2. Active Directory Domain Services (ADDS): Active directory domain services is a
directory services which is developed by Microsoft on concept of X.500 and
lightweight directory access protocol (LDAP). First it comes with windows server
2003. Later in windows server 2008 and windows server 2012 Microsoft has
improved the functionality and features of ADDS. Configuration and user
management is more friendly in windows server 2008 and windows server 2012.
On other word we can say that ADDS is the windows based service which contain
all the information like user users, group, OU, ETC…….
There are two blocks available in ADDS.
1.) Physical Block
2.)Logical Block
1.)Physical Block: Contains the all folders, printer, users, Site, etc….
2.)Logical Block: Contains the domains, trees, forest, OU etc….
At the time of installation of ADDS two folders are created by default.
a.) SYSVOL: Also called System Volume. It contains all group policy, Replication,
Sites, Tree etc…
b.) NTDS: New Technology Directory services. File format NTDS.DIT, EDB.CHK,
Temp.EDB, GRS files.
3. At the time of installation of ADDS by default two protocols are used
a.)Kerberos: Port no. 88 and it is used for authentication purpose.
b.)LDAP: Stands for Lightweight Directory access services Port no. 3898 and 636. It is used
for SLS(security) purpose.
At installation time by default four logical partitions created.
1.) Schema Partition
2.) Configuration Partition
3.) Domain Partition
4.)Application Partition
Schema partition and configuration partition is same for every tree in a forest(replicate to all
domain in a forest) but domain partition and application partition is different for every tree in
a forest.
1.)Schema Partition: The schema partition contains the definition of objects, classes,
attributes within the forest.
2.)Configuration Partition: The configuration partition contains the information of physical
structure and configuration of the forest, trust and replication, time management, password,
policy. Domain and domain list.
3.)Domain Partition: The domain partition contains the all objects created in the domain and
replicate within its domain only.
4.)Application Partition: contains the all DNS related information within its domain.
4. ADDS Environment: There are three environment in ADDS.
1.)Trust relationship
2.)FSMO Role
3.)Backup and restore
#Objects: ADDS is collection of objects. Objects has its two category one is Resources
(i.e. Printers) and the next is security principles (users computers accounts and group)
security principle assigned unique identifier called SIDs.
Each objects responsible for single entity like a user or a computer etc. and its attributes.
Schema object used to modify or extend the administrators when necessary.
#Forest: Top structure of the ADDS is called Forest. Forest is the collection of Trees
that share the Global catalog. Directory schema, logical structure, directory
configuration. Forest work as a security boundary within user, computer, group, and
other objects.
#Tree: Tree is the collection of Domains and domain trees. It linked in a trust hierarchy.
#Domain: Domain is defined as the logical group of network objects like users,
computers etc…. And it share same Active directory database. Domain is identified by
the unique name DNS (Domain name space).Port 53
5. #Organizational Unit: OU is worked as a container of objects. OU can contain other OU.
Microsoft recommend OU in a domain structure for administration and policy. On OU
administrative power are commonly delegated.
#Replication: Active directory synchronize changes using replication. Replication pull
changes from the server where the changes was effected. Knowledge Consistency changes
create replication topology of sites to manage traffic. Replication uses Remote Procedure
Calls(RPC) over IP. Between two sites SMTP used for replication only for changes in
Schema, configuration, Global Catalog. SMTP does not use for replication in default
domain partition.
#FSMO: Flexible Single Master Operations Roles also called FIZZ-MO role. Its also
called operations master roles. Domain controller allow to make simultaneous updates in
multiples place. These operation perform using roles: Schema Master, Domain naming
master, PDC Emulator, RID Master, Infrastructure Master.
#Trusting: Allow users to access other domain resources. It cerates automatically when
domain creates. There are several types of trust:
One way trust, Two way trust, Trusting Domain, Trusted domain, Transitive trust,
Intransitive trust, Explicit Trust, Cross link trust, Forest trust.
6. #Global Catalog services: Stands for global catalog services. It install automatically when
AD or PDC (First domain in environment) install. It provides authentication and easy search.
It is only one in a forest. But as per our requirement in environment we can extend or create if
the location is different.
***********************
8. Installation process of Active Directory or creating process of PDC (Primary domain Controller):
This is the first domain controller in forest.
#Requirement:
Before installation of the ADDS we must have a server with below listed requirement.
1.) Operating System: Operating system (i.e. windows server 2008, windows server 2012.etc… any
edition) should be installed on the server. If the server running the web edition can not act as a DC.
2)Hard Disk: Server must has the at least 500MB of free space for active directory database and sysvol
folder. And 100MB of free space for log files.
3.)A disk volume formatted with NTFS or REFS: It is required for the sysvol folder. At the time of
installation of server it creates automatically. Windows server 2008 support NTFS disk format and
windows server 2012 support REFS disk format.
4.)Static IP: It required static IP at the time of installation.
5.)DNS: AD required DNS (Domain Name Space: a unique name).
6.)Administrative Privileges: We must have to login with the user account which have a sufficient admin
rights. It should be the member of administrator.
#Installation: In server 2000 or 2003 AD provides AD installation wizard(dcpromo.exe) that handles all
aspect installing or removing AD. But in server 2008 or server 2012 is different from server 2003.We
can install ADDS without installing DC.
9. #Installing Process: Below is the installation procedure of ADDS.
1. Select Add roles and features from server manager Dashboard.
10. 2. Click on the NEXT Tab on the open Add roles and features wizard. This is the
verification wizard.
11. 3.Select the installation type and click on the next tab to continue. If we install on the virtual machine we must
have to select Remote Desktop Services Installation.
12. 4.In this wizard select the HDD or location where have to install the role. It could be on server or virtual HDD. Select the option
and click on the next TAB to continue.
13. 5. After clicking on the Next a new window will appear. This window shows that to select the role which want to
install.
a.) Select the Active Directory Domain Services role to install ADDS on server. If want to install DNS then must
have to select DNS server.
b.)After selecting the ADDS role click on the Next to continue.
14. 6.In this window select the features which want to install and click on the Next to continue.
15. 7.The Next opened window is Active Directory Domain Services window. This describe about the ADDS stores Users, computers
or other devices. It also managed the network services for sharing. We can easily apply the policy. Etc…..
Click on the Next Tab to continue installation.
16. 8.After clicking on the next a new window appear. Which shows about the DNS (Domain Name System) by clicking on
the Next go to the new window.
17. 9.The Next window is the confirmation window. Select restart the destination server automatically if required and click on the
Install Tab to install the following roles, role services, or features on the selected server.
19. 11.After installing the role. Click on the ADDS tab on the Dashboard to configure the ADDS services. On newly open
window click on the more option to continue.
20. 12.Click on the promote this server to a domain to promote the ADDS services.
21. 13.A new window will appear which will show the running status of the promotion.
22. 14.Now ADDS configuration window will appear for deployment of the configuration. In this window there are three
option which describe the following.
a.)Add a domain controller to an existing domain: If we want to install ADC(Additional domain controller) then we
must have to select this option.
b.)Add a new domain to an existing forest: If we want to install CDC(Child domain controller)then we must have
to select the option. If we need to install a tree domain in the environment explore the option and select.
c.)Add a new forest: If we need to install PDC(Primary or parent domain controller). Then we have to select this
option and have to give the fully qualified domain name to continue.
Click on the Add a new forest and give the name to continue.
23. 15.After clicking on the next a new window will appear which shows the Domain controller option. If we have an
existing DC in the environment then we must have to select the degrade server for forest function level and Domain
function level. Also give the DSRM password for the restoration of directory service. DSRM password must be
deferent from the administrator login password. Click on the Next to continue.
24. 16.Newly open window will describe about the DNS option. If we need to delegate the DNS the must have to create
DNS delegation otherwise simply click on the Next to continue.
25. 17.Next window is for the additional options. Which asked for the Netbios domain name. After giving the netbios
domain name click on the next to continue.
26. 18.Next window will for database path, log file folder path and sysvol folder path. Give the path and click on the
Next to continue.
29. 21.Installation window will open which shows the installation progress after installation will finish click on the Next
to continue.
30. 22. After installation Newly opened window will shows the All ADDS information. Which shows that the ADDS has
been installed successfully.
31. 23.After installation of the ADDS restart the system and check the status of ADDS. Whether its installed successfully
of not. Go to the IPv4 properties and check the DNS IP and change the same to continue the ADDS services.
****************************************************
