Shulou(Shulou.com)06/02 Report--

Active Directory is called "active Directory", and the first domain member created in the active Directory will be the first domain controller for this domain.

Necessary conditions for creating a domain:

DNS and DNS server

Because the domain controller needs to register itself with the DNS server so that other computers can find this and controller through the DNS server, the domain controller must have an DNS domain name and a DNS server that supports Active Directory.

There are two ways to create an active directory:

Select Server Management-roles-add roles-Select Active Directory Domain Services

Add the functions necessary for Active Directory domain services. Net Framework3.5.1

Installation

After the installation, run the Active Directory Domain Services installation Wizard (dcpromo) finally, and this server will become a full-featured domain controller.

The second method is relatively simple, just run dcpromo to automatically install the above functions and directly start the domain service installation wizard

Now start to build new domains in the new forest.

Enter the domain name of your new domain here, such as: xwxh.com

Select the forest function level here. This level is to select whether the domain you are currently creating is joined by other levels of servers. For example, if you have server 2003, please select the 2003 function level. Here we choose the default 2008 R2.

Create a DNS server for this domain controller here, and note that this server is required. The first domain controller in the domain must also play the role of a global catalog server.

Because DNS is the first DNS in this domain, there is no parent domain delegate, select Yes

What is shown here is the location of the database folder for this domain (if there are multiple hard drives in your computer, it is recommended that you set the database and log file folders to different hard drives, on the one hand, because the two hard drives run separately, which can improve the running efficiency; on the other hand, because storing them separately can avoid problems with two data colleagues, so as to improve the ability to repair Active Directory.)

Finally, set the administrator password for the active Directory service restore mode (not the domain controller login password). Directory service restore mode is a secure mode that allows you to repair Active Directory data. You can select this mode when the system starts up by pressing F8. What you need to enter this mode is the administrator password of the directory service restore mode. The password you enter must follow the complex password rules.

It usually takes about 5-10 minutes to wait for a successful installation

After a successful installation, the computer will prompt you to restart and start running the active Directory service.

After restarting, the computer will prompt you to change a complex password.

Add a domain member server to the new domain

PC5 is the domain controller IP address: 192.168.100.1 DNS:192.168.100.1

PC6 is the domain member server IP address: 192.168.100.100 DNS:192.168.100.1

PC6

System-change Settings-change-belong to selection-Domain

Enter the domain name to which you want to join the domain

Enter your domain member user and password in this window

Confirm whether the computer prompts you to restart after joining. After restarting, the computer successfully joins the selected domain.

PC5

Open Active Directory users and computers-in xwxh.com-computers, you can see that PC6 member servers have joined this domain

Xie Jianjian, November 10, 2017

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.