CERTIFICARSE hace la diferencia …

Installation

Chapter 1

1
 Installing Active Directory Domain
Services
Lesson 1

2 CERTIFICARSE hace la diferencia …

 Active Directory
Active Directory is the directory service that Microsoft first
introduced in Windows 2000 Server, and which they have upgraded
in each successive server operating system release, including
Windows Server 2008.

Active Directory makes services and resources available.

Provide authentication and authorization:

Authentication is the process of verifying a user’s identity.

Authorization is the process of granting the user access

only to the resources he or she is permitted to use.

3 CERTIFICARSE hace la diferencia …

 Active Directory Roles
On Windows Server 2008, Active Directory-related roles have been
separated into distinct functions:

Active Directory Domain Services (AD DS)

Active Directory Certificate
Services (AD CS)
Active Directory Federation
Services (AD FS)
Active Directory Lightweight
Directory Services (AD LDS)
Active Directory Rights
Management Services (AD RMS)

4 CERTIFICARSE hace la diferencia …

 Domain

A domain is a logical container of each network

component over which you have control and organize in
one respective entity.

Each domain was hosted by at least one server

designated as a domain controller.

5 CERTIFICARSE hace la diferencia …

 Domain Controllers
Each domain on an Active Directory network should have at least
two domain controllers, to ensure that the Active Directory database
is available to clients at all times, and to provide clients with ready
access to a nearby domain controller.

How many domain controllers you install for each of your domains,
and where you locate them, is an important part of designing an
Active Directory infrastructure.

Also important is an understanding of how and why the domain

controllers communicate — with each other and with clients.

6 CERTIFICARSE hace la diferencia …

 Forest

An Active Directory forest consists of one or more separate

domain trees, which have the same two-way trust relationships
between them as two domains in the same tree.

When you create the first domain on an Active Directory

network, you are in fact creating a new forest, and that first
domain becomes the forest root domain.

7 CERTIFICARSE hace la diferencia …

 Domain Tree

When designing an Active Directory infrastructure, you

might, in some cases, want to create multiple domains.

Active Directory scales upward from the domain just as

easily as it scales downward.

8 CERTIFICARSE hace la diferencia …

 Functional Levels

Every Active Directory forest has a functional level, as

does every domain.

Functional levels are designed to provide backwards

compatibility in Active Directory installations running
domain controllers with various versions of the Windows
Server operating system.

9 CERTIFICARSE hace la diferencia …

 Organizational Unit (OU)
A container object that functions in a subordinate capacity to a
domain, something like a subdomain, but without the complete
separation of security policies.

As a container object, OUs can contain other OUs, as well as

leaf objects.

You can apply separate Group Policy to an OU, and delegate

the administration of an OU as needed.

However, an OU is still part of the domain and still inherits

policies and permissions from its parent objects.

10 CERTIFICARSE hace la diferencia …

 Organizational Units

11 CERTIFICARSE hace la diferencia …

 Sites
To facilitate the replication process, Active Directory includes
another administrative division called the site.

A site is defined as a collection of subnets that have good

connectivity between them.
.

Good connectivity is understood to be at least T-1 speed

(1.544 megabits per second).

Generally speaking, this means that a site consists of all the

local area networks (LANs) at a specific location.

A different site would be a network at a remote location,

connected to the other site using a T-1 or slower WAN
technology.

12 CERTIFICARSE hace la diferencia …

 Sites
A site topology consists of three Active Directory object
types:

Sites — A site object represents the group of subnets at a

single location, with good connectivity.

Subnets — A subnet object represents an IP network at a

particular site.

Site links — A site link object represents a WAN connection

between two sites.

13 CERTIFICARSE hace la diferencia …

 Adding the AD DS Role Using the Windows
Interface

Located in Administrative Tools.

Can also be accessed by right-clicking My Computer and
selecting Manage.

Allows you to:

Add roles such as DNS server or Active Directory Domain
Services role.
Perform system diagnostics.
Configure system services.
Drill down into specific administrative tools.

14 CERTIFICARSE hace la diferencia …

 Adding the AD DS Role Using the
Windows Interface

15 CERTIFICARSE hace la diferencia …

 Installing Active Directory
 To install Active Directory, you will need to first add the
Active Directory Domain Services role using Server
Manager.

16 CERTIFICARSE hace la diferencia …

 Installing Active Directory

17 CERTIFICARSE hace la diferencia …

 Installing Active Directory
The Active Directory Installation Wizard, dcpromo, will guide
you through any of the following installation scenarios:

Adding a domain controller to an existing environment.

Creating an entirely new forest structure.

Adding a child domain to an existing domain.

Adding a new domain tree to an existing forest.

Demoting domain controllers and eventually removing a

domain or forest.

18 CERTIFICARSE hace la diferencia …

 Choosing the Deployment Configuration

19 CERTIFICARSE hace la diferencia …

 Active Directory Domain Services on
Server Core
Lesson 2

20 CERTIFICARSE hace la diferencia …

 Why Server Core?
Server Core is:
A minimal installation option for Windows Server 2008
Command Line interface, no GUI Shell

Windows Server is frequently deployed to support a single role

or a fixed workload
However, you must deploy and service all of Windows Server

Value Proposition and challenges

Reduce the attack and servicing surface area
Servers optimized by role are easier to manage and maintain
Increased reliability and security
Less installed and less running

21 CERTIFICARSE hace la diferencia …

 Server Core Overview
Server Core includes
A set of server roles
DHCP, File, Print, AD, AD LDS, Media Services, DNS, and
IIS

The following optional features:

WINS, Failover Clustering, Subsystem for UNIX-based
applications, Backup, Multipath IO, Removable Storage
Management, Bitlocker Drive Encryption, SNMP, Telnet
Client, QoS

Server Core also include Hyper-V

22 CERTIFICARSE hace la diferencia …

 Deploying Server Core
Manual installation using Setup

Unattended installation using

Setup Unattended
New WDS and MDT

Only a clean install is supported no Upgrades

Cannot upgrade from a previous version of Windows Server
Cannot upgrade from Server Core to full Server with the GUI shell
Cannot upgrade from full Server with the GUI shell to Server Core

23 CERTIFICARSE hace la diferencia …

 Configuring Server Core

How do I start ?

 Set admin password

 Set static IP address
 Join existing domain
 Activate the Server
 Configure the firewall
 Installing Roles and
Features

24 CERTIFICARSE hace la diferencia …

 Adding AD DS to a Server Core installation

DCPromo is used to install/remove the associated Active

Directory Domain Services

Must be run in unattended mode

Specify the configuration via an unattended file

The Active Directory Domain Services Installation Wizard

running on the full server can be used to create a suitable
unattended

25 CERTIFICARSE hace la diferencia …

 ¡Gracias por su atención!
¿Alguna pregunta?

26 CERTIFICARSE hace la diferencia …