Omega Owners Forum

Chat Area => General Discussion Area => Topic started by: theolodian on 18 June 2008, 19:33:16

Title: Good place to read up on Active Directory?
Post by: theolodian on 18 June 2008, 19:33:16
Where is a good place to read up on Active Directory?  I need to learn more about how to sort out the mess of one that we have at work.

One quick question, can it be added to Microsoft Server 2003 after the server is already up and running or does it need to be part of the initial configuration?

TIA!
Title: Re: Good place to read up on Active Directory?
Post by: JamesV6CDX on 18 June 2008, 21:20:07
Quote
Where is a good place to read up on Active Directory?  I need to learn more about how to sort out the mess of one that we have at work.

One quick question, can it be added to Microsoft Server 2003 after the server is already up and running or does it need to be part of the initial configuration?

TIA!

Can't you just dun DCPromote and start the ball rolling from there?
MSDN makes good reading.
Title: Re: Good place to read up on Active Directory?
Post by: theolodian on 18 June 2008, 23:10:34
Thanks, that's kinda what I thought, but one geekier than me thought differently.  ::) :)

We've tried to keep things simple by not having too much on any one server, but then it makes the Active Directory complex because it needs to be operational on 3-4 servers.  It's currently only working on one, and some things don't work quite right.  >:(
Title: Re: Good place to read up on Active Directory?
Post by: Ironingboard on 18 June 2008, 23:22:25
I was under the impression that active directory was usually run on the server that handles client objects. You can have another server running exchange (e.g.) which you can then setup using the server running active directory, just direct it to the exchange server, should read the environment and allow you to make changes to various services installed on your servers.

Been a while since I done sys admin stuff using win 2003 server. Think it can be added to the server after its running but not sure if you need to start the service or its a reboot of the server (don't think so)  :-/
Title: Re: Good place to read up on Active Directory?
Post by: theolodian on 18 June 2008, 23:35:40
Quote
I was under the impression that active directory was usually run on the server that handles client objects. You can have another server running exchange (e.g.) which you can then setup using the server running active directory, just direct it to the exchange server, should read the environment and allow you to make changes to various services installed on your servers.

Been a while since I done sys admin stuff using win 2003 server. Think it can be added to the server after its running but not sure if you need to start the service or its a reboot of the server (don't think so)  :-/
As I understand it it's all linked to the master, but needs to be replicated on all of the servers.  Otherwise shared drives and other access just don't work reliably.
Title: Re: Good place to read up on Active Directory?
Post by: M16 on 19 June 2008, 07:41:13
http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps
Title: Re: Good place to read up on Active Directory?
Post by: TheBoy on 19 June 2008, 18:29:04
can dcpromo to create and ad, or add existing server to the list of dcs.

You need to be careful if there are existing applications and services running though, mainly for 2 reasons:

All local accounts will be lost
A DC may not be a suitable server for an app or service - eg, internet facing web server being a dc would be a bad, bad idea  (even if the OOF server's physical host is an internet facing web server and a dc ::))

I still have all my old AD course books if you need help, though AD is stupidly easy if you get the design right.
Title: Re: Good place to read up on Active Directory?
Post by: cem_devecioglu on 19 June 2008, 18:34:03
necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?
Title: Re: Good place to read up on Active Directory?
Post by: TheBoy on 19 June 2008, 18:38:26
Quote
necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?
vmware is your friend when doing AD studies ;D
Title: Re: Good place to read up on Active Directory?
Post by: cem_devecioglu on 19 June 2008, 18:44:10
Quote
Quote
necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?
vmware is your friend when doing AD studies ;D


erm .. :-[ this was possibly many years ago..I dont remember any vmware around..

so it means I'm an expired computer teccy :'(
Title: Re: Good place to read up on Active Directory?
Post by: TheBoy on 19 June 2008, 18:47:22
Quote
Quote
Quote
necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?
vmware is your friend when doing AD studies ;D


erm .. :-[ this was possibly many years ago..I dont remember any vmware around..

so it means I'm an expired computer teccy :'(
vmware predated AD ;)
Title: Re: Good place to read up on Active Directory?
Post by: cem_devecioglu on 19 June 2008, 18:51:26
Quote
Quote
Quote
Quote
necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?
vmware is your friend when doing AD studies ;D


erm .. :-[ this was possibly many years ago..I dont remember any vmware around..

so it means I'm an expired computer teccy :'(
vmware predated AD ;)

Problem is its been long time I dont prepare servers..

Just focused on application programming on SQL.. :(
Title: Re: Good place to read up on Active Directory?
Post by: theolodian on 19 June 2008, 19:08:42
Quote
http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps
That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.
Title: Re: Good place to read up on Active Directory?
Post by: TheBoy on 19 June 2008, 19:14:27
Quote
Quote
http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps
That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.
are they authenticating to AD, and is the DB server a member server in that Forest?
Title: Re: Good place to read up on Active Directory?
Post by: theolodian on 19 June 2008, 19:17:18
Quote
Quote
Quote
http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps
That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.
are they authenticating to AD, and is the DB server a member server in that Forest?
I don't think that the AD server knows that it exists, but yes logging on with network ID's.
Title: Re: Good place to read up on Active Directory?
Post by: TheBoy on 19 June 2008, 19:20:34
Quote
Quote
Quote
Quote
http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps
That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.
are they authenticating to AD, and is the DB server a member server in that Forest?
I don't think that the AD server knows that it exists, but yes logging on with network ID's.
Ah, if they are logging on to AD, but the server isn't a member of that Forest, then it ain't gonna work.

Plan in making it a member server (ie, adding it to domain like a workstation), then set up the security.

Be aware, that any GPOs applied (directly or indirectly) to the OU you stick it in will get applied to the server.