| GitHub | 您所在的位置：网站首页 › Active Directory Users and Computers ADUC Installation › GitHub |
GitHub
|
Setup Domain Controler in Azure Create a Virtual Machine Create a Resource Group: "AD-lab" Name: "DC-1" Set to a region: "East US" Set to use an image of Windows Server 2022 Minimum of 2 cpu Create a user name: labuser Create a password Validate and create Take note of the Resouce Group and Virtual Network (Vnet) that get created at this time
Set Domain Controller's NIC Private IP address to be static Click on the DC-1 VM in the Virtual Machine tab Click on the Networking tab Click on the NIC labled "Network Interface: ******" Click IP Configurations Click Ipconfig1 Change the Assignment from Dynamic to Static and save (This maintains one IP address to stay assigned to our Domain Controller)
Create a Client VM (Client-1) Create a Virtual Machine Add to Rescource Group: "Ad-lab" Name: "Client-1" Set to region: Use the same as the previous VM (East US) Set to use an image of Windows 10 Minimum of 2 cpu Check the License Agreement box Validate and create Ensure that this VM is in the same Vnet as DC-1
Ensure Connectivity between the client and Domain Controller Login to Client-1 with Remote Desktop and ping DC-1's private IP (It should time out)
Login to the Domain Controller and enable ICMPv4 on the local Windows Firewall Windows Defender Firewall -> Advanced Settings -> Inbound Rules -> Sort by Protocol and locate ICMPv4 -> [X] Core Network Diagnostics - ICMP Echo Request (ICMPv4 -out) There are two of these to enable, one private, one Domain
Check back at Client-1 to see the ping succeed
Install Active Directory Login to DC-1 and install Active Directory Domain Services Add Roles and Features on the Server Manager window -> Follow the default install prompts until "select a server from the server pool" -> [x] Active Directory Domain Services -> Follow all default install prompts, checking required restart boxes until allowed to install -> Install
Post Deployment Configuration Click the flag in the Server Manager -> Promote this server to a Domain Controller -> Add a new forest "mydomain.com" -> next
Input a password -> next Follow default prompts until able to install -> Install (this may take a few minutes) Restart and log back into DC-1 as user: mydomain.com\labuser
Create an Admin and Normal User Account in Active Directory In Active Directory Users and Computers (ADUC), create an Organizationl Unit (OU) called "_EMPLOYEES" Tools -> Active directory Users and Computers -> Right-click "mydomain.com" -> new -> Organizational Unit (OU) -> _EMPLOYEES -> Ok Create a new OU named "_ADMINS" Right-click "mydomain.com" -> new -> OU -> _ADMINS -> Ok
Create a enw employee named "Jane Doe" (same password) with the username of "jane_admin" Right-click "_EMPLOYEES" -> new -> user -> fill in information -> next -> Input password (uncheck to force a password change at login for lab purposes) -> next -> Finish
Add jane_admin to the "Domain Admins" Security group Double-click "Jane Doe" -> Member of -> add -> Domain Admin -> Check Name -> Ok -> Apply -> Ok Log out/close the Remote Desktop connection to DC-1 and log back in as "mydomain.com\jane_admin" Use jane_admin as your admin account from now on
Join Client-1 to your domain (mydomain.com) From the Azure Portal, set Client-1's DNS settings to the DC's private IP address Click the Client-1 VM -> Networking -> click Client-1's NIC labled Network Interface: **** -> DNS Server -> Custom -> insert private IP of DC-1 -> Save From the Azure Portal, restart Client-1
Login to Client-1 (Remote Desktop) as the original local admin (labuser) and joing it to the domain (computer will restart) Right-click Start -> System -> Rename this PC (advanced) -> Change -> Domain -> mydomain.com -> Ok -> user "mydomain.com\jane_admin" and password -> Ok You will be prompted to restart, restart Client-1 with "mydomain.com\jane_admin"
Login to the Domain Controller (Remote Desktop) and verify Client-1 shows up in Active Directory Users and Computers inside the "Computers" container on the root of the domain Create a new OU named "_CLIENTS" and drag Client-1 into it
Setup Remote Desktop for non-administrative users on Client-1 Log into Client-1 as mydomain.com\jane_admin Right-click start -> System -> Remote Desktop -> "Select Users that can remotley access this PC" -> add -> "domain users" -> check names -> Ok -> Ok You can now log into Client-1 as a normal, non-adminstative user (This would normlly be done with a Group Policy to change multiple systems at once)
Create additional users Login to DC-1 as jane_admin Open Powershell_ise as an administrator Create a new File and paste contents of the provided script into the new File Run te script and observe the accounts being created
Open ADUC and observe the accounts in the appropriate OU Attempt to log into Client-1 with one of the accounts generated |
【本文地址】
公司简介
联系我们