Active Directory Services

WORKGROUP AND DOMAIN

A computer network can be divided logically in to two networking
models:
Workgroup
Domain
Workgroup is a peer-to-peer network while domain is a server-based
network. The important differences between the two models are listed
below:

WORKGROUP
1. It is a peer-to-peer networking model.
2. There is no client and no server. All the
computers are equal in status.
3. This model is recommended for small
networks (up to 10 PCs).
4. There is no centralized administration and
each computer is administrated separately.
5. In this model, low-grade OS like 2000/XP
professional and vista can be used.
6.Workgroup can be given a name like sales,
HR, accounts etc.
7. User accounts are created in each PC and
are called Local Users.

DOMAIN
1. It is a server-based networking model.
2. There is a centralized dedicated server
computer called Domain Controller (DC) which
controls all other computers called Clients.
3. This model is recommended for large
networks.
4. There is centralized administration and each
PC can be administrated and managed from the
server.
5. In this model, high-grade OS like Win
2003/2008 server on the server end.
6.Domain can also given a name like xyz.com,
abc.com etc.
7. User accounts are created only in the server
(DC) and are called Domain Users.

What is Active Directory (AD)?

We can manage all user and security centralize with the help of ADS.
In simple terms, AD is a database containing list of user accounts, computer accounts,
shared folders, printers, groups and group policy objects present in the domain network. The
service running AD is called Active Directory Service (ADS).
Client PCs use the protocol LDAP (Lightweight Directory Access Protocol) to
access the ADS. Port Number use 389 in LDAP.

Use of DNS in Domain Network

DNS in the Microsoft Domain Network helps in the following ways:
1. DNS provides ADS service to the clients.
2. Clients locate DCs through DNS.
3. DNS provides Name Resolution Service in the network.
4. Active Directory Domain Network is given the same name as the DNS
domain network

HOW TO CONFIGURE A DOMAIN NETWORK?

There are main two steps in creating a domain network:

STEP 1
First, create a Domain Controller (DC) by installing AD in a win 2003/2008
server computer.
STEP 2
Second, create a computer account for each client PC or make the client PC
member of the domain.

Types of Active
Directory

1. Domain.
2. Domain Controller.
1. Domain.

A domain is a group of computer connected logically in a network. The domain enable the
system administrator to simplify the process of managing the computer and user on the
network.

Types of Domain.
1. Domain forest.
A forest is created when you configure the win 2008 server computer as a domain controller.
A forest is a collections of multiple domain link together and relationship between the
domains. You can add domain tree and domain in a forest.
2. Domain Tree.
A domain tree is made up when there is a parent child relationship between domain in a
forest. The child domain name must include the complete parent domain name.
A tree is set of two or more domains sharing common namespace. For example, we can create a parent
domain and then a child domain. (mail.yahoo.com) mail child domain yahoo parent domain.

Domain Forest and

Tree
Domain Forest

Yahoo.com
(parent domain)

Domain Tree
(Parent Child Relationship)

chd.yahoo.com
(Child domain)

mail.yahoo.com
(Child domain)

abc.mail.yahoo.com
del.chd.yahoo.com
(Child domain)

(Child domain)

Types of Active
Directory
2. Domain Controller.

1. PDC Primary Domain Controller.

2. ADC - Additional Domain Controller.
3. CDC- Child Domain Controller.
1. PDC This is first domain controller in the domain all entrees are created in it like
user account, group policy OU etc.
2. ADC This is true copy of the PDC. This domain controller is use for fault tolerance and load
balance. All Active Directory database is replicated automatically with PDC.

3. CDC This domain controller is sub domain of the PDC. This is use for load balancing
example mail.yahoo.com. Mail is child domain and yahoo parent domain.

Note:- Active Directory Services which make a computer to

Domain controller.

Install Active Directory

Note: Active Directory can not work without DNS. DNS automatically
install and configure during the Active Directory installation.
Requirements for installing AD:
1. Windows 2003/2008 server computer
2. At least one NTFS partition.
3. Static ip address.
4. At least 1 GB free hard disk space.
5. NIC card enabled and connected to network.
Note: - Active Directory (AD) can not be installed in win 2008 server, web edition.
Dcpromo : Type in start>> Run>> dcpromo
This Command is use to install or remove Active Directory.
If you are not able to remove AD, then in the RUN, type:

Dcpromo /forceremoval
Click O.K.

Install Active Directory

PROCEDURE OF INSTALL ACTIVE DIRECTORY
1. Go to a 2008 server computer and in the TCP/IP properties, give an ip address and
in the 'Preferred DNS server' box, type the same ip. But if DNS is already configured
in another PC, type the ip of that PC in the 'Preferred DNS server' box.
2. In the RUN, type
dcpromo
3. Click O.K.
4. Click next > next.
5. Select Domain Controller of a new domain > next.
6. Select Domain in a new forest > next.
7. Type the full DNS name. Type yahoo.com > next.
8. NetBIOS name will remain as YAHOO. Just click next.
9. Give path for storing Active Directory database and log files or just click next.
10. Give the path to store the data of SYSVOL folder or just click next.
11. Select Install and configure.. if you havent created DNS. Active Directory
will install and configure DNS automatically.
12. Click next and then just next.

Install Active Directory

PROCEDURE OF INSTALL ACTIVE DIRECTORY CONTINUEE.
13.Give the Restore Mode password. This password is used to repair Active Directory.
14. Click next.
15. Click next to start the installation of Active Directory.
16. Finally click on finish and restart the computer.
17. Now the computer is a powerful server called Domain Controller (DC).
The following three folders are created by Active Directory:
Database Folder
Log files Folder
SYSVOL Folder
Go to programs > administrative tools > you will get the following new tools:
Active Directory Users and Computers
Active Directory Domains and Trusts
Active Directory Sites and Services
Domain Controller Security Policy
Domain Security Policy.
You can create users in the Active Directory Users and Computers. These users
are called Domain Users and they logon to the domain from the client PC.
Client PC is should be member of the domain.

THANK YOU