Lesson Summary in C#

Making QR in C# Lesson Summary

Before you can install Active Directory, you must determine the domain structure, domain names, storage location of the database and log files, location of the shared system volume folder, and the DNS configuration method. Begin your domain structure with a single dedicated root domain, and add child domains only to meet required security policy settings, which are linked to domains; to meet special administrative requirements, such as legal or privacy concerns; to optimize replication traffic; to retain Windows NT domains; or to establish a distinct namespace. A forest root domain is the first domain you create in an Active Directory forest. The forest root domain must be centrally managed by an IT organization that is responsible for making domain hierarchy, naming, and policy decisions. The default location for the database and database log files is %Systemroot%\Ntds, although you can specify a different location during Active Directory installation. For best performance and fault tolerance, place the database and the log file on separate hard disks that are NTFS drives. The default location for the shared system volume is %Systemroot%\Sysvol, although you can specify a different location during Active Directory installation. The shared system volume must be located on a partition or volume formatted with NTFS.

2-17

After you ve completed your preparation work with the installation prerequisites described in Lesson 1, you re ready to install Active Directory. Removing Active Direc tory follows a process similar to installation. This lesson shows you how to install and remove Active Directory.

Install Active Directory using the Active Directory Installation Wizard Install Active Directory using an unattended installation Install Active Directory using the network or backup media Install Active Directory using the Configure Your Server Wizard Remove Active Directory

There are four ways to install Active Directory:

Using the Active Directory Installation Wizard (to install Active Directory in most situations) Using an answer file to perform an unattended installation (to install Active Direc tory remotely) Using the network or backup media (to install Active Directory on additional domain controllers in the network using media) Using the Configure Your Server Wizard (an additional way to install the first domain controller in a network only)

All these methods promote the computer to the role of domain controller, install Active Directory, and, if desired, install and configure the DNS server.

The Active Directory Installation Wizard is the main tool used to install Active Direc tory. The wizard presents a set of pages, on which you must input the following:

Domain controller type either the first domain controller for a new domain or a new domain controller added to an existing domain Domain type a new domain in a new forest, a child domain in an existing domain tree, or a new domain tree in an existing forest

2-18

2

After you input this information, the wizard installs Active Directory, creates the full domain name, assigns the NetBIOS name for the domain, sets the Active Directory database and log folder location, sets the shared system volume folder location, and installs DNS and a preferred DNS server if you requested automatic DNS installation. The Active Directory Installation Wizard does not install Dynamic Host Configuration Protocol (DHCP), assign the static IP address, assign the subnet mask, create a DHCP scope, or set up an application naming context in Active Directory for use by Tele phony Application Programming Interface (TAPI) client applications. As you begin installing Active Directory using the Active Directory Installation Wizard, you must choose whether to create the first domain controller for a new domain or add the new domain controller to an existing domain. You portray the domain structure by making these choices as they are presented in the wizard. Creating the First Domain Controller for a New Domain If you choose to create the first domain controller for a new domain, you create both the domain controller and a new domain. You can then specify whether you want to create a new domain in a new forest, a child domain in an existing domain tree, or a new domain tree in an existing forest, as illustrated in Figure 2-5. When you create a new domain in a new forest, either the new domain is the first domain in the organization or it is a new domain that you want to be completely inde pendent from your existing forest. When you create a new child domain in an existing domain tree, the new domain is a child domain of an existing domain. Recall that domains in a tree share a contiguous namespace and a hierarchical naming structure. When you create a new domain tree in an existing forest, the new domain is not part of an existing domain. Recall that trees in a forest have different naming structures, according to their domains, but the forest enables communication across the entire organization.