...installed Windows Server 2003 on a stand-alone server, run the Active Directory Wizard to create the new Active Directory forest or domain, and then convert the Windows Server 2003 computer into the first domain controller in the forest. To convert a Windows Server 2003 computer into the first domain controller in the forest, follow these steps: 1. Insert the Windows Server 2003 CD-ROM into your computer's CD-ROM or DVD-ROM drive. 2. Click Start, click Run, and then type dcpromo. 3. Click OK to start the Active Directory Installation Wizard, and then click Next. 4. Click Domain controller for a new domain, and then click Next. 5. Click Domain in a new forest, and then click Next. 6. Specify the full DNS name for the new domain. Note that because this procedure is for a laboratory environment and you are not integrating this environment into your existing DNS infrastructure, you can use something generic, such as mycompany.local, for this setting. Click Next. 7. Accept the default domain NetBIOS name (this is "mycompany" if you used the suggestion in step 6). Click Next. 8. Set the database and log file location to the default setting of the c:\winnt\ntds folder, and then click Next. 9. Set the Sysvol folder location to the default setting of the c:\winnt\sysvol folder, and then click Next. 10. Click Install and configure the DNS server on this computer, and then click Next. 11. Click Permissions compatible only with Windows 2000 or Windows...
Words: 7296 - Pages: 30
...Implementing Windows Server 2003 Active Directory Judith Che Strayer University of Maryland Author Note Judith Che, Strayer University of Maryland. Any questions regarding this article should be address to Judith Che. Strayer University Maryland, White Marsh, MD 21085. Company’s today relay on good networking in order for their business to grow and succeed. A system engineer requires the ability, knowledge, and skill to plan and manage today’s networking which faces an ever-increasing variety of applications. We need to be skilled and informed to manage a network running Windows Server 2003 Active Directory. Present day networking administrators have difficulties ensuring that network resources are available to users when access is needed and securing the network in such a way that available resources are accessible to the proper user with the proper permission. We will have to solve networking problems including troubleshooting, configuration, installation, administration, and managing element. Starting from choosing the best Windows Server 2003 Edition that will meet the company’s needs in terms of price, performance and features; work group woes, name resolution nightmares and DNS name conflicts to server security. These problems can be solved with proper planning, managing, and designing a day-to-day administration of an Active Directory domain within their Windows Server 2003 network environment. We predict that implementing a Windows Server 2003 Active Directory...
Words: 5782 - Pages: 24
...1.WHAT IS THE PURPOSE OF THE GLOBAL NAMES ZONE IN WINDOWS SERVER 2008 DNS SERVERS? A: "GNZ is intended to aid the retirement of WINS, and it's worth noting that it is not a replacement for WINS. GNZ is not intended to support the single-label name resolution of records that are dynamically registered in WINS, records which typically are not managed by IT administrators. Support for these dynamically registered records is not scalable, especially for larger customers with multiple domains and/or forests. In GNZ, after the creation and enabling of the GlobalNames zone, the administrators must manually create, add, edit and, if required - delete, name records from that zone. GNZ does not support dynamic updates." Read more: http://wiki.answers.com/Q/What_is_the_purpose_of_the_Global_Names_Zone_in_Windows_Server_2008_DNS_servers#ixzz1kzD5eDgb EXPLAIN THE MODIFICATIONS NECESSARY TO DNS FOR ACCOMMODATING READ ONLY DOMAIN CONTROLLERS. HOW IS THIS DIFFERENT FROM THE WAYS DNS HANDLES ORDINARY DOMAIN CONTROLLERS? "Because the DNS server that runs on an RODC cannot directly register client updates, it has to refer the client to a DNS server that hosts a primary or Active Directory-integrated copy of the zone file. This server is sometimes referred to as a "writable DNS server." When a client presents a Find Authoritative Query, which is the precursor to an update request, the DNS server on the RODC uses the domain controller Locator to find domain controllers in the closest site...
Words: 5692 - Pages: 23
...NT1330 Assignment 1: Introduction to Windows 2008 Network Services 1.) The Domain Name System consists of a hierarchical set of DNS servers. Each domain or subdomain has one or more authoritative DNS servers that publish information about that domain and the nameservers of any domains "beneath" it. The hierarchy of authoritative DNS servers matches the hierarchy of domains. At the top of the hierarchy stand the root nameservers: the servers to query when looking up (resolving) a top-level domain name (TLD) Features • Scalability—Because DNS is capable of distributing workload across several databases or computers, it can scale to handle any level of name resolution required. • Constancy—Host names remain constant even when associated IP addresses change, which makes locating network resources much easier. • Ease of Use—Users access computers using easy-to-remember names such as www. microsoft.com rather than a numerical IP address, such as 192.168.1.100. • Simplicity—Users need to learn only one naming convention to find resources on either the Internet or an intranet. 2.) DHCP stands for Dynamic Host Configuration Protocol. As the name suggests, DHCP is used to control the network configuration of a host through a remote server. DHCP functionality comes installed as a default feature in most of the contemporary operating systems. DHCP is an excellent alternative to the time-consuming manual configuration of network settings on a host or a network device. Features · DHCP client...
Words: 1542 - Pages: 7
...Guide Thursday, 25 February 2010 Version 2.0.0.0 Baseline Prepared by Microsoft Prepared by Microsoft Copyright This document and/or software (“this Content”) has been created in partnership with the National Health Service (NHS) in England. Intellectual Property Rights to this Content are jointly owned by Microsoft and the NHS in England, although both Microsoft and the NHS are entitled to independently exercise their rights of ownership. Microsoft acknowledges the contribution of the NHS in England through their Common User Interface programme to this Content. Readers are referred to www.cui.nhs.uk for further information on the NHS CUI Programme. All trademarks are the property of their respective companies. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. © Microsoft Corporation 2010. All rights reserved. Disclaimer At the time of writing this document, Web sites are referenced using active hyperlinks to the correct Web page. Due to the dynamic nature of Web sites, in time, these links may become invalid. Microsoft is not responsible for the content of external Internet sites. Page ii Active Directory – Design Guide Prepared by Microsoft, Version 2.0.0.0 Last modified on 26 February 2010 Prepared by Microsoft TABLE OF CONTENTS 1 2 Executive Summary .........................................................................................................................
Words: 43732 - Pages: 175
...Internet. From the touch of a button or a click of a mouse a user can gain access to a plethora of information. There are many different protocols and services that are interconnected to provide this ability. One such service is called Domain Naming System (DNS). DNS is an Internet service that translates domain names into IP addresses. This may not seem like a big deal to most but many would beg to differ if they had known that without DNS they would have to remember billions of numbers. Everything in a network has an IP address. DNS helps us designate what those devices are. There are 3 basic components of DNS which are zones (or namespace), name servers and resolvers. In the following reading you will learn what DNS is as well as the working components that make it as reliable as it is today. DNS was invented in 1983 shortly after Transmission Control Protocol/Internet Protocol (TCP/IP) was deployed. DNS operates on port 53 and utilizes User Datagram Protocol (UDP). The only time that the Transmission Control Protocol is used is when the response size exceeds 512 bytes. The only time that UDP can be used to transport more than 512 bytes is if EDNS is used. EDNS is basically an extension of DNS. Before the use of DNS, every computer on the network would retrieve a file called HOST.txt from a computer at SRI International. SRI is a contract research institute that focuses on communications, networks, robotics, and other forms of Information Technology (IT). This file would...
Words: 3486 - Pages: 14
...Networking Finals Essay The Domain Name Server Definition: The DNS translates Internet domain and host names to IP addresses. DNS automatically converts the names we type in our Web browser address bar to the IP addresses of Web servers hosting those sites. Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, therefore, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.com might translate to 198.105.232.4. The DNS system is, in fact, its own network. If one DNS server doesn't know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned. The DNS was designed to resolve or simply match up the IP address associated with the device to the friendly URL name on the other end. The domain name sever’s function in life is to resolve (translate) the user-friendly Web address to the hard to remember IP addresses from somewhere else. Therefore network providers are responsible for having their own DNS databases updated and in sync, with their outside counterparts, when their trying to talk to one another, because only companies IP addresses will match up with one another on the same network. DNS Server Configuration Types: DNS servers can be configured as one of the following types: Caching-only server A caching-only name server maintains a cache of resolved domain...
Words: 1664 - Pages: 7
...is associated with a site according to its IP address; that is, each IP address maps to one subnet, which in turn maps to one site. Active Directory uses sites to: * Optimize replication for speed and bandwidth consumption between domain controllers. * * Locate the closest domain controller for client logon, services, and directory searches. * * Direct a Distributed File System (DFS) client to the server that is hosting the requested data within the site. * * Replicate the system volume (SYSVOL), a collection of folders in the file system that exists on each domain controller in a domain and is required for implementation of Group Policy. * The ideal environment for replication topology generation is a forest that has a forest functional level of at least Windows Server 2003. In this case, replication topology generation is faster and can accommodate more sites and domains than occurs when the forest has a forest functional level of Windows 2000. When at least one domain controller in each site is running Windows Server 2003, more domain controllers in each site can be used to replicate changes between sites than when all domain controllers are...
Words: 481 - Pages: 2
...snap-in | Windows Server 2003 Administrative Tools Pack | Administer domain trusts, add user principal name suffixes, and change the domain mode. | Active Directory Sites and Services snap-in | Windows Server 2003 Administrative Tools Pack | Administer the replication of directory data. | Active Directory Users and Computers snap-in | Windows Server 2003 Administrative Tools Pack | Administer and publish information in the directory. | Active Directory Service Interfaces (ADSI) Edit snap-in | Windows Server 2003 Support Tools | View, modify, and set access control lists (ACLs) on objects in the directory. | Backup Wizard | Windows Server 2003 operating system tool | Back up and restore data. | Control Panel | Windows Server 2003 | View and modify computer, application, and network settings. | Dcdiag.exe | Windows Server 2003 Support Tools and Windows Server 2003 Server Resource Kit | Analyze the state of domain controllers in a forest or enterprise; assist in troubleshooting. | DNS snap-in | Windows Server 2003 Administrative Tools Pack | Manage DNS. | Dsastat.exe | Windows Server 2003 Support Tools | Compare directory information on domain controllers and detect differences. | Event viewer | Windows Server 2003 Administrative Tools Pack | Monitor events recorded in event logs. | Ldp.exe | Windows Server 2003 Support Tools | Perform Lightweight Directory Access Protocol (LDAP) operations against Active Directory. | Linkd.exe | Windows Server 2003 Server Resource...
Words: 602 - Pages: 3
...Names Zone in Windows Server 2008 DNS servers? Global Names Zone is intended to aid the retirement of Windows Internet Name Service. It is not intended to support the single-label name resolution of records that are dynamically registered in WINS. Support for these dynamically registered records is not scalable, especially for larger costumers with multiple domains or forests. After enabling the Global Names Zone, the administrator must manually create, add, edit and delete name records from that zone. It doesn’t support dynamic updates. 2. Explain the modifications necessary to DNS for accommodating Read Only Domain Controllers (RODC). How is this different from the way DNS handles ordinary domain controllers? All of the modifications required for accommodating a Read Only Domain Controller are handled through the “adprep / rodcprep step, which modifies the domain schema. A domain-integrated zone on a RODC will not accept Dynamic updates. A file-backed DNS zone on such a RODC would be able to accept dynamic updates, as it has a separate database from the domain database. Server 2008 allows a Domain Controller to not contain a DNS server. 3. Explain Background Zone Loading. The DNS sever in windows server 2008 makes data retrieval faster by executing background zone loading. In the past, enterprises with zones containing large numbers of records in active directory experienced delays of up to an hour or more when the DNS server services in windows 2003 tried to retrieve...
Words: 391 - Pages: 2
...Microsoft 70-640 TS: Windows Server 2008 Active Directory, Configuring Version: 30.6 Microsoft 70-640 Exam Topic 1, Exam Set 1 QUESTION NO: 1 You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network run Windows Server 2008. Only one Active-Directory integrated zone has been configured in the ABC.com domain. ABC.com has requested that you configure DNS zone to automatically remove DNS records that are outdated. What action should you consider? A. You should consider running the netsh /Reset DNS command from the Command prompt. B. You should consider enabling Scavenging in the DNS zone properties page. C. You should consider reducing the TTL of the SOA record in the DNS zone properties page. D. You should consider disabling updates in the DNS zone properties page. Answer: B Explanation: In the scenario you should enable scavenging through the zone properties because scavenging removes the outdated DNS records from the DNS zone automatically. You should additionally note that patience would be required when enabling scavenging as there are some safety valves built into scavenging which takes long to pop. Reference: http://www.gilham.org/Blog/Lists/Posts/Post.aspx?List=aab85845-88d2-4091-8088a6bbce0a4304&ID=211 QUESTION NO: 2 You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network run Windows Server 2008. The ABC.com network...
Words: 34198 - Pages: 137
...Scenario When integrating AD DS with an existing DNS namespace, we recommend that you do the following: Install the DNS Server service on every domain controller in the forest. This provides fault tolerance if one of the DNS servers is unavailable. In this way, domain controllers do not need to rely on other DNS servers for name resolution. This also simplifies the management environment because all domain controllers have a uniform configuration. Configure the Active Directory forest root domain controller to host the DNS zone for the Active Directory forest. Configure the domain controllers for each regional domain to host the DNS zones that correspond to their Active Directory domains. Configure the zone containing the Active Directory forest-wide locator records to replicate to every DNS server in the forest by using the forest-wide DNS application directory partition. A computer might have a different existing DNS name if the organization previously, statically registered the computer in DNS or if the organization previously deployed an integrated Dynamic Host Configuration Protocol (DHCP) solution. If your client computers already have a registered DNS name, when the domain to which they are joined is upgraded to Windows Server 2008 AD DS, they will have two different names: The existing DNS name. The new fully qualified domain name (FQDN) Clients can still be located by either name. Any existing DNS, DHCP, or integrated DNS/DHCP solution is left intact. The new primary names...
Words: 305 - Pages: 2
...*part one talk about DNS servers. What are they what do they do basic configuration and variation of configuration. As the network administrator for Contoso, Ltd to resolve the issue of users on the company network reporting that they can use host names to connect to computers on the local private network, but they cannot use host names to connect to Internet destinations you have a few options. The action that will take the least amount of administrate effort to enable network users can connect to the Internet host names would be to configure NS2 and NS3 to use NS1 as a forwarder. A DNS forwarder is a DNS server that performs DNS queries on behalf of another DNS server (Shinder.T 2005). With this setup one would configure the firewall used by NS1 to allow only one DNS server to communicate with the internet. After you configure NS2 and NS3 to forwarder all queries that cannot be resolved internally will be forwarded to NS1. Because of the large amount of traffic going through NS1 the server will build a large cache of DNS data, overtime this data will allow the DNS server to process request faster(Book). Another option to solve the issue of users on the company network reporting that they can use host names to connect to computers on the local private network, but they cannot use host names to connect to Internet destinations is to configure all DNS servers to send queries outside of a network using their root hints. This is not the most desirable configuration because...
Words: 781 - Pages: 4
...Tone Rogers IT 221 Research Assignment Part 2 & 3 11/16/11 The purpose for Global Names Zone in Windows Server 2008 DNS is to aid retirement WINS. Keep in mind that it is not a replacement for WINS. Also it is not intended to support the single-labeled name resolution of records that are dynamically registered in WINS, records which typically are not managed by IT administrators according Microsoft wizard. According to Microsoft TechNet with RODC organizations can easily deploy domain controllers in locations. Which security can be guaranteed. It differs by having better security, faster login time, and more efficient access to resource on the network. Background loading is a new feature on Windows Server 2008. When this service starts, it creates one or more threads of execution to load the zones that are stored in Active Directory. After the Global Names zone is deployed, when a Windows Vista-based DNS client attempts to resolve a single-label name, it appends the primary DNS suffix to the single-label name and submits the name query request to its DNS server. IPv6, which has been covered in previous editions of this column, is a new suite of Internet standard protocols. IPv6 is designed to address many of the issues of the current version—IPv4—such as address depletion, security, auto configuration, and the need for extensibility. One difference in IPv6 is that its addresses are 128 bits long, while IPv4 addresses are only 32 bits. IPv6 addresses...
Words: 578 - Pages: 3
...Latin America, Caribbean • Private IP Ranges: IPv4 : IP 4 192.168.0.0 192 168 0 0 10.0.0.0 172.16.0.0 FEC ‐ FEF FE8 ‐ FEB IPv6 : IP 6 Site‐local: Link‐local: DNS • DNS (Domain Name System) – hierarchical S( o a a e Syste ) e a c ca naming system for any resource connected to a network or Internet. • Maintains the domain namespace and provides translation services between the IP and DN namespaces • DNS Server maintains: – (A) Add (A) Address records d – (NS) Name server records – (MX) Mail exchanger records (MX) Mail exchanger records DNS on the Internet DNS on the Internet • ICANN – Internet Corporation of Assigned Names and Numbers • • • • IP address allocation Protocol identifier assignment Country code / top‐level domain management Root server management • Top‐Level Domain – highest hierarchical level in DNS – – – – Category ‐ .com, .net, .org, .biz, .name, .pro Country ‐ .ua, .ru, .cn, .us, .ca Sponsored ‐ .aero, .jobs, .travel, .mobi, .edu, .gov, .mil Infrastructure – .arpa, .localhost, .test, .example, .invalid • Domain Name Registry – database of all domains registered to a top‐level domain t l ld i • Domain Name Registrar – agency accredited by ICANN to manage domain name reservations (GoDaddy, TwoCows, Network Solutions, etc.) etc ) DNS Concerns DNS Concerns • • DNS Cache Poisoning ‐ is a maliciously created or...
Words: 1947 - Pages: 8
