LAB RATS INC.

PROJECT PLAN

Installing Active Directory

Date: 4/28/2020

This Report was prepared by:

Nikolas Seropian

[email protected]

1|Page
 Executive Summary

Introduction to the report

Project Report
Learn to use Active Directories to get web and domain services, set static Ips on Domain

controllers, ensure activation of administrator accounts and passwords, as well as change settings

of RAM and hard disk space sizes.

References for the report

2|Page
 Introduction
The following report was designed for use in the University of Advancing Technologies

NTW216 Foundations of System Administration class within the student’s degree path. This

project plan will go over the installation of an active directory as well the services it allows the

user access to as well as making changes around administrator accounts and servers.

Project Report
As we’ve established we’d be using Windows 10 enterprise, there are two different ways

you may have to start the process of downloading an active directory. On newer versions of

windows 10, you are able to start an active directory in just a few steps. Right click on start to

choose settings, then apps, manage optional features and then add feature. Then you select

RSAT: Active Directory Domain Services and Lightweight Directory Tools and install it. After

it is installed, it should pop up under Start and Windows Administrative Tools.

If you are on an older version of windows, you will first need to download and install the

right version of Remote Server Administration Tools from Microsoft. After that, you can right

click start and go to choose control, then programs, programs and features, and finally turn

windows features on and off. Here you can scroll down to expand Remote Server

Administration Tools, expand Role Administration Tools, expand AD DS Tools and check it off

before selecting ok. Now you should be able to select Administrative tools from the start menu.

3|Page
As I have a newer version of windows, I was able to add it as a feature in settings.

When it comes to setting up web and domain services, I actually had issues as I was not

connected to a domain. This can be fixed by going to the about page in system settings, entering

the domain name, and then enter any other necessary information such as passwords. A restart is

recommended after this.

Once you’re ready to start setting up, you’ll want to start up the server manager. From

here, you will click the Add Roles option and click next on the before you begin page. This will

bring up the Select Server Roles screen where you can then move on to Active Directory Domain

Services. Clicking next on that and then the informational screen will then bring you to the

Confirmation screen where you can click to install it.

In order to change the domain name, you’ll have to open up system properties. You can

reach this by opening up your control panel, going to system and security, then clicking on

system to reveal the domain name and also have the option to change it.

4|Page
 This allows changes to PC, Domain and

Workgroup names.

After this, you will want to go to the Server Manager and reach the DNS Manager

through tools and DNS in order to create a new DNS Zone. This is to ensure that your member

server and Windows clients can join the new domain name. (Hussain, 2017)

(Tip for Niko- Can add more to this)

5|Page
 When it comes to Active Directory Web Services, they are installed automatically when

the Active Directory Domain Service is installed (As well as the Active Directory LDS server

role). They require TCP port 9389 in order to be open to the domain controller. These web

services support Windows integrated authentication and simple authentication. They also require

server authentication certificates from trusted certification authorities.

“As a critical part of your IT infrastructure, domain controllers (DC) should be assigned

a static IP address so that they can be reliably discovered across the network. Sometimes

it’s necessary to change the IP address assigned to a DC, for instance when there’s a

change of IP addressing scheme on the local subnet, and this process can cause some

concern for administrators due to the critical nature of DCs. However, assuming the DC

is not hosting any other roles, changing the IP address shouldn’t pose any serious

difficulties.” (Smith, 2013)

If you wish to change the IP of a domain controller to a static one, you can do so with the

following steps. Open up PowerShell and run as an administrator so you can run DCDIAG to

make sure the domain controller passes all tests. Do not continue until any issues are resolved.

After passing all tests, right click on the network icon and select Open Network and Sharing

Center. From there, click Change adapter settings and right click the network adapter on which

you wish to change the IP address and select properties. Scroll down in the Ethernet Properties

dialog box and double click Internet Protocol Version 4 (TCP/IPv4). You may now change the

IP address as well as subnet mask to the new static IP. You may also change the DNS server

entry to match, but after that, you can confirm by pressing okay on that page and the next, and

then the new IP is set.

6|Page
 Before moving on, you’ll want to make sure to register the domain controller’s new IP

address. In PowerShell, run ipconfig/flushdns to remove any cached DNS entries. Then run

ipconfig/registerdns to ensure the new IP address is registered by the DNS server. Finally, run

dcdiag/fix to update the SPN records and check that all tests have passed.

If you wish to check for an active administer account with an active password, you can

first check for an active account by using the command prompt. Once on, type in ‘net user

administrator’

If inactive, simply type ‘net user administrator /active:yes’ to activate it. Type the

original command in again to double check. To change the password, you can create a group

policy in the security options where you can also activate an administrator account. To set a

password, though, you can go to preferences, control panel settings and then right click on Local

Users and Groups and use the drop down menu to enter a password and confirm it.

7|Page
 For a final note, if you need to make changes to RAM and hard drive space, such as for

the recommended 2GB of RAM and 30GB of space, those options can be changed within the

Virtual Memory page. To get there, you must first open up the control panel and go to system.

Under tasks, open advanced system settings and within system properties, select the advanced

tab. Press settings under performance and click the advanced tab again. From here, click

Change within Virtual Memory and choose which drive to make changes to. Select Custom Size

and then you will be able to set the initial and maximum size for the hard drive. Click set, then

Ok twice and you’re ready after a computer reset. If you wish to make changes to RAM, you

can also use the advanced tab within system properties to make changes to RAM and Paging File

sizes. (Esri, 2019)

8|Page
 References
Bartlett, M. (2018, December 16). Windows 10 & 8: Install Active Directory Users and

Computers. Retrieved from https://www.technipages.com/windows-install-active-

directory-users-and-computers

BlackBaud. (2012, April 25). Add Active Directory Domain Services Role. Retrieved from

https://www.blackbaud.com/files/support/infinityinstaller/content/installermaster/tkaddac

tivedirectorydomainservicesrole.htm

Esri. (2019, July 18). How To: Change the operating system's virtual memory settings. Retrieved

from https://support.esri.com/en/technical-article/000002245

Hussain, S. (2017, June 26). Step by Step How to Rename Domain Name in Windows Server

2016. Retrieved from https://newhelptech.wordpress.com/2017/06/25/step-by-step-how-

to-rename-domain-name-in-windows-server-2016/

Policelli, J. (2009, May 21). Introducing the New Active Directory Domain Services in Windows

Server 2008 R2. Retrieved from

https://www.networkworld.com/article/2235809/introducing-the-new-active-directory-

domain-services-in-windows-server-2008-r2.html

Smith, R. (2013, May 2). Changing the IP Address of a Domain Controller. Retrieved from

https://www.petri.com/change-ip-address-domain-controller

Whitney, L. (2020, February 17). How to enable and disable the Administrator account in

Windows 10. Retrieved from https://www.techrepublic.com/article/how-to-enable-and-

disable-the-administrator-account-in-windows-10/

9|Page