Tuesday, April 20, 2010

How to promote the first Domain Controller in the forest

First we need to describe the active directory service

Active directory

A directory service provides a centralized location to store information in a distributed environment about networked devices and services and the people who use them. A directory service also implements the services that make this information available to users, computers, and applications. A directory service is both a database storage system (directory store) and a set of services that provide the means to securely add, modify, delete, and locate data in the directory store.



Installing the first Domain controller in the forest

1. Install 2003 OS with service Pack 2
2. Install Antivirus
3. Rename the server and give it name that describe the role owned by this server (locationDC-01) , you can chose you naming convention upon your organization needs
4. Install last updates for windows and antivirus
5. Configure TCP/IP settings
A. If you have multiple NICs on that server please disable them and use on NIC
B. Use static IP for that server (exclude that from your DHCP if exist )
C. Configure the preferred DNS to be the same IP of the server

6. Point to start menu ,open Run and type Dcpromo then press OK
7. In the active directory installation wizard press next
8. Read the operating system compatibility wizard and press next
9. In the domain controller type wizard make sure that Domain controller for new domain check box is selected and press next
10. Select domain in new forest and press next
11. In the new domain name type the full DNS name for new domain and press next (example: Mycompany.loacl) I prefer to use (.loacl) instead of (.com) and that’s called (split-brain DNS)
12. In the NETBIOS Domain Name wizard press next with changing the netbios name
13. In the database and log folder wizard you will be asked where do you want to store the active directory database ,for best performance and recoverability, store the database and the logs on a separate hard disk. Change the Logs Location value to another hard disk. But you can use the default path as well
14. In the shared system volume wizard leave it with the default path and press next
15. In the DNS registration Diagnostics wizard make sure that (install and configure the DNS server on this computer, and set this computer to use this DNS server as its preferred DNS) check box is selected and press next
16. In the permission wizard leave it default and press next
17. In the Directory Serviced Restore Mode Administrative Password screen, specify an administrator password to use when you start the computer in Directory Services Restore mode. You use Directory Services Restore mode when you need to recover the Active Directory database
18. In the summary screen review your settings and press next
19. Click finish after installation completed and chose restart
Note: the local admin password for that server will be used as administrator password for the domain after restart and you can change it

http://support.microsoft.com/kb/238369