SYS255 DNS ADDS Role - eitan-j/tech-journal GitHub Wiki

  • Change AD server network adapter to LAN
  • Power on AD server
  • Wait
  • OK
  • Create new password
  • OK
  • Start "Server Manager"
  • Close popup
  • "Local Server" -> "Ethernet0"
  • Right click Ethernet0 -> "Internet Protocol Version 4" -> Properties
  • Enter new IP info
  • OK -> Close
  • Computer name -> Change... -> ad01-eitan -> OK x2
  • Restart
  • Server Manager
  • Manage -> Add Roles and Features -> Next x3
  • Check Active Directory Domain Services -> Add Features
  • Next x3
  • Check "Restart the destination server automatically if required" -> Yes
  • Install
  • Wait
  • "Promote this server to a domain controller"
  • "Add a new forest"
  • eitan.local
  • Next
  • Create DSRM password
  • Next x5 -> Install
  • Wait
  • Server Manager
  • DNS (wait for it to show up?)
  • Right click AD01-EITAN -> DNS Manager
  • ad01-eitan.eitan.local -> Forward Lookup Zones
  • Right click eitan.local -> New Host
  • Set Name to fw01-eitan
  • Set IP to 10.0.5.2
  • Check "Create associated pointer record"
  • Add Host -> OK -> Done
  • Right click "Reverse lookup Zones" -> New Zone... -> Next x4
  • Set network ID to 10.0.5
  • Next x2 -> Finish
  • Go to eitan.local
  • Right click ad01-eitan -> Properties
  • Uncheck and recheck "Update associated pointer record"
  • OK
  • Do the same with ws01-eitan
  • Close
  • AD DS
  • Right click AD01-EITAN -> Active Directory Users and Computers
  • Click eitan.local
  • Right click Users -> New -> User
  • Create eitan.jacobsohn-adm account
    • Set the full name to Eitan Jacobsohn (adm)
  • Create password
  • Uncheck User must change password at next logon
  • Next -> Finish
  • Users
  • Right click Eitan Jacobsohn (adm) -> Add to a group...
  • Domain Admins -> OK -> OK
  • Repeat to create a normal user eitan.jacobsohn
    • Don't add to any groups
  • Logout
  • Enter wks01
  • Set DNS to 10.0.5.5
  • Control Panel -> System and Security -> System -> Advanced system settings -> Computer Name -> Change...
  • Select Domain
  • eitan
  • OK
  • Enter creds of eitan.jacobsohn-adm
  • Wait
  • OK -> OK
  • Restart