Shulou(Shulou.com)06/03 Report--

Experimental environment:

Prepare three original clean Windows Server 2008 R2 operating systems on the virtual machine, one as the primary domain control, one as the additional domain control, and one as the client to verify the success of the experiment.

two。 The IP address of the primary domain control is 172.18.11.1

3. The IP address of the extra domain control is 172.18.11.2 DNS is 172.18.11.1

4. The ip address of the client is 172.18.11.3, the primary dns is 172.18.11.1, and the secondary dns is 172.18.11.2

5. Test the connectivity of three virtual machines and be able to ping each other

Second, the experimental steps

First install the primary domain control

. Before installing DC, in addition to configuring the IP address, but also to change the name of the computer, I changed to PDS, and after the modification of the hostname to restart the computer to take effect.

First of all, let's build the DC. Open the server manager, click add role, when you select the domain control, the following window will pop up, you want to click on the marked option.

3. Then select Active Directory Domain Services and select next until the installation is complete.

4. After installing the domain control service in the server manager, you need to make a second configuration.

After selecting the start-> run command, type dcpromo to open the active Directory installation wizard

5. Click next.

6. Select to create a domain in the new forest

7. The domain created in DC should be the same as the name of the primary domain added in DNS.

8. To install DNS, then click next.

Enter a password, which is important, to downgrade the domain, and then click next until the installation is complete.

In this way, the installation of the primary domain control is over.

Next, install additional domain controls.

Before installing the additional domain control, in addition to configuring the IP address, you also need to change the name of the computer. I changed it to SDP, and the modified hostname will not take effect until the computer is restarted. When configuring the IP address, set the dns of the additional domain control to the IP address of the master domain control. Open the server manager, click add role, when you select the domain control, the following window will pop up, to click add required function.

Then select Active Directory Domain Services and select next until the installation is complete.

4. After selecting the "start"-> "run" command, type dcpromo to open the active Directory installation wizard.

5. Select "add a domain controller to an existing domain" under "existing forest" and click next.

6. Enter the domain name xpg.com, which is consistent with the domain name on the primary domain control.

7. Click "Settings button" and enter the domain administrator account administrator and password

8. Select the domain to which you want to add an extra domain controller.

9. Select the site where the extra domain controller is located. There is only one default site Default-First-Site-Name in the domain. Click the "next" button directly.

10. The DNS server will be installed on this server, and it will be set as the "Global Catalog" server. Click next.

11. When prompted that the DNS delegate cannot be created, click the Yes button directly.

twelve。 The location of database folder, log folder and SYSVOL folder is still the default value.

13. Set the directory service restore mode password that meets the password policy requirements, as shown in the figure.

14. Open the Summary dialog box and click the next button.

15. Start installing the service and check "restart when finished".

After the additional domain control is installed and then restarted, the Active Directory user and computer are opened in the Administrative tools, and the additional domain control automatically copies all the data in the Active Directory from the primary domain control.

Next, start the test.

First of all, start in the main domain control-- > Administration tools-- > Open Active Directory users and computers, right-click on the domain xpg.com, select New organizational Unit, enter the name of the organizational unit, click OK, and the organizational unit is created.

Once you have created the organizational unit, you can create user accounts in the organizational unit. For example, right-click on the "renshibu" OU and select the "New"-- > "user" command to open the "New user object" dialog box. Enter the name of the account under which the user logs in in the user login name in the name field. Then click the next button.

Set the password for the user, the password must meet the complexity requirements, the minimum length is 7 characters, and the check box "the user must change the password the next time they log in" is selected by default to facilitate the user to change the password.

At this time, go to see if the previous settings appear on the additional domain control, and it is found that there are.

This shows that the deployment of additional domain controls is very successful.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.