1. Installing and Using Active Directory Written by Marc Zacharko

2. The Installation Process

3. 1. Click “Start”, click “Run”, type “dcpromo”, and then click “OK”.

4. 2. when the “Active Directory Installation Wizard” starts, click “Next”.

5. 3. On the next page of the “Active Directory Installation Wizard”, click “Next”.

6. 4. On the “Domain Controller Type” page, click “Domain Controller for a new domain”, or you can choose to click “Additional domain controller for an existing domain” if this domain controller will be just added to a pre-created domain. Then click “Next”.

7. 5. On the “Create New Domain” page, choose either “Domain in a new forest”, “child domain in an existing domain tree” or “domain in an existing forest”, depending on which of these options is appropriate for the type of domain you are intending on creating. Then click “Next”.

8. 6. On the “New Domain Name” page, in the Full DNS name for new domain box, type whatever name you would like your new domain controller to have, and then click “Next”.

9. 7. the next screen that appears allows you to provide a NetBIOS name, the name that users of earlier versions of windows will see, this screen provides an automatic name, there is no need to change this name, but if you wish, you may, click “Next”.

10. 8. On the “Database and Log Folders” page, accept the defaults in the Database folder box and the Log folder box, and then click “Next”.

11. 9. On the “Shared System Volume” page, you can either choose a new location for the system volume share, or accept the default in the Folder location box. Then click “Next”.

12. 10. On the “DNS Registration Diagnostics” page, check the “Install and configure the DNS server on this computer and set this computer to use this DNS server as its preferred DNS Server” radial button. Then click “Next”.

13. 11. On the “Permissions” page, click the “Permissions compatible only with Windows 2000 or Windows Server 2003 operating systems” radial button. Click “Next”.

14. 12. On the “Directory Services Restore Mode Administrator Password” page, enter a password in the Restore Mode Password box, retype the password to confirm it in the Confirm password box, and then click “Next”.

15. 13. On the “Summary” page, confirm the information is correct, and then click “Next”.

16. 14. an installation process window will appear, showing a small graphic which shows the progress of the files being installed, this windows is shown below.

17. 15. On the “Completing the Active Directory Installation wizard” page that appears after the installation process has completed, click “Finish”.

18. 16. When prompted to restart the computer, click “Restart now”.

19. Using Active Directory

20. Creating Users click on the “Start button and highlight “Control Panel”, then “Administrative tools”, then click on “Active Directory Users and Computers”. Highlight the option on the left of the screen that is the name of your domain. Right click in the white space on the right hand side. highlight “New” and then click on “User”. The first screen that appears asks for the user’s first and surname and also the name they will use to log on to the server, fill these in as necessary. Click next after doing this. The next screen asks you to set, and confirm a password for the user to use the first time they log on. There are also a few options at the bottom of this page. These options control the lifespan of the password. You can either allow the user to change the password at first logon, never be allowed to change their password, stop the password from ever expiring and lastly disable the user’s account. Lastly click “Next”. The next screen is a summary of all the items that will be created upon clicking finish, read these and click the “Finish” button. click on the “Start button and highlight “Control Panel”, then “Administrative tools”, then click on “Active Directory Users and Computers”. Highlight the option on the left of the screen that is the name of your domain. Right click in the white space on the right hand side. highlight “New” and then click on “User”. The first screen that appears asks for the user’s first and surname and also the name they will use to log on to the server, fill these in as necessary. Click next after doing this. The next screen asks you to set, and confirm a password for the user to use the first time they log on. There are also a few options at the bottom of this page. These options control the lifespan of the password. You can either allow the user to change the password at first logon, never be allowed to change their password, stop the password from ever expiring and lastly disable the user’s account. Lastly click “Next”. The next screen is a summary of all the items that will be created upon clicking finish, read these and click the “Finish” button.

22. Logon Hours Double click on the user’s account, displayed in the window in “Active Directory Users and Computers”. Click on the “Account” tab. Click on “logon hours”. In the window that appears, highlight the desired days of the week and times of the day and select whether you would like to permit or deny the user access at these times, these two options are located at the right of the window. permitted hours appear blue and denied hours appear white. By default, the entire weeks is permitted. When finished, click “Ok”. Double click on the user’s account, displayed in the window in “Active Directory Users and Computers”. Click on the “Account” tab. Click on “logon hours”. In the window that appears, highlight the desired days of the week and times of the day and select whether you would like to permit or deny the user access at these times, these two options are located at the right of the window. permitted hours appear blue and denied hours appear white. By default, the entire weeks is permitted. When finished, click “Ok”.

24. Permitting only selected Computers Click on the user in the window of “Active Directory Users and Computers”. Click on the “Account” tab. Click the “LogOn To” button. Change the radial button from the currently selected “All computers” to “The following computers”. Type each name of each workstation individually into the text box marked “Computer name”, click “Add” between each workstation name. When you have added all the workstations you wish to permit the user to access, click “Ok” Click on the user in the window of “Active Directory Users and Computers”. Click on the “Account” tab. Click the “LogOn To” button. Change the radial button from the currently selected “All computers” to “The following computers”. Type each name of each workstation individually into the text box marked “Computer name”, click “Add” between each workstation name. When you have added all the workstations you wish to permit the user to access, click “Ok”

26. User Details Click on the user account in active directory users and computers. Click the “Address” tab. Fill in each text box with relevant information about the user. This is only an information storage method and serves no other purpose except easy retrieval of information at a later date if it is needed by administrators. Click on the user account in active directory users and computers. Click the “Address” tab. Fill in each text box with relevant information about the user. This is only an information storage method and serves no other purpose except easy retrieval of information at a later date if it is needed by administrators.