The Active Directory is a hierarchical structure of objects (resources, services, users and policies) used to store information about network resources in a domain.
Each object has a unique name in the structure and certain characteristics
INSTALLATION Before installing Windows Server 2008 in an existing domain we will prepare the framework for accepting new features for that use the commands:
Adprep / forestprep Adprep
/ domainprep / gpprep
Adprep / rodcprep (Prepare the schema to work with domain controllers read-only)
Within the installation features are:
- Improved installation wizard
- Unattended through command line, The command format is:
dcpromo / unattend / unattendOption: value / unattendOption: value ...
An example is:
dcpromo / unattend / InstallDns: yes / confirmGC: yes / ReplicaOrNewDomain: replica / databasePath: "e: \\ NTDS" / logPath: "e: \\ ntdslogs" / SYSVOLPath: "g: \\ sysvol" / SafeModeAdminPassword: FH # 3573.cK /rebootOnCompletion:yes
- Para obtener todas las opciones disponibles se puede utilizar el comando
dcpromo /?:unattend
- Archivo de respuestas : Es una opción que se puede utilizar para instalaciones desatendidas, instalaciones en Core Server o instalaciones en sucursales, para ello utilizaremos un archivo con las respuestas necesarias durante el proceso de instalación, dicho archivo iniciara con la etiqueta [DCINSTALL] la cual estará seguida de una respuesta por cada línea del archivo, como se muestra a continuación:
[DCINSTALL] UserName =
UserDomain = Password =
ReplicaOrNewDomain = replica
DatabasePath =
LogPath =
SYSVOLPath =
InstallDNS = yes
ConfirmGC = yes
SafeModeAdminPassword =
RebootOnCompletion = yes Once the file can start the installation using the command:
dcpromo / unattend: "path to the answer file"
- RODC (DCs read only) : As its name says is a domain controller can not make changes to the database directory assets or the DNS database, is an installation option designed for branch offices where you can not guarantee the physical and logical security of the server. The theme is Ampliare in a future article ...
As consideration for the installation of an RODC must be borne in mind that this must be replicated to a server that allows writing to the database, the server must be Windows Server 2008, and the domain functional level must be Windows 2003 or higher, you must run adprep / forest rodcprep level.
multiple RODC is supported not for the same domain in the same place that the RODC does not share information with each other. That is why implementing multiple RODC could mean different searches for the same authentication at some point meaning inconsistencies in the login if the WAN link between the site and the plant is offline.
addition within the installation process we choose the specific site in which we place the new domain controller, we can choose the new driver the server global catalog and we choose if we want to install DNS is made automatically. If the installation does not detect any other domain controller DNS installed on the network automatically, disable the RODC and leave the server as a global catalog server.
0 comments:
Post a Comment