Content Page

1. Introduction 22. Network Diagram 33. Installation for Windows Server 2008 Enterprise 4

3.1 Installing the Domain Name System 6 3.2 Installing Active Directory 103.3 Setting Group Policy 143.4 Delegating Control 16 3.5 Setup Taskpads 18 3.6 Setup an IIS7 Web Server 20

4. Installation for Windows Server 2008 Core 22 4.1 Change Computer Name and Password 24 4.2 Disable IPV6 25 4.3 Configure TCP/IP 274.4 Disable Firewall 284.5 Configure the DNS server and joining domain 284.6 Setup additional Domain Controller 30

5. Installation for Client Windows 7 325.1 Configure TCP/IP and Join Domain 355.2 Installing AdminPak 37

6. Conclusion7. Reference

1. Introduction

I am the IT administrator of a medium-size company with Windows 2003 servers and Windows XP client computers. I have Active Directory, DNS and IIS6 web server installed. Your boss is interested to upgrade the IT infrastructure to Windows Server 2008 to serve Windows 7 client computers. Below is the information about the project on upgrading the client and the servers. The Topology will include a Windows Server 2008 Enterprise, Windows Server Core 2008 Enterprise and a Windows 7 Client Computer.

1

2. Network Diagram

This is the network diagram of the project to show that there are 2 Servers and one Client. The Computer Name ( Netbios ), Operating System, Physical Memory and IP address are shown in the network diagram.

2

3. Installation Of Windows Server 2008 Enterprise

Before Installing the Windows Server 2008 Enterprise, you will need to Set vm ware settings for the virtual machine you want to create. Set the ISO image after you selected the I will install operating system later option.

Settings :Microsoft Windows Server 2008Processors : 1Ram : 1024Harddrive : 16GB

3

Now you can start installing Windows Server 2008 on a virtual console in vm ware.

This is the installation of the windows server 2008 enterprise edition.

Step 1.Insert the appropriate Windows Server 2008 installation media into your DVD drive and reboot the computer.

Step 2.

4

When prompted for an installation language and other regional options, make your selection and press Next and then Install Now.

Step 3.Enter Product key of the operating system and whether you want to activate windows after installation completes.( If you do not have the Product ID available right now, you can leave the box empty, and click Next. You will need to provide the Product ID later, after the server installation is over. )

Step 4.Because you did not provide the correct ID, the installation process cannot determine what kind of Windows Server 2008 license you own, and therefore you will be prompted to select your correct version in the next screen.

5

Step 5.Select which disk/partition do you want to install the operating system in and then select next. Setup will now install the operating system.

Step 6.After the installation, you will be able to access the server locally. Type in Administrator in the user section and leave the password blank. Press enter. Windows will prompt to set new password as this is the first time you are logging in.( Password must meet complexity requirements of the default policy set by Microsoft.)

6

3.1 Installing the Domain Name System ( DNS ).

Step 1.Change your computer name to the desired name. This is the Netbios name with a maximum of 15 characters.

Step 2.Set the computer’s IP address to a static one and set the preferred DNS server as its own ip address.

Step 3.Reboot computer and set the primary suffix of the computer to the desired domain name. For this case it will be p0827467.local. After this is set, reboot the server.

7

Step 4.Check that the settings you just configured are already applied onto the system. Start > Cmd . Type in ipconfig /all on the cmd. There will be Host Name, Primary DNS Suffix and the IP address configured.

Step 5.From the Server Management snap-in, Select Add roles.

8

Step 6.Select the DNS server role and proceed to installation. Default configuration will work. Setup will show if any error occurred.

Step 7.Now that the DNS role is installed, we will need to configure the server to create forward and reverse lookup zones for the dns server to work. Type dnsmgmt.msc in command line or Start>Administrative Tools>DNS.

Step 8.After you entered the DNS snap-in, Right-Click the domain that is created and select Configure a DNS Server Wizard. This will configure forward and reverse lookup zones for the domain.

9

Step 9.After configuring the DNS Server, You will see records on the forward and reverse zones. There should be 3 records, if not type ipconfig /flushdns and then restart adapter.

Step 10.Now that the DNS server is configured, we can test whether it is working by typing nslookup p0827467s1 in the command line. If there are 2 records, this means the dns is in working condition and you have configured it correctly.

10

3.1 Installing Active Directory

Step 1.Start cmd, type dcpromo in the command line. A wizard will pop up to help you configure the Active Directory Services on the domain. Select Create a new domain in a new forest and click next.

Step 2.In the Operating System Compatibility windows read the requirements for the domain's clients and if you like what you see - press Next.

11

Step 3.Choose Domain Controller for a new domain and click Next. Choose New Domain in New Forest and click next.

Step 4.Enter the full DNS name of the new domain, for example – p0827467.local - this must be the same as the DNS zone you've created in step 3, and the same as the computer name suffix you've created. Click Next.

Step 5.Accept the Database and Log file location dialog box and Accept the Sysvol folder location dialog box unless you have another directory you have in mind. The Drive/Partition these two folders are placed in must be in a NTFS partitioned hard drive.

Step 6.Installation for the Active Directory will now start. A reboot is required after the completion of the installation so as to allow the AD to work.

12

Step 7.Check that the Active Directory has its default containers and Objects.

Step 8.Using Bulk Import to Export or Import Users, OUs, Groups into the specific place in the active directory. Type ldifde command in cmd to show the syntax of the command.

Step 9.To Export the AD to a file in the directory you are working in. Type ldifde –f Export.ldf –s p0827467s1. ( This will create a ldf file exported from the AD with all the variables inside the AD. )

13

Step 10. To see examples of the syntax of the bulk import file ldf format, you can use notepad to edit the ldf file you just exported.

Step 11.You can manually edit the ldf using notepad. The Syntax of the command is important. With a wrong syntax, the bulk import will have errors.

14

Step 12.To import the file into the server, you need to add –i.Type ldifde –I –f newou.ldf –s p0827467s1. This will import the file’s configuration into the AD of the server p0827467s1.

Step 13.This is the list of the Users in the AD in their respective OU and their Logon Names.

Name Department (OU) Logon name1. Darus Md Saleh Accounting DMSaleh2. Cheryl Lee Accounting Cheryl3. Denise Tan Accounting Denise1. Simon Klassen Finance Sklassen2. John Sim Finance John3. Simon Lim Finance Simon1. Ong Siew Ping Engineering Osiewping2. Sammy Lee Engineering SammyL3. Tammy Tan Engineering TammyT1. David Papkin Help Desk Dpapkin2. Zack Ong Help Desk ZackO3. Allie Flores Help Desk Allie1. Lim Kheng Hock HR LKHock2. Sean Wong HR SeanW3. Lily Rose HR Lily1. Martin Leslie Sales Mleslie2. Kenneth Low Sales KenLow3. Awesome Me Sales Awesome

15

3.2 Setting group policy

Step 1.Start Group Policy Management from Start>Administrative Tools>Group Policy Management.

Step 2.Select the domain at the left column and hit the settings tab of the default domain policy of your domain.

Step 3.Select Windows Settings> Security Settings> Account Policy> Password Policy to change the policy of the domain.

16

Step 4.Change the Account lockout threshold to 4 attempts and account lock out duration to 0. This will modify the Account lockout to lockout after 4 failed attempts and the duration is until someone with enough rights to unlock the account unlocks it.

Step 5.Start cmd. Type gpupdate in cmd. This will set the group policy that has just been modified. Now you have done configuring the group policy for the entire domain.

3.3 Delegating Control

Step 1.Start> Administrative Tools> Active Directory Users and Computer.

Step 2.On a specific OU you have created, right click and select Delegate Control. This will start the Delegation Control Wizard for you to delegate control to a certain user.

Step 3.Select which user you want to delegate control to and what control do you want to give the user. Unlocking the Account is not a permission by default, so you have to go to custom permissions to allow the user to unlock accounts.

17

Step 4.Click Next and you are done delegating control to the user. Make sure that the user has been trusted to do delegation. ( Right-Click User> Properties> Check Trust user for delegation and click Ok. )

3.4 Setting up Taskpad

Step 1.Click Start > Run, type MMC and click Enter.

Step 2.In the new MMC window, click File > Add/Remove Snap-in. Select Active Directory Users and Computers and add it. Click Ok.

18

Step 3.Back in the MMC window, click to expand the AD domain, and browse to the required OU. Right-click on the OU and select New Taskpad view.

Step 4.This will bring up the Wizard to create a new taskpad for the OU.

Step 5.In the New Taskpad wizard page customize the view you want to retain. You can select various sizes for the display, and other options related to the button captions and so on. When done, click Next.

Step 6.In the Name and Description window type any name and description you want to appear in the Taskpad view. Click Next. Now you have created a taskpad but there are no tasks. You will need to create tasks.

Step 7.In the Completing wizard page make sure that the Start New Task Wizard checkbox is selected and click Next.

Step 8.In the Command Type window leave the Menu Command selection and click Next. You can select other Commands but that serves different purposes. For Shell command you can run a script.

19

Step 9.Select a task you wish to add. In this step I've chosen the Reset password task, but you can choose your own tasks.

Step 10.Run the wizard again to select more task you wish to add. After adding, you will have a panel on the left side to carry out tasks. This will allow the User to do the task that is assigned to him.

Step 11.After creating all tasks on the taskpad, you need to save the taskpad. File > Save. And taskpad creation is finished.

3.5 Setting up an IIS 7.0 Webserver

Step 1.Start Server Management and Select Add Roles.

Step 2.Select IIS and click next. A prompt will appear asking if you want to install the features required for the role to work. Select to agree.

Step 3.After you see Installation succeed, you can close the wizard. This means you have successfully created the IIS 7.0 Role in your server.

20

Step 4.Start> Run> dnsmgmt.msc or Start> Administrative Tools> DNS. This will bring up the dns.

Step 5.Select the Domain p0827467s1>Forward Lookup Zones>p0827467.local at the left panel of the snap in.

Step 6.You will see a number or files and folders. Hosts, Name Servers. Right click and Select New Alias.

Step 7.Set Alias to www and click ok. Notice that there will be a new record in the zone.

21

Step 8.Go to %System Drive%\inetpub\wwwroot to edit the html file of the Webpage you just created.

Step 9.Browse to the website on Internet Explorer to Check if Web is working.

4. Installation of Windows Server Core 2008

Before Installing the Windows Server 2008 Enterprise, you will need to Set vm ware settings for the virtual machine you want to create. Set the ISO image after you selected the I will install operating system later option.

Settings :Microsoft Windows Server 2008

22

Processor : 1Physical Memory: 768MBHarddrive : 16 Gb

Now you can start the installation on the virtual console of the VM Ware.

Step 1.Insert the appropriate Windows Server 2008 installation media into your DVD drive and reboot the computer

Step 2.When prompted for an installation language and other regional options, make your selection and press Next and then Install Now.

23

Step 3.Enter Product key of the operating system and whether you want to activate windows after installation completes.( If you do not have the Product ID available right now, you can leave the box empty, and click Next. You will need to provide the Product ID later, after the server installation is over. )

Step 4.Because you did not provide the correct ID, the installation process cannot determine what kind of Windows Server 2008 license you own, and therefore you will be prompted to select your correct version in the next screen. In this case Windows Server Core 2008 Enterprise.

24

Step 5.Select which disk/partition do you want to install the operating system in and then select next. Setup will now install the operating system.

Step 6.After the installation, you will be able to access the server locally. Type in Administrator in the user section and leave the password blank. Press enter. Windows will prompt to set new password as this is the first time you are logging in.( Password must meet complexity requirements of the default policy set by Microsoft.)

4.1 Changing Computer Name / Password

Step 1.Check the configuration of the computer name. Type ipconfig /all. You will see the HostName/ NETBIOS name of the computer.

Step 2.Change the name. Type netdom rename computer “Computer Name” /newname p0827467s2. Do you want to proceed(Y/N) ? Y

25

Step 3. Reboot Computer.

4.2 Disable IPV6

Step 1.Find out which interface is associated with ipv6. Type in the command line wmic nicconfig where ipenabled=true getdescription,SettingID,IPaddress

Step 2.You will need to see the SettingID as there is no GUI for the network connections, we will use the regedit to edit the values of the ipv6.Step 3.Then type regedit to open registry editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\LinkageOpen the “Bind”, “Export” and “Route” String Values and remove the Adapter SettingID that corresponds to the listed NIC that you want to unbind IPv6.

Step 4.Then navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}.

26

Step 5.Search for the Setting ID of the Network Interface .

Step 6.Select the Interface. In Linkage, Double Click Upperbind. Remove tcpip6. Reboot Computer and you are done. Verify that the adapter is gone from the netsh interface ipv6 interfaces.

4.3 Configuring TCP/IP

Step 1. Type netsh interface ipv4 set address “Local Area Connection” static 10.24.4.2 255.255.255.240 . This will change the IP address of the interface Local Area Connection to static and with the IP address 10.24.4.2/28.

27

Step 2.Now that we have configured the IP address, we will need to set the static DNS server.The Command to add dns server is netsh interface ipv4 add dnsserver “Local Area Connection” 10.24.4.1 index=1 ( 10.24.4.2 index=2)This will add 2 entries to the dns servers.

4.4 Disable Firewall

Type netsh firewall set opmode disableYou will see Ok.This means you have disabled the Firewall.

4.5 Configure the dns Server and Joining the Domain

Step 1.Join the domain by typing the command netdom join p0827467s2 /domain:p0827467.local /userd:Administrator /password:PASSword123The command completed successfully. Reboot the Computer.

28

Step 2.Install DNS role on the Server Core.Type start /w ocsetup DNS-Server-Core-Role. ( This will install DNS )

Step 3.Create zone on the DNS server by typing the command.Dnscmd p0826467s2 /zoneadd p0827467.local /Secondary 10.24.4.1Command completed successfully.Now you can zone transfer from the master server.

29

Step 4.Type dns cmd p0827467s2 /zoneprint to view what you have transferred from the zone.

4.6 Setting up additional Domain Controller

Step 1.In Server Core there are 2 types of AD installation. Attended or Unattended.Unattended installation is preferred because you do not need to stay by the pc and type in the variables to connect to the master server if you are a replica.We will be doing unattended installtion of the dcpromo.The Command to type is dcpromo /unattend:logfile.txt

30

31

Now you have set up the Active Directory and you are a Domain controller of the domain p0827467.local

5. Installation of Windows 7 Client

Before Installing the Windows 7 Client, you will need to Set vm ware settings for the virtual machine you want to create. Set the ISO image after you selected the I will install operating system later option.

32

Settings :Windows Vista ( Windows 7 not compatible in vmware yet)Processor : 1Physical Memory : 768MBHarddrive : 16GB

Step 1.Insert the DVD disk and then reboot the computer.

33

Step 2.Click install now option on the Windows 7.

Step 3.Enter Product key of the operating system and whether you want to activate windows after installation completes.( If you do not have the Product ID available right now, you can leave the box empty, and click Next. You will need to provide the Product ID later, after the server installation is over. )

Step 4.Because you did not provide the correct ID, the installation process cannot determine what kind of Windows 7 license you own, and therefore you will be prompted to select your correct version in the next screen.

Step 5.Select which disk/partition do you want to install the operating system in and then select next. Setup will now install the operating system.

34

5.1 Configuring TCP/IP and Joining Domain

Step 1.You will need to change your computer name to the desired netbios name. Right Click My Computer and select properties. On the right hand side of Computer name select Change Settings. Change the Computer name and then Reboot the system.

Step 2.

35

Configure your IP address to be able to hook up with the server. As the server does not have DHCP, you will have to enter it manually

Step 3.Type ncpa.cpl from the cmd or run. Network connections will run.

Step 4.Right click the Local Area Connection and Select Properties

Step 5.Uncheck IPv6 and select IPv4 Properties.Set the desired IP address and DNS servers for the adapter.

Step 6.Click Ok. Click Close.Run CMD type ipconfig /all.Type nslookup p0827467s2 and you should be able to see the DNS servers.

Step 7.Now you can join the domain. Right click My Computer and Select Properties.

Step 8.Under Computer Name, Change Settings. Click Change > Select Domain> Type in the p0827467.local Domain and press ok.

36

Step 9.Enter the credentials to join the domain.User of the domain in Active Directory.You have joined the domain. Reboot Computer.

5.2 Installing Adminpak

Step 1.Adminpak also known as RSAT is for the user to carry out permissions given by the server like unlocking accounts and resetting passwords.You will need to go to micrsoft website and download the installer pack.

37

Step 2.Install the package.The system will prompt you for password and user name from a administrator account in the domain. Enter the password and username of an administrator.

Step 3. Go to Start> Control Panel > Programs> Turn Windows Feature on or off.

Step 4.Select the appropriate features you want to add into the system and click ok. Setup will install them for you

Step 5.After installing, you can manage accounts( if you are delegated control ) By going to Control Panel> Administrative Tools.( Currently Windows 7 does not support Active Directory User and Computer )You have finished installing Adminpak.

38

6. Conclusion

Problems I faced while doing the project

For Windows Server 2008, I encountered problems from the bulk import command ldfide. It was relatively new to me and I couldn’t get the syntax right at first. After I got the syntax right, the Group Policy Denied my creation of users because of the password policy. I had to change the password policy then I could create the users.

For Server Core 2008, there are mainly no problems except when I accidently deleted the entry in the Server 2008 for my computer account and I could not login the domain using core. The domain’s security database does not have the workstations account to access. I tried to create the entry back in the Server 2008 but it still couldn’t work. I found a solution by using the netdom command to rejoin the domain.

For Windows 7 Client, The Adminpak that was released by Microsoft doesn’t have Administrative Tools for the Active Directory Users and Computer.

What I learnt from the project

Server Core 2008 configuration uses less steps and it is faster than Windows Server 2008. Server Core Configurations dcpromo unattended manually create txt file for the unattended log file.New Command Ldidfe for Bulk Import.

39

Reference:

http://www.petri.co.il/using-csvde-ldifde-export-active-directory-snapshots-windows-server-2008.htmhttp://www.scribd.com/doc/2701360/2K8-Unattended-DCPROMOhttp://www.petri.co.il/configuring-windows-server-2008-networking-settings.htmhttp://www.totalnetsolutions.net/2008/03/20/dcpromo-windows-server-2008-server-core/http://www.petri.co.il/managing-windows-2008-server-core-server-roles.htmhttp://eniackb.blogspot.com/2009/07/how-to-disable-ipv6-in-windows-2008.htmlhttp://www.edugeek.net/forums/how-do-you-do/7376-ldifde-create-group-command.htmlhttp://msmvps.com/blogs/ad/archive/2008/09/18/admin-s-guide-to-server-core-commands.aspxhttp://support.microsoft.com/kb/555636/en-us

40