CISS-150 Project 9 – Active Directory

CISS-150 Project 9 (10 points)

(Updated December 10, 2024)

In this project, we will add Active Directory to our Windows 2019 server. This is a preparatory step toward the final project.

Then, we will change the Windows 10 machine to participate in an Active Directory domain – the domain you created in Windows 2019.

Learning outcomes

Planning and design.
Enhancing existing virtualization and networking skills.
VMware guest security.
Installation and configuration of Active Directory.
Understanding of domain-level authentication.
Enhancing existing virtualization and networking skills.
Joining workstations to Active Directory.
Understanding domain-level authentication.
Understanding of required DNS changes.

Installing Active Directory to Windows 2019 Server

If you’ve installed other roles or features on this server, the AD-DS installation you will perform may fail. If this occurs, please get in touch with your instructor immediately to arrive at a resolution. There may need to be more than simply removing the roles to be successful moving forward.

This will begin setting up Active Directory with a corresponding DNS server. Up to this point, you’ve been using the Google DNS server 8.8.8.8, but this is about to change.

Login to Windows 2019 as the Administrator and go to the Server Manager interface. If this is not currently running, go to Start Menu and select Server Manager tile.

Select Dashboard.
Select Manage then Add Roles and Features.
Select Next.
Keep Role-Based and select Next.
Keep the selected server and select Next.
Select Active Directory Domain Services.
Select Add Features.
Select Next.
Select Next.
Select Next.
Select Install.

The role is now installed, but AD-DS still needs to be configured.

Select the Notifications flag.
Select Promote this server to a domain controller.

Important Note!

At this point, be sure to review the original Network Details page for your network number.

The AD-DS Wizard will now begin…

Select Add a new forest.
Set the FQDN of the forest root domain to domain#.net substituting your network number (domain12.net, for example) and select Next. The wizard will then check to see if it is in use.
Keep the defaults and set them to be the same as the administrator password (we will not use this feature, however).
The warning about DNS delegation is normal. Select Next.
Keep the NetBIOS name. Select Next.
Keep the defaults for the database, logs and SYSVOL. Select Next.
Review the details. Select Next.
Select Install.

This process can take many minutes to complete, so please be patient. When it is complete, you must reboot to make the changes permanent.

Joining Windows 10 to the Domain

You will need to do the following:

Change the DNS entry for Windows 10 to point to the Windows 2019 server. This has been pointing to 8.8.8.8. Make sure you are using the IP address of the Windows 2019 server – this is NOT the 127.0.0.1 that you set on the server itself. Do the following:

Select the Network icon on the system tray and select Open Network and Sharing Center.
Select Ethernet0 (or other number) and then Properties.
Select IPv4 and then Properties.
Change the Preferred DNS Server.

Open File Explorer
Right-click This PC and select Properties.
In the right-hand list of options, select Rename this PC (advanced).
Select the Change button.
Select the Domain radio button and type in the domain name.
Authenticate with the Windows 2019 Administrator account, and you should be joined!

You will need to reboot, and then you can log in with your domain credentials and the local Windows user’s credentials.