Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[theolodian]

Where is a good place to read up on Active Directory?  I need to learn more about how to sort out the mess of one that we have at work.

One quick question, can it be added to Microsoft Server 2003 after the server is already up and running or does it need to be part of the initial configuration?

TIA!

[JamesV6CDX]

Where is a good place to read up on Active Directory?  I need to learn more about how to sort out the mess of one that we have at work.

One quick question, can it be added to Microsoft Server 2003 after the server is already up and running or does it need to be part of the initial configuration?

TIA!

Can't you just dun DCPromote and start the ball rolling from there?
MSDN makes good reading.

[theolodian]

Thanks, that's kinda what I thought, but one geekier than me thought differently.  

We've tried to keep things simple by not having too much on any one server, but then it makes the Active Directory complex because it needs to be operational on 3-4 servers.  It's currently only working on one, and some things don't work quite right.  

[Ironingboard]

I was under the impression that active directory was usually run on the server that handles client objects. You can have another server running exchange (e.g.) which you can then setup using the server running active directory, just direct it to the exchange server, should read the environment and allow you to make changes to various services installed on your servers.

Been a while since I done sys admin stuff using win 2003 server. Think it can be added to the server after its running but not sure if you need to start the service or its a reboot of the server (don't think so)  :-/

[theolodian]

I was under the impression that active directory was usually run on the server that handles client objects. You can have another server running exchange (e.g.) which you can then setup using the server running active directory, just direct it to the exchange server, should read the environment and allow you to make changes to various services installed on your servers.

Been a while since I done sys admin stuff using win 2003 server. Think it can be added to the server after its running but not sure if you need to start the service or its a reboot of the server (don't think so)  :-/

As I understand it it's all linked to the master, but needs to be replicated on all of the servers.  Otherwise shared drives and other access just don't work reliably.

[M16]

http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps

[TheBoy]

can dcpromo to create and ad, or add existing server to the list of dcs.

You need to be careful if there are existing applications and services running though, mainly for 2 reasons:

All local accounts will be lost
A DC may not be a suitable server for an app or service - eg, internet facing web server being a dc would be a bad, bad idea  (even if the OOF server's physical host is an internet facing web server and a dc )

I still have all my old AD course books if you need help, though AD is stupidly easy if you get the design right.

[cem_devecioglu]

necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?

[TheBoy]

necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?

vmware is your friend when doing AD studies

[cem_devecioglu]

necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?

vmware is your friend when doing AD studies

erm .. this was possibly many years ago..I dont remember any vmware around..

so it means I'm an expired computer teccy

[TheBoy]

necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?

vmware is your friend when doing AD studies

erm .. this was possibly many years ago..I dont remember any vmware around..

so it means I'm an expired computer teccy

vmware predated AD

[cem_devecioglu]

necessary to simulate complicated environment and some extra machines..

even the original microsoft course document on active directory was naff..

MSDN will be better I think..

during the lessons the teacher couldnt complete the scenarios  :-?

vmware is your friend when doing AD studies

erm .. this was possibly many years ago..I dont remember any vmware around..

so it means I'm an expired computer teccy

vmware predated AD

Problem is its been long time I dont prepare servers..

Just focused on application programming on SQL..

[theolodian]

http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps

That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.

[TheBoy]

http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps

That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.

are they authenticating to AD, and is the DB server a member server in that Forest?

[theolodian]

http://www.mcmcse.com/microsoft/guides/ad.shtml Hope this helps

That's perfect!

TB, this is for a DB server and then for when we replace the FS.  However, people can't get to the DB over the VPN.  Seems to be an AD issue, currently not running on that server.

are they authenticating to AD, and is the DB server a member server in that Forest?

I don't think that the AD server knows that it exists, but yes logging on with network ID's.