CISS-150 Project 9 – Active Directory

CISS-150 Project 9 (10 points)

(Updated December 13, 2022)

In this project we will add Active Directory to our Windows 2019 server. This is a preparatory step toward the final project.

Then we will change the Windows 10 machine so that it can participate in an Active Directory domain – the domain you created in Windows 2019.

Learning outcomes

Planning and design.
Enhancing existing virtualization and networking skills.
VMware guest security.
Installation and configuration of Active Directory.
Understanding of domain level authentication.
Enhancing existing virtualization and networking skills.
Joining workstations to Active Directory.
Understanding domain level authentication.
Understanding of required DNS changes.

Installing Active Directory to Windows 2019 Server

This will begin the process of setting up Active Directory with a corresponding DNS server. Up to this point, you’ve been using the Google DNS server 8.8.8.8. This is about to change.

Login to Windows 2019 as the Administrator and go to the Server Manager interface. If this is not currently running, go to Start Menu and select Server Manager tile.

Select Dashboard.
Select Manage then Add Roles and Features.
Select Next.
Keep Role-Based and select Next.
Keep the selected server and select Next.
Select Active Directory Domain Services.
Select Add Features.
Select Next.
Select Next.
Select Next.
Select Install.

The role is now installed, but AD-DS still needs to be configured.

Select the Notifications flag.
Select Promote this server to a domain controller.

Important Note!

At this point be sure to review the original Network Details page for your network number.

The AD-DS Wizard will now begin…

Select Add a new forest.
Set the FQDN of the forest root domain to domain#.net substituting your network number (domain12.net, for example) and select Next. The wizard will then check to see if it is in use.
Keep the defaults and set the to be the same as the administrator password (we will not use this feature, however).
The warning about DNS delegation is normal. Select Next.
Keep the NetBIOS name. Select Next.
Keep the defaults for the database, logs and SYSVOL. Select Next.
Review the details. Select Next.
Select Install.

This process can take many minutes to complete. Please be patient. When the process is complete, you will need to reboot to make the changes permanent.

Joining Windows 10 to the Domain

You will need to do the following:

Change the DNS entry for Windows 10 to point to the Windows 2019 server. This has been pointing to 8.8.8.8 up to now. Do the following:

Select the Network icon on the system tray and select Open Network and Sharing Center.
Select Ethernet0 (or other number) and then Properties.
Select IPv4 and then Properties.
Change the Preferred DNS Server.

Open File Explorer
Right-click This PC and select Properties.
Select Change Settings and then the Change button.
Select the Domain radio button and type in the domain name.
Authenticate with the Windows 2019 Administrator account and you should be joined!

A reboot will be necessary and then you will be able to login with domain credentials in addition to the local Windows users credentials.