Introduction_of_ADDS
- 1. ACTIVE DIRECTROY DOMAIN SERVICES (ADDS) Overview
- 2. Active Directory Domain Services (ADDS): Active directory domain services is a directory services which is developed by Microsoft on concept of X.500 and lightweight directory access protocol (LDAP). First it comes with windows server 2003. Later in windows server 2008 and windows server 2012 Microsoft has improved the functionality and features of ADDS. Configuration and user management is more friendly in windows server 2008 and windows server 2012. On other word we can say that ADDS is the windows based service which contain all the information like user users, group, OU, ETC……. There are two blocks available in ADDS. 1.) Physical Block 2.)Logical Block 1.)Physical Block: Contains the all folders, printer, users, Site, etc…. 2.)Logical Block: Contains the domains, trees, forest, OU etc…. At the time of installation of ADDS two folders are created by default. a.) SYSVOL: Also called System Volume. It contains all group policy, Replication, Sites, Tree etc… b.) NTDS: New Technology Directory services. File format NTDS.DIT, EDB.CHK, Temp.EDB, GRS files.
- 3. At the time of installation of ADDS by default two protocols are used a.)Kerberos: Port no. 88 and it is used for authentication purpose. b.)LDAP: Stands for Lightweight Directory access services Port no. 3898 and 636. It is used for SLS(security) purpose. At installation time by default four logical partitions created. 1.) Schema Partition 2.) Configuration Partition 3.) Domain Partition 4.)Application Partition Schema partition and configuration partition is same for every tree in a forest(replicate to all domain in a forest) but domain partition and application partition is different for every tree in a forest. 1.)Schema Partition: The schema partition contains the definition of objects, classes, attributes within the forest. 2.)Configuration Partition: The configuration partition contains the information of physical structure and configuration of the forest, trust and replication, time management, password, policy. Domain and domain list. 3.)Domain Partition: The domain partition contains the all objects created in the domain and replicate within its domain only. 4.)Application Partition: contains the all DNS related information within its domain.
- 4. ADDS Environment: There are three environment in ADDS. 1.)Trust relationship 2.)FSMO Role 3.)Backup and restore #Objects: ADDS is collection of objects. Objects has its two category one is Resources (i.e. Printers) and the next is security principles (users computers accounts and group) security principle assigned unique identifier called SIDs. Each objects responsible for single entity like a user or a computer etc. and its attributes. Schema object used to modify or extend the administrators when necessary. #Forest: Top structure of the ADDS is called Forest. Forest is the collection of Trees that share the Global catalog. Directory schema, logical structure, directory configuration. Forest work as a security boundary within user, computer, group, and other objects. #Tree: Tree is the collection of Domains and domain trees. It linked in a trust hierarchy. #Domain: Domain is defined as the logical group of network objects like users, computers etc…. And it share same Active directory database. Domain is identified by the unique name DNS (Domain name space).Port 53
- 5. #Organizational Unit: OU is worked as a container of objects. OU can contain other OU. Microsoft recommend OU in a domain structure for administration and policy. On OU administrative power are commonly delegated. #Replication: Active directory synchronize changes using replication. Replication pull changes from the server where the changes was effected. Knowledge Consistency changes create replication topology of sites to manage traffic. Replication uses Remote Procedure Calls(RPC) over IP. Between two sites SMTP used for replication only for changes in Schema, configuration, Global Catalog. SMTP does not use for replication in default domain partition. #FSMO: Flexible Single Master Operations Roles also called FIZZ-MO role. Its also called operations master roles. Domain controller allow to make simultaneous updates in multiples place. These operation perform using roles: Schema Master, Domain naming master, PDC Emulator, RID Master, Infrastructure Master. #Trusting: Allow users to access other domain resources. It cerates automatically when domain creates. There are several types of trust: One way trust, Two way trust, Trusting Domain, Trusted domain, Transitive trust, Intransitive trust, Explicit Trust, Cross link trust, Forest trust.
- 6. #Global Catalog services: Stands for global catalog services. It install automatically when AD or PDC (First domain in environment) install. It provides authentication and easy search. It is only one in a forest. But as per our requirement in environment we can extend or create if the location is different. ***********************
- 7. Installation of Active Directory Domain Services Installation
- 8. Installation process of Active Directory or creating process of PDC (Primary domain Controller): This is the first domain controller in forest. #Requirement: Before installation of the ADDS we must have a server with below listed requirement. 1.) Operating System: Operating system (i.e. windows server 2008, windows server 2012.etc… any edition) should be installed on the server. If the server running the web edition can not act as a DC. 2)Hard Disk: Server must has the at least 500MB of free space for active directory database and sysvol folder. And 100MB of free space for log files. 3.)A disk volume formatted with NTFS or REFS: It is required for the sysvol folder. At the time of installation of server it creates automatically. Windows server 2008 support NTFS disk format and windows server 2012 support REFS disk format. 4.)Static IP: It required static IP at the time of installation. 5.)DNS: AD required DNS (Domain Name Space: a unique name). 6.)Administrative Privileges: We must have to login with the user account which have a sufficient admin rights. It should be the member of administrator. #Installation: In server 2000 or 2003 AD provides AD installation wizard(dcpromo.exe) that handles all aspect installing or removing AD. But in server 2008 or server 2012 is different from server 2003.We can install ADDS without installing DC.
- 9. #Installing Process: Below is the installation procedure of ADDS. 1. Select Add roles and features from server manager Dashboard.
- 10. 2. Click on the NEXT Tab on the open Add roles and features wizard. This is the verification wizard.
- 11. 3.Select the installation type and click on the next tab to continue. If we install on the virtual machine we must have to select Remote Desktop Services Installation.
- 12. 4.In this wizard select the HDD or location where have to install the role. It could be on server or virtual HDD. Select the option and click on the next TAB to continue.
- 13. 5. After clicking on the Next a new window will appear. This window shows that to select the role which want to install. a.) Select the Active Directory Domain Services role to install ADDS on server. If want to install DNS then must have to select DNS server. b.)After selecting the ADDS role click on the Next to continue.
- 14. 6.In this window select the features which want to install and click on the Next to continue.
- 15. 7.The Next opened window is Active Directory Domain Services window. This describe about the ADDS stores Users, computers or other devices. It also managed the network services for sharing. We can easily apply the policy. Etc….. Click on the Next Tab to continue installation.
- 16. 8.After clicking on the next a new window appear. Which shows about the DNS (Domain Name System) by clicking on the Next go to the new window.
- 17. 9.The Next window is the confirmation window. Select restart the destination server automatically if required and click on the Install Tab to install the following roles, role services, or features on the selected server.
- 18. 10.Now the role will install.
- 19. 11.After installing the role. Click on the ADDS tab on the Dashboard to configure the ADDS services. On newly open window click on the more option to continue.
- 20. 12.Click on the promote this server to a domain to promote the ADDS services.
- 21. 13.A new window will appear which will show the running status of the promotion.
- 22. 14.Now ADDS configuration window will appear for deployment of the configuration. In this window there are three option which describe the following. a.)Add a domain controller to an existing domain: If we want to install ADC(Additional domain controller) then we must have to select this option. b.)Add a new domain to an existing forest: If we want to install CDC(Child domain controller)then we must have to select the option. If we need to install a tree domain in the environment explore the option and select. c.)Add a new forest: If we need to install PDC(Primary or parent domain controller). Then we have to select this option and have to give the fully qualified domain name to continue. Click on the Add a new forest and give the name to continue.
- 23. 15.After clicking on the next a new window will appear which shows the Domain controller option. If we have an existing DC in the environment then we must have to select the degrade server for forest function level and Domain function level. Also give the DSRM password for the restoration of directory service. DSRM password must be deferent from the administrator login password. Click on the Next to continue.
- 24. 16.Newly open window will describe about the DNS option. If we need to delegate the DNS the must have to create DNS delegation otherwise simply click on the Next to continue.
- 25. 17.Next window is for the additional options. Which asked for the Netbios domain name. After giving the netbios domain name click on the next to continue.
- 26. 18.Next window will for database path, log file folder path and sysvol folder path. Give the path and click on the Next to continue.
- 27. 19.Newly opened window will shows the review. Click on the Next to continue.
- 28. 20.Now prerequisites check window will appear. Click on the install to continue.
- 29. 21.Installation window will open which shows the installation progress after installation will finish click on the Next to continue.
- 30. 22. After installation Newly opened window will shows the All ADDS information. Which shows that the ADDS has been installed successfully.
- 31. 23.After installation of the ADDS restart the system and check the status of ADDS. Whether its installed successfully of not. Go to the IPv4 properties and check the DNS IP and change the same to continue the ADDS services. ****************************************************