We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

How to install Active Dirctory in win2K when i already have a router in my office network?

ericpc
ericpc asked
on
Medium Priority
359 Views
Last Modified: 2010-04-13
hi all,

       In my office there are 8 computers, and sharing an Adsl connection to get the internet. We have already have a Modem/Router in the network. I want to setup a window2000 server to gain more control of the network computers, could anybody tell me how to install Active Dirctory when I already have a router running as a gateway in my network?

thanks heaps
yours eric
Comment
Watch Question

Systems Engineer
Top Expert 2005
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
And here is my list of support documents in regards to this:

DNS and AD Support

Note: there will be references to the W2k Support Tools. If you haven't installed them yet, do *not* install them from the CD. Go to the Service Pack download page matching your SP level (probably SP4), and download the Support Tools from there.

http://www.microsoft.com/windows2000/downloads/servicepacks/

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS:

Service Paks (W2K):

http://support.microsoft.com/?kbid=291382

The W2K DNS Document...  (65 pages..:)

http://www.microsoft.com/windows2000/docs/w2kdns.doc

Windows 2000 DNS and Active Directory Information and Technical Resources:

http://support.microsoft.com/?kbid=298448

Setting Up the Domain Name System for Active Directory:

http://support.microsoft.com/?kbid=237675

Troubleshooting Common Active Directory Setup Issues in Windows 2000:

http://support.microsoft.com/?kbid=260371

How to Verify the Creation of SRV Records for a Domain Controller:

http://support.microsoft.com/?kbid=241515

How Domain Controllers Are Located in Windows:

http://support.microsoft.com/?kbid=247811

How Domain Controllers Are Located in Windows XP:

http://support.microsoft.com/?kbid=314861

SRV Resource Records May Not Be Created on Domain Controller:

http://support.microsoft.com/?kbid=239897

DCDiag and NetDiag in Windows 2000 Facilitate Domain Join and DC Creation:

http://support.microsoft.com/?kbid=265706

HOW TO: Use the Network Diagnostics Tool (Netdiag.exe) in Windows 2000:

http://support.microsoft.com/?kbid=321708

Description of the DNSLint Utility and dnslint.exe dnload:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;321045

ADcheck, the new Active Directory diagnostic utility from NetIQ! ADcheck quickly checks domain controllers, domains, and replication.

http://www.netiq.com/adcheck/default.asp
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
And then, if you run into a problem, it is usually with DNS..  Here is a very good article regarding the common problems..

What are the most common DNS related Dcpromo errors? How do I fix them?

http://www.petri.co.il/troubleshooting_dcpromo_errors.htm

Good luck..!!

FE

Author

Commented:
thanks heaps FT, my first question is, what should be the DNS server in my network? should I use the new win2k server as DNS server or I should still use the DNS provided by ISP which is 203.12.160.36.
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
No..  you need to install DNS as a part of Active Directory..  First set up your NIC, then run Dcpromo on the server..  When it runs it will ask if you want to setup DNS..  Select Yes, and it will do the work for you..  Once it is finished, you will have to go into DNS and finish the job, placing your ISP's DNS servers in the Forwarders tab of your DNS properties window..

Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
Oh.. one more thing..  when you setup AD (dcpromo) I suggest (highly) that you name your domain something with a .local suffix..  ex:  domainname.local

This will keep your DNS from getting confused, and asking the internic servers on the internet for name resolution within your domain...  just easier this way..

FE
Hi,

Fatal Exception made many good points, particularly naming the local domain with a .local suffix to prevent confusion.

I assume that your modem/router is your DHCP server.  You do not have to make the W2K server a DHCP server, or a DNS server for external users.  Your client computers can still receive all of their IP info from the modem/router.  If you make your client computers "join the domain" they will register their addresses with the W2K DNS server and be able to browse the network.

Earl
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
>>You do not have to make the W2K server a DHCP server, or a DNS server for external users.<<

But you do want to make your W2K server the DNS server for your internal users...  :)

Just wanted to clarify that so you understand that you do need to install it on the server...

FE
Absolutely correct.
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
*grin*

Author

Commented:
so, does it means after i setup he win2k, when all the client computer in the network try to browse microsoft.com, it go to the win2k Dns first. And also, does it means all the Ip info from the Modem/router have to go through win2k first then arrive the client computer?
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
Correct..  when a client wants to get outside the LAN, it will first go to your W2K server for name resolution..  DNS will 'forward' the request outside to the Internic servers then for resolution to microsoft.com..

This is where configuring the Forwarders tab comes into play...  (on your DNS console)

Not sure what you mean by Ip info...??

FE
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
hmmm   The 'modem/router' is your Gateway to the internet...  It will take care of your internet IP configuration...  The server must have a static IP address, and it must be in the same subnet as your Gateway...  In other words, configure your Router Gateway and your Server to have an address in the 192.168.1.x range..  Let your Router do DHCP to your clients in the same range, but scope out your Server's address so it does not get handed out to one of the clients...

FE

Author

Commented:
I mean the information from the internet, currently, the router forward the information o the client computer, does it mean in the future it will go throuth win2k first?

thanks
Yours eric

Author

Commented:
by the way, my "forward lookup Zones" looks quite simple, no like the microsoft dcpromote page http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/scenarios/config_sea_rk_dc_01.asp has.

It only contain mydomain.com, and then three sub items.
Is that ok?
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
:)  No, DNS is only used for name resolution...  This is the process:

1.  A client asks for a website and it goes first to your internal DNS server for name resolution
2.  Internal server DNS will forward the request to outside DNS for .com name resolution
3.  The session will be established between your client and the outside server
4.  From that point on, the session is only between your client and the outside address  (the router will forward all session info directly to the client (this is where NAT comes into play with the NAT tables)

This is a very simplified version of what transpires....!!!   Hope this helps..

I am stepping out to enjoy the beautiful spring day, but will  ck back in a while to see how you are doing...

FE
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
No...  It should have the 4 primary forward zones...  If it does not, then you may need to restore them...  When your clients log into the domain, it will populate with their names and IP's...

Go to this site and see if it helps with this..

SRV Resource Records May Not Be Created on Domain Controller:

http://support.microsoft.com/?kbid=239897


Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
Good luck, will ck back in a while...

FE
Fatal_ExceptionSystems Engineer
Top Expert 2005

Commented:
Well I am back and its looks like you closed the question, so I will wish you a good Holiday Weekend, and hope that my contribution helped you with your questions..

And thanks..

FE
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.