Shulou(Shulou.com)06/02 Report--

Preface

The system configuration and basic disk planning of the server that will be installed as DC will not be discussed here, but the key network connection properties must be noted. You can configure its IP property by opening the properties of the local connection. The IP address of the server DC must be a static IP address, although it is not necessary to configure the default gateway, but the DNS server points to the correct configuration, because the work of AD is closely dependent on the DNS service. In this example, the entire Microsoft network environment is built from scratch. Considering that the first DC acts as the DNS server in the enterprise network, the preferred DNS server address needs to be configured as the IP address of this computer.

Because the WIN08R2 default firewall configuration is filtered based on the type of connected network, it is best to change its network type from "public network" to "private network" through the Network and sharing Center.

Of course, in addition to that, the NetBIOS name of the current computer, that is, the computer needs to be set up, because it is unwise to modify it after installing DC.

The first point is that before upgrading to domain control, the machine's IP, DNS, WINS, etc., should be configured correctly. If it is static, do not let the machine get it automatically. The second point is that if you choose different network types, the ports opened by the firewall are also different. The public network firewall considers security issues, opening fewer ports and more restrictions, so it is best to choose a private network. Before upgrading to domain control, the computer name of the computer should be determined. After it is upgraded to domain control, there will be unpredictable problems in changing the computer name, so it is best to confirm the computer name before it is upgraded to domain control, and don't change it in the future. Windows Server 2008 R2 AD server building

A brief introduction to Windows AD

Http://technet.microsoft.com/zh-cn/library/cc758535(WS.10).aspx

2. Detailed illustration of Windows server 2008 R2 AD construction

2.1First, prepare a computer for Windows server 2008 R2. This service is to be used as a domain controller. If it is an actual production environment, it is recommended that the configuration is slightly higher, and the test environment meets the minimum requirements of Windows 2008 R2. Note that Windows 2008 R2 only has a 64-bit version, and your elderly machine should support 64-bit at least.

2.2 check the version of the system, start running, cmd,systeminfo, and you can see the information shown in the following figure

2.3 run as administrator-> dcpromo for a while, and the following interface will appear with "install using Advanced Mode". Just click next. Just don't click on the entry-level rookie for a while, and you will be working on it later.

2.4 Click next

2.5 after clicking the next step, we will begin the configuration phase of AD. It is important to note here that if you are building the first domain controller in your private network, be sure to select the second item, "create a domain in the new forest", which is used when you have an AD environment in your private network and want to build an extra domain controller.

2.6 after the next step, configure and name your domain name, which should be careful, because it is troublesome to modify after this configuration is completed, and the risk of domain renaming is not as great as usual.

2.7After the next step, configure the functional level of your domain. Attention, children's shoes, it needs to be emphasized here that if the domain controller of server 2003 system may appear in your AD, be sure to choose the domain functional level of 2003, or those server 2003 servers will not be able to be domain controllers in the future. To be on the safe side, choose a lower level when installing the first DC. It is no problem to upgrade to the domain functional level of 2008 in the future, but if you choose the functional level of 2008, it will be difficult to downgrade in the future!

2.8After clicking the next step twice, you need to set up DNS.

After setting the domain function level, it is the installation of the more important DNS server in your AD. By default, it is recommended that DC and DNS be installed on the same server. DNS does not take up any resources, and you do not have to worry that it consumes your server's resources. Installed with DC can also facilitate subsequent maintenance and data synchronization and backup, highly recommended! When reaching this step, children's shoes must check the configuration of their server, whether the server's DNS points to themselves, this is very important, otherwise your DNS installation will have a problem. Check that the local dns settings are consistent with the local IP address.

2.9 after clicking on the next step, a scary warning will pop up, and you still ignore it, right? This is actually Windows server's trouble, never mind it! To study the children's shoes of this warning, you can search for them on Microsoft technet, but we won't talk much about them here.

AD database files and log files, Microsoft's installation interface that recommended installation in different locations is simply nonsense, children's shoes this location should not be changed, a variety of tests and troubleshooting found that all Microsoft's configuration here is in accordance with the default It's easy to make mistakes when you change and combine with other systems (this is real).

3.1 by default, the next step is a password that you need to keep in mind. "Domain restore password". This password is very important and may be used in subsequent database migration, backup, arrangement, and recovery. Don't get one casually.

The next step is to take a look at the configuration information of your entire DC build. You can export to a location to keep it for subsequent troubleshooting, or it can be used as an unattended installation script for DC installation (AD unattended installation is not discussed here, interested children's shoes can consult some relevant materials to learn, the application is not very extensive)

3.3 the next step is a few minutes of waiting, waiting for your work to be done.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.