Active Directory and DNS Setup on Windows Server 2003

for the Applied CS Labs – Clarkson University

Preparation: - Static IP address reserved and set on the future Domain Controller.

- The following Firewall Exceptions are open

Name of Service Port Number Protocol Scope

BINL 4011 UDP 10.0.0.0/255.255.255.0

DNS 53 UDP 10.0.0.0/255.255.255.0

DNS 53 TCP 10.0.0.0/255.255.255.0

File and Printer Sharing 139 TCP My network (subnet) only

File and Printer Sharing 445 TCP My network (subnet) only

File and Printer Sharing 137 UDP My network (subnet) only

File and Printer Sharing 138 UDP My network (subnet) only

Global Catalog Service 3269 TCP 10.0.0.0/255.255.255.0

Global Catalog Service 3268 TCP 10.0.0.0/255.255.255.0

Kerberos 88 UDP 10.0.0.0/255.255.255.0

Kerberos 88 TCP 10.0.0.0/255.255.255.0

Kerberos Password V5 464 TCP 10.0.0.0/255.255.255.0

LDAP Server 389 UDP 10.0.0.0/255.255.255.0

LDAP Server 389 TCP 10.0.0.0/255.255.255.0

LDAP SSL 636 TCP 10.0.0.0/255.255.255.0

LDAP SSL 636 UDP 10.0.0.0/255.255.255.0

NAT-T 4500 UDP 10.0.0.0/255.255.255.0

NETBIOS Name Service 137 TCP 10.0.0.0/255.255.255.0

NTP 123 UDP 10.0.0.0/255.255.255.0

128.153.0.0/255.255.0.0

PPTP 1723 TCP 10.0.0.0/255.255.255.0

RPC 135 UDP 10.0.0.0/255.255.255.0

RPC 135 TCP 10.0.0.0/255.255.255.0

RPC 1024 1024 TCP 10.0.0.0/255.255.255.0

RPC 1025 1025 TCP 10.0.0.0/255.255.255.0

RPC 1026 1026 TCP 10.0.0.0/255.255.255.0

RPC 1027 1027 TCP 10.0.0.0/255.255.255.0

RPC 1028 1028 TCP 10.0.0.0/255.255.255.0

RPC 1029 1029 TCP 10.0.0.0/255.255.255.0

RPC 1030 1030 TCP 10.0.0.0/255.255.255.0

RPC 1031 1031 TCP 10.0.0.0/255.255.255.0

RPC 1032 1032 TCP 10.0.0.0/255.255.255.0

RPC 1033 1033 TCP 10.0.0.0/255.255.255.0

RPC 1034 1034 TCP 10.0.0.0/255.255.255.0

RPC 1035 1035 TCP 10.0.0.0/255.255.255.0

RPC 1036 1036 TCP 10.0.0.0/255.255.255.0

RPC 1037 1037 TCP 10.0.0.0/255.255.255.0

RPC 1038 1038 TCP 10.0.0.0/255.255.255.0

RPC 1039 1039 TCP 10.0.0.0/255.255.255.0

SNMP 161 UDP 10.0.0.0/255.255.255.0

SNMP Traps Outbound 162 UDP 10.0.0.0/255.255.255.0

Unknown Service 64131 TCP 10.0.0.0/255.255.255.0

Unknown Service 464 UDP 10.0.0.0/255.255.255.0

Step 1: Open “Manage Your Server” and choose “Add or remove a role.”

Step 2: Make sure you have completed all Preliminary Steps.

Step 3: Wait for settings to be detected

Step 4: Choose “Domain Controller (Active Directory)” for the new Server Role.

Step 5: Choose “Next” at the next prompt and choose “Next” at the “Welcome to the Active Directory

Installation Wizard” prompt.

Step 6: Choose to continue installing at the “Operating System Compatibility” prompt.

Step 7: Choose “Domain controller for a new domain” at the “Domain Controller Type” prompt.

Step 8: Choose “Domain in a new forest” next.

Step 9: Enter the full DNS name of the new domain. (Ex. cslabs.sclab.clarkson.edu)

Step 10: Choose the NetBIOS name of the new domain. (Ex. CSLABS)

Step 11: Choose the location of your Database and Log Folders.

Step 12: Choose the location of your SYSVOL folder.

Step 13: If you receive a “Diagnostic Failed” at the “DNS Registration Diagnostics” screen.

Choose to “Install and configured the DNS server on this computer, and set this computer to use this

DNS server as its preferred DNS server.”

Step 14: Choose to have your domain permissions compatible only with Windows 2000 and newer

operating systems.

Step 15: Set the “Directory Services Restore Mode Administrator Password.”

Step 16: Review the Summary and choose “Next” to continue the installation.

Step 17: Wait for the installation to finish. That’s it, Active Directory is set up and ready to use.