next »

[Mad1]

Is Active directory something I need to install or is it part of Win2K3 server?

[Wooster]

Afik the whole system is based on it, so it's installed by default..

*edit*
http://searchwinit.techtarget.com/generic/0,295582,sid1_gci1050336,00.html?topic=298833

[Mad1]

Thanks Wooster I'll have a read through that.

[Stevie]

It's pretty easy to set up active directory in server 2003. When you install the server OS, it runs a wizard and will ask you if you want it to be a domain controller, it runs through and you give a domain name etc.

When it's set up you can then set up dhcp on the server (another wizard), you give it a scope of addresses, basically a network and subnet mask, which in your case will be something small, like 192.168.1.0 /24

Or, if your using adsl for your BB access, just plug your router into the switch and it will take care of your dhcp requirements

You exclude any static IP addresses from the DHCP scope (like your server, the switch, any other "permanent" devices on the network)

Next step is adding clients to the domain, basically you right click my computer, properties, computer name, change, then add to domain. You will need to be a domain administrator to do this, which will mean, you add yourself as a user in the AD of the domain controller, then add the user (you) to the domain administrators security group (this is all done in active directory users and computers under administrative settings)

If the PC joins then you've cracked it, you will see the PC name appear in the active directory.

The you can go about setting up your home directories (folders for each user) add the path to this location in each user profile and it will map automatically when they log in. You can tighten the security on each folder to folder owner only ( and domain administrators ;o)

Good luck man, this is great experience mate, fire away with any questions.


Hey, you know what you should do? Download vmware create a server and a host and have a go before you get loose on the real stuff, then ya aint going in blind.

You familiar with vmware?

[Mad1]

Your the best Stevie.

Thats awesome clear help.

I used vmware a while ago i'll have to aquire it again and have a go.

Do I edit user permissions via gpedit.msc (from run prompt) on the server so it affects all users?

[Stevie]

You can do that to apply domain wide policies, like standard screensavers, desktop backgrounds etc, but permissions are changed per user in AD user or security group. What you do is create security groups, apply user to the groups, and then apply the groups to folders. Then only the members of that group can access the folder.