Information Technology Reference
In-Depth Information
1. Log on to
Server1XX
as Administrator and open Server Manager, if necessary.
2. In Server Manager, install the Active Directory Domain Services Role. When it's finished, run
Dcpromo.exe.
3. Choose to install the DC in a new domain in a new forest, and name the domain
w2k8ad1XX.com
.
4. Leave the forest and domain functional levels at the default Windows 2000 and Windows
2000 native, respectively.
5. When prompted, choose to install DNS. Close all open windows.
Activity 10-4: Trying to Use Unsupported Forest
and Domain Features
Time Required:
20 minutes
Objective:
Attempt to create a forest trust and redirect the default Users container.
Description:
You have just installed a new Windows Server 2008 domain controller. You want
to know how Windows behaves when you attempt to use unsupported features while running at
the default Windows 2000 forest and domain functional levels.
1. Log on to
Server1XX
as Administrator, if necessary.
2. Click
Start
, point to
Administrative Tools
, and click
Active Directory Domains and Trusts
.
Right click the
W2k8ad1XX.com
node and click
Properties
. Click the
Trusts
tab.
3. Click
New Trust
. Notice that your choices include three different trust types but not an
option to create a trust with another forest. In the next activity, after you raise the forest
functional level, this option is available.
4. Click
Cancel
twice, and close Active Directory Domains and Trusts.
5. Open Active Directory Users and Computers. Click
View
,
Advanced Features
from the menu,
if necessary, to enable this view option so that you can see the Attribute Editor for objects.
6. In the left pane, click to expand the
Users
container. Right-click
Administrator
and click
Properties
.
7. Click the
Attribute Editor
tab. Scroll down to find the
lastLogonTimestamp
attribute. The
value is <not set>. The attribute exists because it's included in the schema of a Windows
Server 2008 domain, but it's not used until the domain functional level is set to at least
Windows Server 2003. Click
Cancel
.
8. Next, you test the feature for redirecting the default Users and Computers containers.
Open a command prompt window. First, create a new OU by typing
dsadd ou
"ou=NewCompOU,dc=w2k8ad1XX,dc=com"
and pressing
Enter
.
9. Next, redirect new computer accounts to this new OU by typing
redircmp
"ou=NewCompOU,dc=w2k8ad1XX,dc=com"
and pressing
Enter
. You should get an error
message stating that the functional level must be at least Windows Server 2003, and the redi-
rection wasn't successful.
10. Close all open windows, but stay logged on to Server1XX for the next activity.
10
Activity 10-5: Raising the Domain and Forest Functional Levels
Time Required:
10 minutes
Objective:
Raise the forest and domain functional levels for the new forest.
Description:
You have just installed a new Windows Server 2008 domain controller in a new
forest. You want to be able to use some features of the Windows Server 2008 functional level,
so you raise the domain and then the forest functional level.
1. Log on to
Server1XX
as Administrator, if necessary.
2. Open Active Directory Domains and Trusts. Right-click the
W2k8ad1XX.com
node and
click
Raise Domain Functional Level
.
Search WWH ::
Custom Search