Installing and Using Installing and Using Active Directory Active Directory

Written by Marc ZacharkoWritten by Marc Zacharko

The Installation ProcessThe Installation Process

1. Click “Start”, click “Run”, type “dcpromo” , and then click “OK”.1. Click “Start”, click “Run”, type “dcpromo” , and then click “OK”.

2. when the “Active Directory Installation Wizard” 2. when the “Active Directory Installation Wizard” starts, click “Next”.starts, click “Next”.

3. On the next page of the “Active Directory Installation Wizard”, click 3. On the next page of the “Active Directory Installation Wizard”, click “Next”.“Next”.

4. On the “Domain Controller Type” page, click “Domain Controller for a 4. On the “Domain Controller Type” page, click “Domain Controller for a new domain”, or you can choose to click “Additional domain controller new domain”, or you can choose to click “Additional domain controller for an existing domain” if this domain controller will be just added to a for an existing domain” if this domain controller will be just added to a

pre-created domain. Then click “Next”.pre-created domain. Then click “Next”.

5. On the “Create New Domain” page, choose either “Domain in a new 5. On the “Create New Domain” page, choose either “Domain in a new forest”, “child domain in an existing domain tree” or “domain in an forest”, “child domain in an existing domain tree” or “domain in an

existing forest”, depending on which of these options is appropriate for existing forest”, depending on which of these options is appropriate for the type of domain you are intending on creating. Then click “Next”.the type of domain you are intending on creating. Then click “Next”.

6. On the “New Domain Name” page, in the Full DNS name for new 6. On the “New Domain Name” page, in the Full DNS name for new domain box, type whatever name you would like your new domain domain box, type whatever name you would like your new domain

controller to have, and then click “Next”.controller to have, and then click “Next”.

7. the next screen that appears allows you to provide a NetBIOS name, 7. the next screen that appears allows you to provide a NetBIOS name, the name that users of earlier versions of windows will see, this screen the name that users of earlier versions of windows will see, this screen provides an automatic name, there is no need to change this name, but provides an automatic name, there is no need to change this name, but

if you wish, you may, click “Next”.if you wish, you may, click “Next”.

8. On the “Database and Log Folders” page, accept the defaults in the 8. On the “Database and Log Folders” page, accept the defaults in the Database folder box and the Log folder box, and then click “Next”.Database folder box and the Log folder box, and then click “Next”.

9. On the “Shared System Volume” page, you can either choose a new 9. On the “Shared System Volume” page, you can either choose a new location for the system volume share, or accept the default in the location for the system volume share, or accept the default in the

Folder location box. Then click “Next”.Folder location box. Then click “Next”.

10. On the “DNS Registration Diagnostics” page, check the “Install and 10. On the “DNS Registration Diagnostics” page, check the “Install and configure the DNS server on this computer and set this computer to configure the DNS server on this computer and set this computer to

use this DNS server as its preferred DNS Server” radial button. Then use this DNS server as its preferred DNS Server” radial button. Then click “Next”.click “Next”.

11. On the “Permissions” page, click the “Permissions compatible only 11. On the “Permissions” page, click the “Permissions compatible only with Windows 2000 or Windows Server 2003 operating systems” radial with Windows 2000 or Windows Server 2003 operating systems” radial

button. Click “Next”.button. Click “Next”.

12. On the “Directory Services Restore Mode Administrator Password” 12. On the “Directory Services Restore Mode Administrator Password” page, enter a password in the Restore Mode Password box, retype the page, enter a password in the Restore Mode Password box, retype the

password to confirm it in the Confirm password box, and then click password to confirm it in the Confirm password box, and then click “Next”.“Next”.

13. On the “Summary” page, confirm the information is correct, and 13. On the “Summary” page, confirm the information is correct, and then click “Next”.then click “Next”.

14. an installation process window will appear, showing a small graphic 14. an installation process window will appear, showing a small graphic which shows the progress of the files being installed, this windows is which shows the progress of the files being installed, this windows is

shown below.shown below.

15. On the “Completing the Active Directory Installation wizard” page 15. On the “Completing the Active Directory Installation wizard” page that appears after the installation process has completed, click “Finish”.that appears after the installation process has completed, click “Finish”.

16. When prompted to restart the computer, click “Restart now”.16. When prompted to restart the computer, click “Restart now”.

Using Active DirectoryUsing Active Directory

Creating UsersCreating Users

click on the “Start button and highlight “Control Panel”, then click on the “Start button and highlight “Control Panel”, then “Administrative tools”, then click on “Active Directory Users and “Administrative tools”, then click on “Active Directory Users and Computers”. Highlight the option on the left of the screen that is the Computers”. Highlight the option on the left of the screen that is the name of your domain. Right click in the white space on the right name of your domain. Right click in the white space on the right hand side. highlight “New” and then click on “User”. The first screen hand side. highlight “New” and then click on “User”. The first screen that appears asks for the user’s first and surname and also the that appears asks for the user’s first and surname and also the name they will use to log on to the server, fill these in as necessary. name they will use to log on to the server, fill these in as necessary. Click next after doing this. The next screen asks you to set, and Click next after doing this. The next screen asks you to set, and confirm a password for the user to use the first time they log on. confirm a password for the user to use the first time they log on. There are also a few options at the bottom of this page. These There are also a few options at the bottom of this page. These options control the lifespan of the password. You can either allow options control the lifespan of the password. You can either allow the user to change the password at first logon, never be allowed to the user to change the password at first logon, never be allowed to change their password, stop the password from ever expiring and change their password, stop the password from ever expiring and lastly disable the user’s account. Lastly click “Next”. The next screen lastly disable the user’s account. Lastly click “Next”. The next screen is a summary of all the items that will be created upon clicking finish, is a summary of all the items that will be created upon clicking finish, read these and click the “Finish” button.read these and click the “Finish” button.

Logon HoursLogon Hours

Double click on the user’s account, displayed in the window in Double click on the user’s account, displayed in the window in “Active Directory Users and Computers”. Click on the “Account” tab. “Active Directory Users and Computers”. Click on the “Account” tab. Click on “logon hours”. In the window that appears, highlight the Click on “logon hours”. In the window that appears, highlight the desired days of the week and times of the day and select whether desired days of the week and times of the day and select whether you would like to permit or deny the user access at these times, you would like to permit or deny the user access at these times, these two options are located at the right of the window. permitted these two options are located at the right of the window. permitted hours appear blue and denied hours appear white. By default, the hours appear blue and denied hours appear white. By default, the entire weeks is permitted. When finished, click “Ok”.entire weeks is permitted. When finished, click “Ok”.

Permitting only selected ComputersPermitting only selected Computers

Click on the user in the window of “Active Directory Users and Click on the user in the window of “Active Directory Users and Computers”. Click on the “Account” tab. Click the “LogOn To” Computers”. Click on the “Account” tab. Click the “LogOn To” button. Change the radial button from the currently selected “All button. Change the radial button from the currently selected “All computers” to “The following computers”. Type each name of each computers” to “The following computers”. Type each name of each workstation individually into the text box marked “Computer name”, workstation individually into the text box marked “Computer name”, click “Add” between each workstation name. When you have added click “Add” between each workstation name. When you have added all the workstations you wish to permit the user to access, click “Ok”all the workstations you wish to permit the user to access, click “Ok”

User DetailsUser Details

Click on the user account in active directory users and Click on the user account in active directory users and computers. Click the “Address” tab. Fill in each text box with computers. Click the “Address” tab. Fill in each text box with relevant information about the user. This is only an information relevant information about the user. This is only an information storage method and serves no other purpose except easy storage method and serves no other purpose except easy retrieval of information at a later date if it is needed by retrieval of information at a later date if it is needed by administrators.administrators.