Learn the powerful enterprise adaptable database:

Getting Started With ADABAS & Natural

Wednesday, August 21, 2013

Windows Server 2008 on VirtualBox: Create First Domain Controller (Active Directory Domain Services)


Scenario:
There are two Windows 2008 servers (SERVER1 and SERVER2).
SERVER1 will be promoted as the first Domain Controller for corp.contosso.com .
SERVER2 will be used to test connection to the domain corp.contosso.com using the credential user2@corp.contosso.com

PRE-REQUISITE:
1) Follow the tutorial http://setup-steps.blogspot.com/2013/08/windows-server-2008-on-virtualbox.html to create SERVER1 and SERVER2.
or,
2) Alternatively, follow these steps:
a) Create two Windows 2008 servers either on two machines or as two Virtual OS.
b) Run the first server. Click START button. Type "System" in the Search Box. Click the item "System" under Program list.


c) In the System window, click Change Settings. When System Properties dialog window pops up, click Change button.


d) When the change dialog window pops up, type the name SERVER1.


e) Restart the first server.

f) Apply steps b to e to the second server and name it as SERVER2.


3) Set password for Administrator account (if the account doesn't have a password yet)
a) Click START button. Type "user" in the Search Box. Click "User Accounts" item in the Program list.


b) Click Create password for your account.


c) Type the desired password e.g. p@ssword



4) Configure static IP Address.

a) Click START button. Type "network". Click "Network and Sharing Center" in the Program list.


b) Click "Manage Network Connections".


c) Double-click Local Area Connection icon to open Status Dialog Window. Click Properties.



d) Select IPv4 and click Properties.


e) Set IP Address and Subnet Mask. Click OK.


f) Check the new setting using ipconfig command in Command Prompt window.




ADD ROLE "ACTIVE DIRECTORY DOMAIN SERVICES" (ADDS)

1) In SERVER1, run Server Manager. Click "Add Roles".



2) Click Next.




3) Add Active Directory Domain Services.



4) Click Next.




5) Click Install.



6) Wait for the progress.



6) Installation done.


7) Click the given link.



8) Domain Controller installation wizard pops up. Click Next.



9) Click Next.



10) Choose Create New Domain in New Forest.



11) For FQDN, copy the example name, i.e. corp.contosso.com


12) Select Windows 2008 functional level. Click Next.



13) Leave the default checked item. Click Next.



14) Warning message. Click Yes to continue.


15) Accept default paths. Click Next.


16) Enter password, e.g. p@ssword.



17) Summary. Click Next.



18) Wait for the process. Choose reboot on completion.



19) After the computer rebooted, login should look like this:




CREATE NEW DOMAIN USER 

1) Login to SERVER1.

2) Run Server Manager.

3) Explode the roles.





4) In the Users Panel, Right-hand Click. Choose New/User.


5)  Create user2@corp.contosso.com



6) Enter user password, e.g. p@$$w0rd


7) Click Finish.



8) User2 has been successfully created.



TEST LOGIN FROM OTHER COMPUTER
1) Log into SERVER2.

2) Change IP setting as follows:


3) Set new computer name and domain setting. Change from workgroup to domain corp.contosso.com.



4) You will be required to enter user credential.
User name: user2
Password: p@$$w0rd

5) You should get Welcome message.



6) Restart the computer.



7) After the computer has restarted, you should get the following login screen:
Click Switch User.


8) Click Other USer.


9) Login as user2


10) You should be able to login and get the desktop.


Windows Server 2008 on VirtualBox: Workgroups


Recall from previous tutorial, http://setup-steps.blogspot.com/2013/08/windows-server-2008-computer-name-and.html, that by default the Windows Server 2008 is set to be a member of WORKGROUP computers.

This tutorial imports a Windows 2008 appliance file (Win2008.ova) as two clones. Both clones will be configured to join the same workgroup.

(Click here to follow the tutorial to create your own copy of Win2008.ova).

1) Go to menu File/Import Appliance.

2) Import Win2008.ova file.
Click Next.



Click Import.




It may take few minutes for VirtualBox to import the ova file.


3) As a result, you get the first clone.


4) Right-click on the item "Server 2008 Clone" to obtain the context menu. Choose "Clone..."


Rename it as "Server 2008 Clone 1".
Tick "Reinitialize the MAC Address of all network cards" ( This is important, otherwise the clones will not be able to communicate with one another)


Choose Full Clone.


Wait for the process to finish.



5) As a result, you get the second clone.


6) We will configure the Network Adapter for the first clone.
6a) Select the first clone.
6b) Click the Network item.


6c) Set the parameter.
Attached to: Host-Only Adapter
Take note of the MAC address.



7) We will configure the second clone.
7a) Choose the second clone and repeat Step 6b.
7b) Set the parameter.
Attached to: Host-only Adapter.
Take note of the MAC Address. Make sure that it is different from 6c.


8) We will be using the DHCP of VirtualBox for a start.
8a) Go to menu File/Preferences...


8b) Configure the settings.


8c) Set the Host-only Network Adapter.
IP: 192.168.56.1
Network Mask: 255.255.255.0


8d) Set the DHCP Server.
Enable DHCP Server.
Server Address: 192.168.56.100
Server Mask: 255.255.255.0
Lower Address Bound: 192.168.56.101
Upper Address Bound: 192.168.56.254


8e) Click OK to close the window.

9) We will start running the first clone.
9a) Select the first clone. Click the Start Button.



10) Check IP configuration for the first clone.
10a) The quickest way to do it is by clicking Start button, type "cmd" and press ENTER key.


10b) When the Command Prompt window pops up, type "ipconfig".
Take note that the IP Address is 192.168.56.101



11) We will do the same thing for the second clone.
11a) In VirtualBox window, select the second clone and apply Step 9 and 10.
11b) Notice that the second clone will have a different IP address, i.e., 192.168.56.102.


12) Ping Test.
12a) In the second clone, type Ping 192.168.56.101


12b) It looks like the Ping command doesn't reach the first clone.

12c) Switch to the first clone.
12d) Open Server Manager program.
12e) Click Configuration. Click Windows Firewall with Advanced Settings. In the Main Panel, click Inbound Rules.


12f) Look for the item "File and Printer Sharing (Echo Request - ICMPv4-In)". Right-hand Click and choose Enable Rule.


12g) Try Ping test from the second clone again (Repeat Step 12 a).
You should get a reply.


13) Apply the same inbound rule to the second clone.
Check the outcome by sending Ping 192.168.56.102 from the first clone.


14) Set the first clone's name as SERVER 1.
14a) Refer http://setup-steps.blogspot.com/2013/08/windows-server-2008-computer-name-and.html  to get the System Properties window.
14b) Type SERVER1 for Computer name. Click OK.


14c) You will be required to restart the Server.


14d) Restart.



14e) After the server has restarted, click the START button, type network in the Search Box, the item "Network and Sharing Center" appears in program list, click the item.


14f) Apply changes to Sharing and Discovery as follows:



15) Apply Step 14 to the second clone giving a name "SERVER2" to the computer.

16) Now, if you click View computers and devices, a Network Window pops up and shows both of the servers.







17) The above steps demonstrated the way to share resources in workgroup. However, in practice, sharing server resources like this may expose the computer to security threats.