Part VI: THEORY GUIDE Network

CLIENT SERVER NETWORK

Active Directory :- Active Directory is the main database file which stores all the information about the users. It starts and blocks the different kinds of services such as the Group Policy, DHCP, DNS, IIS, Mail Server etc. After installing Active Directory in a Networked Computer that Computer becomes the Domain Computer, Server Computer or Domain Server.

Requirements to Install Active Directory

1. The system must be containing Server Operating System.

2. The system must have NIC Card and its proper driver.

3. The IP address must be configured. In the preferred DNS Server the same IP must be defined.

4. Backup of Windows Server Operating System’s CD. 

5. The Network Name must be configured.

6. 1 GB of free space in Home drive.

Process to Install Active Directory

1. Click on Start/Administrative Tools/Configure Your Server Wizard/Next Or Click on Start Run/Type Cys or Click on Start Run/Type ‘Dcpromo’/Ok

2. Click on Next / Next.

3. Select Custom Configuration/Next.

4. Select Domain Controller (Active Directory)/Next.

5. Choose ‘Domain controller for a new Domain’.

6. Click on Next.

7. Choose ‘Domain in a new Forest’.

8. Click on Next.

9. Choose ‘Yes, I will configure the DNS Client’.

10. Click on Next.

11. In the ‘Full DNS name for new Domain’ box, type the Domain Name E.g:- icsit.net.

12. Click on Next.

13. In the ‘Net BIOS Name’, name of domain will automatically appear.

14. Click on Next / Next / Next.

15. Choose ‘Install and Configure the DNS Server on this Network and set this Network to use this DNS Server as it preferred DNS Server’ radio button.

16. Click on Next.

17. Choose ‘Permissions compatible with only Windows 2000 or 2003 Server Operating System’.

18. Click on Next.

19. Type the Password and confirm Password.

20. Next / Next.

21. If the system asks for the backup of ‘I386’ then Insert Windows Server CD into the CD/DVD Rom or define the location if it is backup in the Computer.

22. Click on Finish.

23. Restart the System.

Process to remove Active Directory

1. Click on Start/Administrative Tools/Configure Your Server Wizard. Or Click on Run / Type dcpromo’/Ok

2. Click on Next / Next.

3. Select Domain Controller (Active Directory)

4. Put check mark on ‘This Server is the last Domain Controller in the domain’ checkbox.

5. Click on Next / Next.

6. Put check mark on ‘Delete all application directory partitions on this Domain Controller’.

7. Click on Next.

8. Type the password.

9. Click on Next / Next / Finish.

10. Restart the System.

Disabling the Password Policies

1. Start/Program/Administrative Tools/Domain Security Policies.

2. Click on ‘Account Policies’.

3. Click on ‘Password Policies’.

4. Double click on the ‘Enforce Password History’/ specify the character '0'

5. Double click on the ‘Maximun Password Age’/ specify the character '0' 

6. Double click on the ‘Minimun Password Age’/ specify the character '0' 

7. Double click on the ‘Password Length’/ specify the character '0'

8. Double click on ‘Password Must Meet Complexity Requirement’/ select ‘Disable’.

*(To take full effect recently open Command Prompt or run command, type ‘Gpupdate /Force’ & press enter or restart the Computer).

Creating an Additional Domain Controller

* On the TCP/IP properties box specify the server IP into ‘Preferred DNS Server’ & Host IP into ‘Alternate DNS Server’.    

1. Click on Start/Administrative Tools/Configure Your Server Wizard/Next or Click on Start/Run/Type Cys or Click on Start/Run/Type ‘Dcpromo’/Ok

2. Click on Next / Next.

3. Select Custom Configuration/Next.

4. Select Domain Controller (Active Directory)/Next…..

5. Choose Additional Domain Controller for an existing domain/Next

6. Type Username (Administrator)/Password/Domain (Eg; icsit.net)/Next.

7. Browse for Domain Name/Select Domain/Ok/Next/Next/Next

8. Type Restore Mode Password/Confirm Password/Next/Next.

9. Click finish/Restart Now.

     

Domain Registration :- It is a process of connecting the Client Computers with the Domain Controller Computer. After registering the Client Computers with the Domain Controller then the Client Computers are called Domain Members. After registration, can be login on the Client Computers in two ways: one is Local and another is Domain Member when logged in as a Domain Member, can be use only the services that are provided by the Domain Controller.

Process of Domain Registration

1. First of all ‘Ping’ the Domain Controller.

2. Go to the ‘Properties’ of TCP/IP and in the Preferred DNS Server, define the IP of Domain Controller.

3. Go to the ‘Properties of ‘My Computer’.

4. Click on ‘Computer Name’ Tab / ‘Change’ button.

5. Click on Domain radio button and in the ‘Domain’ Name box, type the name of Domain.

E.g;- icsit

6. Click on OK.

7. If the Computer asks for the User Name and Password then type the name of Administrator and Administrator Password of the Domain Controller (Server Controller)

8. Click on OK / OK / OK / YES

9. Restart the System.

Disjoining from Domain

1. Go to the properties of TCP/IP and remove the IP from the Preferred DNS Server.

2. Go to the properties of ‘My Computer’.

3. Click on ‘Computer Name; Tab.

4. Click on ‘Workgroup’ radio button.

5. Click on OK.

6. Type the name of Administrator and Administrator Password.

7. Click on OK.

8. Restart the System. 

Creating Organizational Unit

1. Click on Start / Program / Administrative Tools / Active Directory Users and Computers or Click on Start /Run/ type dsa.msc.

2. Right click on the Domain name

3. Point to New / Click on Organizational Unit (Eg: DataBase Users)

4. Type the name for the Organizational Unit.

5. Click on OK.

Move the Users to any Container

1. Go to ‘Active Directory Users and Computers’. 

2. Select the users name that you have to move.

3. Right click and then choose move.

4. Select the container where you want to move.

5. Click on OK.

Adding Users to any Group:

1. Right click on the Group Name to add the users as its members.

2. Click on ‘Properties’.

3. Click on ‘Members’ Tab.

4. Click on ‘Add’ button.

5. Click on ‘Advanced’ / ‘Find Now’

6. Select users from the list.

7. Click on OK / OK

8. Click on Apply / OK.

Creating Domain User

1. Click on Start/Administrative tools/Active Directory Users and Computers or Click on Start/Rum type ‘dsa.msc’ 

2. Click on '+' sign of Domain Name (Eg; icsit.net)

3. Right click on users.

4. Click on New / User.

5. Type the user’s First Name, Last Name, & the user Logon Name.

6. Click on Next

7. Type the password for the user.

8. Click on Next.

9. Click on Finish.

Defining the Computer to any user:

1. Start / Program / Administrative Tools / Active Directory Users and Networks or type dsa.msc’ in Run Window / Ok.

2. Right click on the ‘User’s name.

3. Choose ‘Properties’.

4. Click on ‘Account’ Tab.

5. Click on ‘Log on To’ button.

6. Click on ‘All Computers’ if you want to allow the user to all the Computers on the Network and if you want to allow any certain Computer then click on ‘The following Computers’ radio button and in the Network name box, type the Computer Name.

7. Click on Add button.

8. Click on Apply / OK.

Defining Logon Hours

1. Go to Active Directory Users and Computers.

2. Right click on the User’s name.

3. Click on ‘Properties’.

4. Click on ‘Accounts’

5. Click on ‘Log on Hours'

6. Select the time and days to permit or deny the user.

7. Click on ‘Logon Permitted’ or ‘Logon Denied’.

8. Click on Ok / Apply / Ok.

Map Network Drive :- Using the Map Network drive, Domain Users can store Files or Folders in any Networked Computer centrally. This type of drive is called Map Network drive.

1. Make two folders (Home & Profile) in Domain Computer and share them With Full Permission.

2. Right click on ‘My Computer’.

3. Click on ‘Map Network Drive’.

4. Select the drive letter from ‘Drive’ box. Here default drive appears as ‘Z:’ drive

5. Select Windows Network Path (Eg: \\Server Name\Shared Folder (Home) Name). 

Group Policy :- Group Policy is created in the main Domain Controller to Enable or Disable the facilities for the Domain Users.

1. Click on Start/All Programs/ Active Directory Users and Computers. 

2. Create an Organizational Unit.

3. Create some users inside the Organizational Unit.

4. Create a Group inside that Organizational Unit. The Group type must be Security.

5. Make all the Users inside the Group.

6. Right click on the ‘Organizational Unit’.

7. Click on ‘Properties’.

8. Click on 'Group Policy’ Tab.

9. Click on ‘New’ button.

10. In ‘New Group Policy Object’ type the Policy’s Name and press ‘Enter’

11. Click on ‘Edit’ button.

12. From the ‘User Configuration’ choose ‘Administrative Templates’.

13. Double click on the Container as it is required.

14. On the Right Task Pane select the ‘Policy’ and double click on it.

15. Click on ‘Enable’ radio button.

16. Apply / OK

17. From the ‘File Menu’ choose ‘Exit’

18. Put check mark on 'Block Policy Inheritance’ check box.

19. Click on Apply / OK

20. Now to check it log on by Users in Client Networks.

Creating Group

1. Right click on the container in which to create group.

2. Point to New / Click on Group.

3. In ‘Group Name’ box, type the Group Name.

4. From group type select ‘Security’ or ‘Distribution’.

File Server :- By defining a File Server users can save their Files and Folders centrally in a Computer which is defined as File Server. To create a File Server it needs two folders: One is known as Home Folder, where the documents of the user are stored. And another is Profile Folder where the information of the User’s Desktop, cookies etc. are stored.

Process

1. In Server Computer make two folders named ‘Home’ and ‘Profile’ and then share both of them with Full Permission.

2. Go to Active Directory Users and Computers.

3. Right click on the User’s name.

4. Click on ‘Properties’

5. Click on ‘Profile’

6. In User Profile Path box type the following Syntax:

Syntax: \\Computer Name\Profile Folder Name\%Username%

E.g:- \\Server\Profile\%Username%

7. Click on ‘Connect’ radio button. (A default drive letter 'Z:' will automatically appear. If wish it can be change also.

8. Click on ‘To’ box & type the following Syntax:

Syntax: \\Computer Name\Home Folder Name\%Username%

E.g:- \\Server\Home\%username%

9. Click on Apply / OK

10. Log off the System and Log on again.

Disk Quota Management

1. Right click on the drive to distribute the disk size.

2. Click on ‘Properties’.

3. Click on ‘Quota’.

4. Enable the ‘Quota Management’ checkbox and ‘Deny disk space to users exceeding Qota limit’ checkbox.

5. Click on ‘Limit disk space to’ radio button.

6. Specify the disk space and the warning label.

7. To define the different Disk spaces to the different users then click on ‘Quota Entries’ button.

8. From ‘Quota’ menu, choose ‘New Quota Entry’.

9. Click on ‘Advanced’.

10. Click on ‘Find Now’.

11. Select the users.

12. Click on OK / OK.

13. Click on ‘Limit disk space to’.

14. Specify the disk space and the warning label.

15. Click on OK.

16. From 'Quota' Choose 'Exit'.

17. Click on 'Apply' / OK.