Linking in with the series I am writing on Exchange Server, this article will explain the process of installing Active Directory (AD) for the first time on your network, as this is a requirement for Microsoft Exchange (2000 and 2003). Either version of AD can be used with exchange, but it is recommended to use 2003. Therefore, I will concentrate on the 2003 installation here, although the process should be similar for both.
Firstly, we need to make sure DNS is configured and working correctly. DNS is essential to Active Directory, not only for name resolution, but also for Service (SRV) Records. These special entries in the DNS server are there to point the members of the domain to the correct servers for authentication (the LDAP servers), which are the Domain Controllers. I will be showing you how to install a domain controller in this article. To install DNS, use the Add/Remove Programs dialogue, then click the Add/Remove Windows Components button. DNS is listed under the Networking Services.
Once DNS is installed, the server needs to be configured to use itself as for name resolution. We do this by altering the TCP/IP configuration of the server's network adapter. In the DNS Servers list, add 127.0.0.1 as the first and only DNS Server. More can be added for redundancy, but at present I will assume you only have the one internal DNS server, so this is all we can specify.
The next step is to install Active Directory itself. The wizard will configure your DNS server correctly, so this need not be a concern. To do this, go to Start->Run->"dcpromo". This stands for Domain Controller Promotion - as technically we are "promoting" the status of this server to Domain Controller.
When the wizard launches, clickNext until you see this screen below, this should be the first question.
Click Domain Controller for a new domain. If you already have a domain, and are installing another domain controller, you can click the alternative option.
As we do not yet have a forest, click Domain in a new forest. Next, enter your chosen domain name. This must be the full DNS name (must include at least one dot). It is not recommended to use a valid external address in this box, as it may cause conflicts further down the line. For maxms, for example, I could use maxms.local (as it will be a local network), or internal.maxms.net - as long as it doesn't exist on the internet. On the next screen, accept the NETBIOS name that the wizard will automatically fill-in for you. In my case, it would be MAXMS (it is the first section of the full DNS name).
Accept both the Database and Log Folders and Shared System Volume pages, which are asking where to store the domain data. If you have a high-performance or fault-tollerant disk array that you wish to use, then by all meants change the locations.
This screen is where you ask the wizard to configure your DNS server for you. This can be done manually, but I find (and I'm sure you will agree), that it's much easier and safer to let the computer do it for you! Select Install and configure the DNS server on this computer... and then click Next.
The next screen is important. If the server successfully configured DNS, you will see the screen below.
If this appears, everything has gone well. You can click next, choose a Restore Mode Password (write it down!), and finish the wizard. The restore mode password will be requested if you reboot the server in Directory Services Restore Mode, and should be different to your normal administrator password.
Once the wizard has finished installing Active Directory, you will need to reboot the server, and if all has gone well, you should have a new domain! I will also write another article about checking your installation to make sure it all went OK, and what to do when things go wrong, so check back regularly.
Related Articles: