How to install Active Dirctory in win2K when i already have a router in my office network?

And here is my list of support documents in regards to this:

DNS and AD Support

Note: there will be references to the W2k Support Tools. If you haven't installed them yet, do *not* install them from the CD. Go to the Service Pack download page matching your SP level (probably SP4), and download the Support Tools from there.

http://www.microsoft.com/windows2000/downloads/servicepacks/

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS:

Service Paks (W2K):

http://support.microsoft.com/?kbid=291382

The W2K DNS Document...  (65 pages..:)

http://www.microsoft.com/windows2000/docs/w2kdns.doc

Windows 2000 DNS and Active Directory Information and Technical Resources:

http://support.microsoft.com/?kbid=298448

Setting Up the Domain Name System for Active Directory:

http://support.microsoft.com/?kbid=237675

Troubleshooting Common Active Directory Setup Issues in Windows 2000:

http://support.microsoft.com/?kbid=260371

How to Verify the Creation of SRV Records for a Domain Controller:

http://support.microsoft.com/?kbid=241515

How Domain Controllers Are Located in Windows:

http://support.microsoft.com/?kbid=247811

How Domain Controllers Are Located in Windows XP:

http://support.microsoft.com/?kbid=314861

SRV Resource Records May Not Be Created on Domain Controller:

http://support.microsoft.com/?kbid=239897

DCDiag and NetDiag in Windows 2000 Facilitate Domain Join and DC Creation:

http://support.microsoft.com/?kbid=265706

HOW TO: Use the Network Diagnostics Tool (Netdiag.exe) in Windows 2000:

http://support.microsoft.com/?kbid=321708

Description of the DNSLint Utility and dnslint.exe dnload:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;321045

ADcheck, the new Active Directory diagnostic utility from NetIQ! ADcheck quickly checks domain controllers, domains, and replication.

http://www.netiq.com/adcheck/default.asp

And then, if you run into a problem, it is usually with DNS..  Here is a very good article regarding the common problems..

What are the most common DNS related Dcpromo errors? How do I fix them?

http://www.petri.co.il/troubleshooting_dcpromo_errors.htm

Good luck..!!

FE

thanks heaps FT, my first question is, what should be the DNS server in my network? should I use the new win2k server as DNS server or I should still use the DNS provided by ISP which is 203.12.160.36.

No..  you need to install DNS as a part of Active Directory..  First set up your NIC, then run Dcpromo on the server..  When it runs it will ask if you want to setup DNS..  Select Yes, and it will do the work for you..  Once it is finished, you will have to go into DNS and finish the job, placing your ISP's DNS servers in the Forwarders tab of your DNS properties window..

Oh.. one more thing..  when you setup AD (dcpromo) I suggest (highly) that you name your domain something with a .local suffix..  ex:  domainname.local

This will keep your DNS from getting confused, and asking the internic servers on the internet for name resolution within your domain...  just easier this way..

FE

Hi,

Fatal Exception made many good points, particularly naming the local domain with a .local suffix to prevent confusion.

I assume that your modem/router is your DHCP server.  You do not have to make the W2K server a DHCP server, or a DNS server for external users.  Your client computers can still receive all of their IP info from the modem/router.  If you make your client computers "join the domain" they will register their addresses with the W2K DNS server and be able to browse the network.

Earl

>>You do not have to make the W2K server a DHCP server, or a DNS server for external users.<<

But you do want to make your W2K server the DNS server for your internal users...  :)

Just wanted to clarify that so you understand that you do need to install it on the server...

FE

Absolutely correct.

*grin*

so, does it means after i setup he win2k, when all the client computer in the network try to browse microsoft.com, it go to the win2k Dns first. And also, does it means all the Ip info from the Modem/router have to go through win2k first then arrive the client computer?

Correct..  when a client wants to get outside the LAN, it will first go to your W2K server for name resolution..  DNS will 'forward' the request outside to the Internic servers then for resolution to microsoft.com..

This is where configuring the Forwarders tab comes into play...  (on your DNS console)

Not sure what you mean by Ip info...??

FE

hmmm   The 'modem/router' is your Gateway to the internet...  It will take care of your internet IP configuration...  The server must have a static IP address, and it must be in the same subnet as your Gateway...  In other words, configure your Router Gateway and your Server to have an address in the 192.168.1.x range..  Let your Router do DHCP to your clients in the same range, but scope out your Server's address so it does not get handed out to one of the clients...

FE

I mean the information from the internet, currently, the router forward the information o the client computer, does it mean in the future it will go throuth win2k first?

thanks
Yours eric

by the way, my "forward lookup Zones" looks quite simple, no like the microsoft dcpromote page http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/scenarios/config_sea_rk_dc_01.asp has.

It only contain mydomain.com, and then three sub items.
Is that ok?

:)  No, DNS is only used for name resolution...  This is the process:

1.  A client asks for a website and it goes first to your internal DNS server for name resolution
2.  Internal server DNS will forward the request to outside DNS for .com name resolution
3.  The session will be established between your client and the outside server
4.  From that point on, the session is only between your client and the outside address  (the router will forward all session info directly to the client (this is where NAT comes into play with the NAT tables)

This is a very simplified version of what transpires....!!!   Hope this helps..

I am stepping out to enjoy the beautiful spring day, but will  ck back in a while to see how you are doing...

FE

No...  It should have the 4 primary forward zones...  If it does not, then you may need to restore them...  When your clients log into the domain, it will populate with their names and IP's...

Go to this site and see if it helps with this..

SRV Resource Records May Not Be Created on Domain Controller:

http://support.microsoft.com/?kbid=239897

Good luck, will ck back in a while...

FE

Well I am back and its looks like you closed the question, so I will wish you a good Holiday Weekend, and hope that my contribution helped you with your questions..

And thanks..

FE