D.3.1 Installing the Active Directory Server

D.3.1.1 Notes

• These instructions work for Windows Server 2003 Enterprise Edition. If you are not using this operating system, your instructions may vary.

D.3.1.2 Requirements

• Windows 2003 Server Operating System.
• You should be familiar with A Recipe for Configuring and Operating LDAP Directories.

D.3.1.3 Components

• Active Directory Server
  • This is the actual LDAP directory server.

D.3.1.4 Installation Decisions

There are several decisions one must make prior to installing Active Directory.

• Domain Controller Type
  • Either create a domain controller for a new domain or an existing one.
• Domain Type
  • Either create a new domain in a new forest, a child domain in an existing domain tree, or a domain tree in an existing forest.
• DNS Name
  • This is the fully qualified domain name for your server. It will serve as the base DN for your server.
• NetBIOS Domain Name
  • This is the NetBIOS Domain Name for backwards compatibility with earlier versions of Windows.
• Database Folder
  • This is where the Active Directory Databases will be stored.
• Log Folder
  • This is where the Active Directory log will be stored.
• Shared System Volume Folder
  • This is where the server's copy of the domain's public files will be stored.
• Permissions
  • You will decide whether to have permissions compatible with Windows 2000 and Windows 2003 only or, with a security cost, compatible with pre-Windows 2000 server operating systems.
• Restore Administrator Password
  • This is the password needed when Active Directory is started in Directory Services Restore Mode.

D.3.1.5 Installation

(1) Login with your Administrator user ID and password.

(2) Navigate to Start, Administrative Tools and click on Manage Your Server.

(3) You should now see the Manage Your Server Application.

(4) Click on Add or remove a role.

(5) You should see the Configure Your Server Wizard.

(6) Click on Next to continue.

(7) The Wizard will try to determine your network connection.

(8) Once your network connection has been determined, you will be presented with a Configuration Options dialog.

(9) Choose Custom configuration in the menu and click Next.

(10) You will now be able to choose the roles for your server.

(11) Select Domain Controller (Active Directory) in the list and click Next.

(12) A summary of your selections will be shown.

(13) Click Next.

(14) You should now see the Active Directory Installation Wizard.

(15) Click Next.

(16) Click Next after reading the Operating System Compatibility screen.

(17) You will now choose your Domain Controller Type. These instructions will follow creating a Domain Controller for a new domain.

(18) Click Next.

(19) Select which type of domain to create and click Next.

(20) You will now need to decide the full DNS name for your domain.

(21) Enter the full DNS name and click Next.

(22) You will now need to choose a NetBIOS name for your domain for compatibility with earlier versions of Windows.

(23) Click Next.

(24) Choose the folders where you wish to store database and log files and click Next.

(25) Choose the folder where you wish to keep the server's copy of the domain's public files and click Next.

(26) If your DNS server does not support dynamic updates, you will need to correct the problem or install DNS on your server.

(27) Choose the option that best suits your institution and click Next.

(28) You will now need to decide whether to stay compatible with pre-Windows 2000 machines. Security is better implemented in Permissions compatible only with Windows 2000 or Windows Server 2003 operating systems.

(29) Choose the option that suits your institutions needs and click Next.

(30) You will now be presented with the Directory Services Restore Mode Administrator Password dialog.

(31) Enter the Restore Mode password and click Next.

(32) After confirming the information in the summary, click Next.

(33) The Active Directory Installation Wizard will now Install Active Directory (this may take some time).

(34) Once the installation is completed, click Finish to close the Wizard.

(35) You must restart the server in order for the changes to take effect.

(36) Windows will shut down.

(37) Login as Administrator.

(38) You should now see that your server is now a domain controller.

(39) Click Finish.

(40) The Manage Your Server application will also show that Active Directory was successfully installed.

(41) Active Directory should now be installed.

(42) The Windows 2003 Support Tools should also be installed to aid in the LDAP configurations.

(43) Open Windows Explorer.

(44) Navigate to the Support Tools directory on the Windows 2003 CD.

(45) Run 'SupTools.msi'.

(46) Click 'Next' to continue.

(47) If you agree to the license, click the 'I agree' radio button and click 'Next' to continue.

(48) Enter in your name and organization and click 'Next' to continue.

(49) Select your destination directory and click 'Install Now' to continue.

(50) You should see the installation progressing.

(51) Click 'Finish' to complete the setup.