Solved

How to install Active Dirctory in win2K when i already have a router in my office network?

Posted on 2004-04-10
19
327 Views
Last Modified: 2010-04-13
hi all,

       In my office there are 8 computers, and sharing an Adsl connection to get the internet. We have already have a Modem/Router in the network. I want to setup a window2000 server to gain more control of the network computers, could anybody tell me how to install Active Dirctory when I already have a router running as a gateway in my network?

thanks heaps
yours eric
0
Comment
Question by:ericpc
  • 13
  • 4
  • 2
19 Comments
 
LVL 40

Accepted Solution

by:
Fatal_Exception earned 500 total points
ID: 10796623
No problem...   First you need to configure your NIC properties with a static address..  For your operation, I would just go with 192.168.1.X (just make sure it is in the same address range as your router)..  Configure the rest of the properties there also...

Then run dcpromo on your server to install AD and DNS...  

Instead of writing a column on the installation process, why don't you ck these out for help..

Proper Installation of AD and DNS (example)

http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/scenarios/config_sea_rk_dc_01.asp

Part 1: Installing a Windows 2000 Server as a Domain Controller

http://www.microsoft.com/windows2000/techinfo/planning/server/serversteps.asp
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796625
And here is my list of support documents in regards to this:

DNS and AD Support

Note: there will be references to the W2k Support Tools. If you haven't installed them yet, do *not* install them from the CD. Go to the Service Pack download page matching your SP level (probably SP4), and download the Support Tools from there.

http://www.microsoft.com/windows2000/downloads/servicepacks/

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS:

Service Paks (W2K):

http://support.microsoft.com/?kbid=291382

The W2K DNS Document...  (65 pages..:)

http://www.microsoft.com/windows2000/docs/w2kdns.doc

Windows 2000 DNS and Active Directory Information and Technical Resources:

http://support.microsoft.com/?kbid=298448

Setting Up the Domain Name System for Active Directory:

http://support.microsoft.com/?kbid=237675

Troubleshooting Common Active Directory Setup Issues in Windows 2000:

http://support.microsoft.com/?kbid=260371

How to Verify the Creation of SRV Records for a Domain Controller:

http://support.microsoft.com/?kbid=241515

How Domain Controllers Are Located in Windows:

http://support.microsoft.com/?kbid=247811

How Domain Controllers Are Located in Windows XP:

http://support.microsoft.com/?kbid=314861

SRV Resource Records May Not Be Created on Domain Controller:

http://support.microsoft.com/?kbid=239897

DCDiag and NetDiag in Windows 2000 Facilitate Domain Join and DC Creation:

http://support.microsoft.com/?kbid=265706

HOW TO: Use the Network Diagnostics Tool (Netdiag.exe) in Windows 2000:

http://support.microsoft.com/?kbid=321708

Description of the DNSLint Utility and dnslint.exe dnload:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;321045

ADcheck, the new Active Directory diagnostic utility from NetIQ! ADcheck quickly checks domain controllers, domains, and replication.

http://www.netiq.com/adcheck/default.asp
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796630
And then, if you run into a problem, it is usually with DNS..  Here is a very good article regarding the common problems..

What are the most common DNS related Dcpromo errors? How do I fix them?

http://www.petri.co.il/troubleshooting_dcpromo_errors.htm

Good luck..!!

FE
0
 

Author Comment

by:ericpc
ID: 10796651
thanks heaps FT, my first question is, what should be the DNS server in my network? should I use the new win2k server as DNS server or I should still use the DNS provided by ISP which is 203.12.160.36.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796659
No..  you need to install DNS as a part of Active Directory..  First set up your NIC, then run Dcpromo on the server..  When it runs it will ask if you want to setup DNS..  Select Yes, and it will do the work for you..  Once it is finished, you will have to go into DNS and finish the job, placing your ISP's DNS servers in the Forwarders tab of your DNS properties window..

0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796665
Oh.. one more thing..  when you setup AD (dcpromo) I suggest (highly) that you name your domain something with a .local suffix..  ex:  domainname.local

This will keep your DNS from getting confused, and asking the internic servers on the internet for name resolution within your domain...  just easier this way..

FE
0
 

Expert Comment

by:earlearle
ID: 10796698
Hi,

Fatal Exception made many good points, particularly naming the local domain with a .local suffix to prevent confusion.

I assume that your modem/router is your DHCP server.  You do not have to make the W2K server a DHCP server, or a DNS server for external users.  Your client computers can still receive all of their IP info from the modem/router.  If you make your client computers "join the domain" they will register their addresses with the W2K DNS server and be able to browse the network.

Earl
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796708
>>You do not have to make the W2K server a DHCP server, or a DNS server for external users.<<

But you do want to make your W2K server the DNS server for your internal users...  :)

Just wanted to clarify that so you understand that you do need to install it on the server...

FE
0
 

Expert Comment

by:earlearle
ID: 10796712
Absolutely correct.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796715
*grin*
0
 

Author Comment

by:ericpc
ID: 10796821
so, does it means after i setup he win2k, when all the client computer in the network try to browse microsoft.com, it go to the win2k Dns first. And also, does it means all the Ip info from the Modem/router have to go through win2k first then arrive the client computer?
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796849
Correct..  when a client wants to get outside the LAN, it will first go to your W2K server for name resolution..  DNS will 'forward' the request outside to the Internic servers then for resolution to microsoft.com..

This is where configuring the Forwarders tab comes into play...  (on your DNS console)

Not sure what you mean by Ip info...??

FE
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796863
hmmm   The 'modem/router' is your Gateway to the internet...  It will take care of your internet IP configuration...  The server must have a static IP address, and it must be in the same subnet as your Gateway...  In other words, configure your Router Gateway and your Server to have an address in the 192.168.1.x range..  Let your Router do DHCP to your clients in the same range, but scope out your Server's address so it does not get handed out to one of the clients...

FE
0
 

Author Comment

by:ericpc
ID: 10796870
I mean the information from the internet, currently, the router forward the information o the client computer, does it mean in the future it will go throuth win2k first?

thanks
Yours eric
0
 

Author Comment

by:ericpc
ID: 10796888
by the way, my "forward lookup Zones" looks quite simple, no like the microsoft dcpromote page http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/scenarios/config_sea_rk_dc_01.asp has.

It only contain mydomain.com, and then three sub items.
Is that ok?
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796908
:)  No, DNS is only used for name resolution...  This is the process:

1.  A client asks for a website and it goes first to your internal DNS server for name resolution
2.  Internal server DNS will forward the request to outside DNS for .com name resolution
3.  The session will be established between your client and the outside server
4.  From that point on, the session is only between your client and the outside address  (the router will forward all session info directly to the client (this is where NAT comes into play with the NAT tables)

This is a very simplified version of what transpires....!!!   Hope this helps..

I am stepping out to enjoy the beautiful spring day, but will  ck back in a while to see how you are doing...

FE
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796921
No...  It should have the 4 primary forward zones...  If it does not, then you may need to restore them...  When your clients log into the domain, it will populate with their names and IP's...

Go to this site and see if it helps with this..

SRV Resource Records May Not Be Created on Domain Controller:

http://support.microsoft.com/?kbid=239897


0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10796930
Good luck, will ck back in a while...

FE
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10797652
Well I am back and its looks like you closed the question, so I will wish you a good Holiday Weekend, and hope that my contribution helped you with your questions..

And thanks..

FE
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Performance in games development is paramount: every microsecond counts to be able to do everything in less than 33ms (aiming at 16ms). C# foreach statement is one of the worst performance killers, and here I explain why.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now