Active Directory Installation
Active Directory must be installed on Windows 2000 servers that are to be Windows 2000 domain controllers. It can be installed on Windows 2000:
- Advanced Server
- Datacenter Server.
When Active Directory is installed on a computer, that computer is promoted by Active Directory to a domain controller. If the computer is the first domain controller, it creates an Active Directory database. If it is not the first, it gets a read and write copy of the AD database.
- The computer must be Windows 2000 Server, Advanced Server or Datacenter Server.
- At least one volume on the computer must be formatted with NTFS.
- DNS must be active on the network prior to AD installation or be installed during AD installation. DNS must support SRV records and be dynamic.
- The computer must have IP protocol installed and have a static IP address.
- The Kerberos v5 authentication protocol must be installed.
- Time and zone information must be correct. Simple Network Time Protocol (SNTP) (RFC 1769) synchronizes time on network computers (nodes)
You can install Active Directory by selecting "Start", "Run", and typing "Dcpromo.exe" in the text box or follow the following selections:
- Click "Administrative Tools".
- Select "Configure Your Server".
- Select "Active Directory Installation Wizard".
Directory Service Client
On non Windows 2000 systems, the Directory Service Client can be installed which will allow those systems to:
- Search the Active Directory.
- Change passwords on domain controllers.
- Use D6 shares that are fault tolerant.
Internet Explorer 4.01 or later must be installed on any system that the Directory Service Client is to be installed on in order for the install wizard to run. To install Directory Service Client:
- Place the Windows 2000 CD in the CDROM drive.
- Indicate that you do not want to upgrade Windows and close the dialog box.
- Open a DOS prompt and change drives to the drive letter of the CDROM drive,
- Type "cd \clients\win9x" and type "dsclient".
- Follow the wizard prompts to complete the installation.
DNS is required to use Active Directory since clients use DNS to locate Active Directory controllers. Servers and client computers register their names and IP addresses with the DNS server. The DNS server must support Service Resource Records (SRVs) according to RFC 2052 and dynamic update protocol according to RFC 2136. DNS can be installed with the Active Directory server or on a separate DNS server.
Active Directory Installation Effects
- The server becomes a domain controller.
- A new Windows 2000 domain is created.
- A new domain tree and forest is created.
In each child domain, Active Directory must be installed on the first domain controller.
Verification of Active Directory
Select "Start", "Programs", "Administrative Tools", "Active Directory Users and Computers" and click the + next to the domain. Highlight the domain controllers folder, and the computer Active Directory was installed on should appear in the right pane.