Information Technology Reference
In-Depth Information
1. Log on to Server1XX as Administrator and open Server Manager, if necessary.
2. In Server Manager, install the Active Directory Domain Services Role. When it's finished, run
Dcpromo.exe.
3. Choose to install the DC in a new domain in a new forest, and name the domain
w2k8ad1XX.com .
4. Leave the forest and domain functional levels at the default Windows 2000 and Windows
2000 native, respectively.
5. When prompted, choose to install DNS. Close all open windows.
Activity 10-4: Trying to Use Unsupported Forest
and Domain Features
Time Required: 20 minutes
Objective: Attempt to create a forest trust and redirect the default Users container.
Description: You have just installed a new Windows Server 2008 domain controller. You want
to know how Windows behaves when you attempt to use unsupported features while running at
the default Windows 2000 forest and domain functional levels.
1. Log on to Server1XX as Administrator, if necessary.
2. Click Start , point to Administrative Tools , and click Active Directory Domains and Trusts .
Right click the W2k8ad1XX.com node and click Properties . Click the Trusts tab.
3. Click New Trust . Notice that your choices include three different trust types but not an
option to create a trust with another forest. In the next activity, after you raise the forest
functional level, this option is available.
4. Click Cancel twice, and close Active Directory Domains and Trusts.
5. Open Active Directory Users and Computers. Click View , Advanced Features from the menu,
if necessary, to enable this view option so that you can see the Attribute Editor for objects.
6. In the left pane, click to expand the Users container. Right-click Administrator and click
Properties .
7. Click the Attribute Editor tab. Scroll down to find the lastLogonTimestamp attribute. The
value is <not set>. The attribute exists because it's included in the schema of a Windows
Server 2008 domain, but it's not used until the domain functional level is set to at least
Windows Server 2003. Click Cancel .
8. Next, you test the feature for redirecting the default Users and Computers containers.
Open a command prompt window. First, create a new OU by typing dsadd ou
"ou=NewCompOU,dc=w2k8ad1XX,dc=com" and pressing Enter .
9. Next, redirect new computer accounts to this new OU by typing redircmp
"ou=NewCompOU,dc=w2k8ad1XX,dc=com" and pressing Enter . You should get an error
message stating that the functional level must be at least Windows Server 2003, and the redi-
rection wasn't successful.
10. Close all open windows, but stay logged on to Server1XX for the next activity.
10
Activity 10-5: Raising the Domain and Forest Functional Levels
Time Required: 10 minutes
Objective: Raise the forest and domain functional levels for the new forest.
Description: You have just installed a new Windows Server 2008 domain controller in a new
forest. You want to be able to use some features of the Windows Server 2008 functional level,
so you raise the domain and then the forest functional level.
1. Log on to Server1XX as Administrator, if necessary.
2. Open Active Directory Domains and Trusts. Right-click the W2k8ad1XX.com node and
click Raise Domain Functional Level .
 
Search WWH ::




Custom Search