected the problem.
    Option two: it gives you the option to allow the active directory wizard to install and configure DNS for you, and use this DNS as the primary DNS for this server. third option, it allows you to bypass this window if you plan to correct the problem later on.
    DNS registration Diagnostics
    Even though we have already installed DNS on this server, we have not configure any of its services, so we will choose the option to Install and configure DNS server on this computer and set this computer to use this DNS server as its preferred DNS server. then click Next.
    On the next window, you need to choose what type or permissions you want for users and group objects. Here you will get two options. the first options: select this option if you run server programs with pre-windows 2000. option two: select this option, if you only run windows servers 2000 and windows servers 2003 on your domain.
    Select default permissions for user and group objects
    Select the second option, and click Next. On the next window, you need to enter the Directory services restore mode administrator password. This password is used when you start the computer in directory services restore mode. This account is different from the domain administrator account.
    Directoty services restore mode administrator password
    Type your chosen password, and click Next. Next, you will get the summary of all the options you have chosen during the active directory wizard. remember, the domain administrator account password is the same as the current local administrator password.
    Active directory summary
    Click Next. the active directory installation should begin.
    active directory installation
    Some serious configuration processes going here. After a few minutes, active directory should be installed.
    Completing the active directory installation wizard
    Click on Finish. and restart the computer.  Active Directory should be now installed.

    No comments:

    Post a Comment