Newbie Qustion On Win Server 2008??

[Nebras]

I have this situation that i have to deal with and i dont know where to start correctly and i just need the steps that i have to do to build my work correctly i hope you help me:

 

"MR. Submarine is an Ontariobased fast-food company, specialized in healthy food and considered one of the major retailers of submarine sandwiches in the country.

 

MR. Submarine Corp. has hired you on a contract basis, to help with the implementation of a new Windows 2008 domain. You have been given the task of installing the first domain controller on the network at the headquarter office, which will install Active Directory and create a new domain for MR. Submarine Corp. You are also in charge of making sure that all client computers, which have been installed, are able to join the new domain.

 

In this part, you will create a new domain for MR. Submarine Corp., called submarinefastfood.com, by building the first domain controller on the network using the Active Directory installation program. You will then configure DNS to work with Active Directory and test that it is working properly on the network. Once your domain controller is working properly, you will join a Windows server 2008 and a Windows XP Professional machine to the domain. Finally, you will create a second domain controller for higher reliability and better performance on your domain and test replication between the two domain controllers"

 

until now i installed the win server 2008 on a virtual pc and i learned how to build the domain but im still don't know if it need specific configuration, and i don't know how to install win xp virtually inside the server and not understanding where to configure the site .

 

I now that im totally newbie but i just need the Action sequence?

 

Thanks in advance.

[ICTCity]

actually you don't have to configure the site. You have to create a domain called submarinefastfood.com, which could be "name_of_fantasy.local.me.you", it doesn't matter, this will be the DOMAIN NAME.

 

I don't understand if you really want to install a VIRTUAL XP INSIDE your server, if so, you just have to use Virtual pc, VmWare Player, Virtual Box, which can virtualize a OS.

 

Specific configuration is not needed, once you installed XP, you can simply add it to the domain. To do this, set up PROPERLY DNS settings (correct IP), and then change from WORKGROUP to the domain name.

 

To replicate the DC, it's more than easy. Install new Windows Server, add the same role you added to the existing server and during the installation select DOMAIN CONTROLLER IN EXISTING FOREST.

 

Let me know if you need more help.

[Nebras]

ICTCity :

I don't understand if you really want to install a VIRTUAL XP INSIDE your server

 

 

 

OK so when he is asking about "you will join a Windows server 2008 and a Windows XP Professional machine to the domain"

 

What dose he mean if not installing a virtual machine.

 

And thanks for replying.

[ICTCity]

OK so when he is asking about "you will join a Windows server 2008 and a Windows XP Professional machine to the domain"

 

What dose he mean if not installing a virtual machine.

 

And thanks for replying.

 

Well, I've never said you don't have to create a virtual machine. If you want you can install a virtual machine inside your server...

 

Anyway join a domain means that you have at least 1 server and 1 client, the client (in your case is Win XP) must be configured to join your domain.

 

let me know.

[Nebras]

Ok that is clear now,

 

So I'm now installing the first domain and they asking me for the (FQDN) is it"submarinefastfood.com" Because they said "called submarinefastfood.com,by building the first domain controller on the network using the Active Directory installation program." But i just want to make sure.

OR that will be later.

 

And i want to ask you about the IP that i should but for the server is it a class C as usual, or i should give it class A as I'm building the sever for a large company.

[ICTCity]

Yes the FQDN (Fully Qualified Domain Name) is submarinefastfood.com in this case.

 

Regarding the IP class, it's hard to say... it only depends on HOW MUCH is "LARGE COMPANY".

[Nebras]

OK So now i reached installing the second dc.

 

But the problem that when i go to dcpromo the only available option is to uninstall the first ad dc.

 

and there is no option to add ac to the forest.

 

so what should i do?

[Nebras]

like this link:

http://helewix.com/blog//index.php/Microsoft-Solutions/2011/03/15/server-2008-dcpromo-remove-active-directory-domain-controller-using-dcpromo

[ICTCity]

You must run DCPROMO from the secondary!

 

When you say: "I reached installing the second DC" you mean you have installed only windows or also other roles?

[Nebras]

I installed the roles.

for the first dc and dns,ahcp.ac

[ICTCity]

Well you don't have to install roles on the secondary, simply run dcpromo...

[Nebras]

So you are saying that i should install another win 2008 on the vmware and configure the dcpromo on it right?

[ICTCity]

yes correct.

[Nebras]

Can you help me about how to test the replication between the 2 dc?

[ICTCity]

Can you help me about how to test the replication between the 2 dc?

 

It's easy:

 

From the command line type:

 

repadmin /showrepl Server_Name.YourDomain.Whatever

 

and then:

 

dcdiag /test:replications

 

Let me know.

 

Cheers

[Nebras]

Thanks for the replication test it worked.

 

but now i'm on this How can you stop the users of the domain from accessing the control panel (except the administrators)?

[ICTCity]

Thanks for the replication test it worked.

 

but now i'm on this How can you stop the users of the domain from accessing the control panel (except the administrators)?

 

 

Start > run > gpedit.msc > User Configuration\AdministrativeTemplates\Start Menu & Taskbar

 

Cheers

[Nebras]

I was logged in by administrator account on the server and when enabled the "prohibit access to the control panel"

the control panel on the server that im working on had been disabled!!

Any help.??

[Nebras]

I was logged in by administrator account on the server and when enabled the "prohibit access to the control panel"

the control panel on the server that im working on had been disabled!!

Any help.??

 

I'm OK now it turn out that im working in the local policy group,

thanks.

[Nebras]

OK, so now I'm asked about How can you remove Active Directory from a domain controller and make it a standalone server again?

i know that i should lunch dcpromo and uninstall it but do i have to do it to the both domain controllers on my network or just one?

[ICTCity]

OK, so now I'm asked about How can you remove Active Directory from a domain controller and make it a standalone server again?

i know that i should lunch dcpromo and uninstall it but do i have to do it to the both domain controllers on my network or just one?

 

Here you can find a complete explenation:

http://technet.microsoft.com/en-us/library/cc755937(WS.10).aspx

 

Anyway, open domain and trust and remove the "secondary" server (DELETE / DEMOTE / REMOVE).

 

Then, do the same thing on the "first" DC.

 

You can use DCPROMO on both servers, it's up to you.

 

If you have 2 servers, you have to demote BOTH starting from the "secondary".