instalarea active directory pe windows server

7/29/2019 Instalarea Active Directory Pe Windows Server

1/10

Instalarea Active Directory pe Windows Server 2008

Microsoft Active Directory ofer o structura pentru a centraliza gestionare reelei i de a stoca informaii despre resurde reea n ntregul domeniu. Active Directory folosete Domain Controllers pentru a menine, acest storage centralizdisponibil utilizatorilor reelei. Pentru a configura o maina Windows Server 2008 de a gzdui un Domain Controller, mmulte condiii ar trebui s fie luate n considerare, i mai multe etape ar trebui s fie efectuate. n acest articol am sghidez pentru ndeplinirea acestor condiii si de a urma paii pentru a crea un Windows Server Domain Controller penun nou domeniu Active Directory ntr-un forest nou.

Consideraii pentru instalarea unui nou Windows Server 2008 forestCnd instalai AD pentru a crea primul controler de domeniu ntr-un nou Windows 2008 Server forest, trebuie s inecont de urmtoarele considerente:

Trebuie s se fac decizii asupra domain functional level, pentru a stabili dac forest-ul i domeniu poate coninecontrolerele de domeniu care ruleaz pe Windows 2000 Server, Windows Server 2003, sau ambele.

Domain controllers care ruleaz pe Microsoft Windows NT Server 4.0 NU sunt suportate pe Windows Server 2008. Serverele pe care se ruleaz Windows NT Server 4.0 NU sunt suportate de controlerele de domeniu pe care se execu

Windows Server 2008, ceea ce nseamn c trebuie s avem DCs suplimentare care ruleaz pe Windows 2000/2003pentru suporta NT 4.0 mai vechi.

Primul Windows Server 2008 controler de domeniu ntr-un forest trebuie s fie un global catalog server i nu poate fRODC.Consideraii pentru instalarea unui domeniu Windows Server 2008 nou intr-un forest Windows 2000/200

existentCnd instalai AD pentru a crea primul controler de domeniu intr-un domeniu Windows 2008 Server nou, trebuie s cont de urmtoarele considerente:

nainte de a crea un domeniul Windows Server 2008 nou ntr-un forest Windows 2000/2003, trebuie s se pregtii ful pentru Windows Server 2008 prin extinderea schemei (prin rularea ADPREP / forestprep). Pentru a citi mai multe dADPREP v rog s consultai linkurile de mai jos.

Trebuie s se fac decizii asupra domain functional level , care s stabileasc dac domeniul Dvs. poate s conincontrolerele de domeniu care ruleaz Windows 2000 Server, Windows Server 2003, sau ambele. Pentru a citi mai mudespre domain functional levels v rog s consultai linkurile de mai jos.

V recomand ca sa gzduii PDC emulator operations master role n forest-ul root domain pe un domain controller caruleaz Windows Server 2008.

Instalarea Active Directory Domain Services (AD-DS)n Windows Server 2008, spre deosebire de sistemele de operare pentru servere anterioare, exist un pas suplimentcare trebuie s fie efectuat nainte de a rula DCPROMO pentru a promova serverul la Domain Controller i de instalarActive Directory pe el. Acest pas este instalarea Active Directory Domain Services (AD-DS) role pe server. De fapt, roAD-DS este ceea ce permite serverului de a aciona ca Domain Controller, dar va trebui in continuare s rulam DCPRdup procedura regulata.

AD-DS poate fi instalat prin unul dintre metodele:

Metoda 1 Server Manager/Initial Configuration TasksRolurile pot i ar trebui s fie adugate prin Server Manager (dar ele pot fi, de asemenea, adaugate si prin expertul dconfigurare iniial, care se auto-deschide prima dat cnd v conectai la server).

1. DeschideiServer Managerfcnd clic pe pictograma din bara de instrumente Quick Launch toolbar, sau din folderuAdministrative Tools.


2/10

2. Ateptai pn se termin de ncrcare, apoi facei clic peRoles > Add Roles.

3. ApsmNext.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-2.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-2.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/installing-ad-ds-1.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-2.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/installing-ad-ds-1.png


3/10

4. n fereastra Select Server Role, bifmActive Directory Domain Services, i apoi clic peNext.

5. n fereastra Active Directory Domain Services dac dorim citim informaiile furnizate i apoi apsmNext.

6. n Confirm Installation Selections, citim informaia furnizat i apoi clic peNext.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-5.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-4.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-3.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-5.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-4.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-3.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-5.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-4.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-3.png


4/10

7. Ateptm finisarea procesului.

8. Cnd acesta sfrete, apsmClose 9. Mergem napoi la Server Manager, clic pe link-ul Active Directory Domain Services,depistm c nu este nici o

informaie legat de acesta, pentru c comanda DCPROMO nc nu a fost executat.

10.Acum putem clica pe link-ul DCPROMO, sau citim mai departe.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-8.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-7.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-6.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-8.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-7.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-6.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-8.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-7.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/install-ad-ds-6.png


5/10

Pentru a executa DCPROMO, introducem comanda n Run, sau facem clic pe link-ul DCPROMO din Server Manager

Roles > Active Directory Domain Services. n dependena dac AD-DS a fost sau nu anterior instalat, Active Directory Domain Services Installation Wizard va ap

imediat sau dup cteva clipe. ClicNext. Not:Avantajele DCPROMO vor fi discutate alte articole.

n fereastra Operating System Compatibility, citim informaia propus i apsmNext.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win3.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win2.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win3.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win2.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win3.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win2.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo.png


6/10

n fereastra Choosing Deployment Configuration, clic pe Create a new domain in a new foresti apoiNext.

Introducem un nume pentru noul domeniu. Trebuie s fim precaui la alegerea numelui, pentru c odat stabilit, s n

avem nevoie de al redenumi pe viitor. Procedura de redenumire este foarte anevoioas i chiar nerecomandabil.

Clic Next. Not:NU utilizai un singur nume pentru domeniu ca domeniu sau ceva asemntor. Trebuie s alegei un nume ddomeniu complet, de exemplu domeniu.local sau domeniu.com etc.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win5.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win4.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win5.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win4.png


7/10

Wizard-ul va efectua un control pentru a verifica dac numele de domeniu nu este utilizat n reeaua local.

Alegem forest function level. Windows 2000 este selectat implicit, dar mai sunt permise pentru forest-ul care l crem

Windows Server 2003 i Windows Server 2008. Alegem domain function level. Windows 2000 Native este setat implicit, dar mai putem alege i Windows Server 200

Windows Server 2008 pentru domeniul care l cremNot:Dac alegem Windows Server 2008 pentru forest function level, nu vom mai fi ntrebai care va fi domain fulevel. Se va seta automat Windows server 2008.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win7.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win6.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win7.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win6.png


8/10

Wizard-ul va efectua un control pentru a vedea dac DNS-ul este configurat corect pe reeaua local. n cazul cnd Dnu este configurat, wizard-ul ne va oferi s instaleze automat DNS pe server.

Not:Primul DC trebuie s fie Global Catalog. De asemenea, primul DC n forest nu poate fi Read Only Domain Cont Este foarte probabil ca s avei un mesaj de avertisment, care va spune c avei unul sau mai multe adrese IP alocat

dinamic. ExecutaiIPCONFIG /all pentru a ne convinge c nu este aa, i avem setat un IP static. Deci, de ce apareacest mesaj? Rspunsul este IPv6, care nu e configurat manual. n reelele unde nu se folosete IPv6 vom ignora me
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-12.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-11.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win10.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win8.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-12.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-11.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win10.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win8.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-12.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-11.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win10.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win8.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-12.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/running-dcpromo-win2008-11.gifhttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win10.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win8.png


9/10

Probabil vei primi un mesaj despre DNS delegation. Deoarece DNS-ul nc nu a fost configurat, putem ignora mesaju

apsmYes. Apoi, setm cile pentru AD database, fiierele de log i a mapei SYSVOL. ClicNext.

Introducem o parol pentruActive Directory Recovery Mode. Aceast parol trebuie s fie confidenial, pentru c ea

rmne constant, n timp ce alte parole pot expira n timp (implicit 42 zile), aceasta nu expir. Ea trebuie s fie ct complex, minim 7 caractere. Recomand cas nu fie folosit aceeai parol ca i la administratori. ClicNext.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win15.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win14.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-deleg.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win15.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win14.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-deleg.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win15.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win14.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-deleg.png


10/10

n fereastra Summary revizuim alegerile fcute i dac e nevoie le salvm ntr-un fiier (unattend answer file). ClicN

Wizard-ul va ncepe crearea domeniului Active Directory, ila sfri va trebui s apsm peFinish i de a reporni

calculatorul.Acum serverul funcioneaz ca un Domain Controller. Asigurai-v c avei setat backup pe acest server. Putem testafuncionalitile noului server cu ajutorul AD management tools, cum ar fi Active Directory Users and Computers, de examina Event Logs, serviciile i mapele care au fost create.

Metoda 2 Servermanagercmd.exe

Servermanagercmd.exe este o comand echivalent cu Add Roles i Add Features wizards n Server Manager. Prinutilizarea diverselor linii de comand, avem posibilitatea rapid i uor de a aduga sau elimina caracteristici i roluri nserver, inclusiv i AD-DS role.

Pentru a instala AD-DS cu ajutorul comenzii Servermanagercmd.exe, pur i simplu introducem comanda urmtoare fereastra Command Prompt:

Servermanagercmd.exe I ADDS-Domain-Controller

Lsm ca comanda s ruleze i atunci cnd se va termina vom avea instalat pe server AD-DS.

Dup instalarea DC-DS role, trebuie s executm DCPROMO pentru a continua instalarea bazei de date Active Directoa altor funcionaliti.

Not:Acest ghid presupune c acesta este primul Domain controller n forest, crend astfel un domeniu nou ntr-un nou.
http://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win19.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win18.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win16.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win19.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win18.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win16.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win19.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win18.pnghttp://www.gophoto.it/view.php?i=http://suntitpro.files.wordpress.com/2012/03/run-dcpromo-win16.png

instalarea active directory pe windows server

Documents