should I add server 2008 tandard as a secondary domain controller?

choy77
choy77 used Ask the Experts™
on
Hi,

I am about to setup a server 2008 standard to use as a terminal server.

I want to add the 2008 standard server to an existing 2003 sbs domain.

should I add it as a domain member or add it as a secondary domain controller as I will need to add users to the server for terminal services to work?

Cheers

Chris
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Awarded 2009
Top Expert 2010
Commented:
If it's going to be a terminal server, the recommendation is not to add Active Directory to this.
I would place it in to the domain as a member server, there is no reason they cannot authenticate against your Active Directory there should be no need to add local accounts.

Author

Commented:
Thanks!

I have added it as a member server originally but weren't sure if it was the right way to do it.

In order for users to access the server 2008 do I need to add the terminal service users to AD on ths SBS Server?

Thanks again for your prompt response I can now move forward with this.

cheers

Chris
Awarded 2009
Top Expert 2010

Commented:
Yes just add them in AD as new users.

Easiest way would be to create a security group, you can then add the users into this group and add the group to the allowed users on your TS server.
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

Author

Commented:
Also I think my server 2008 thinks its a domain controller as I started the dcpromo and then cancelled it prior to writing on here.  How do I uninstall Directory Domain Services it looks like in the roles I have already done it.

Thanks agian

Author

Commented:
it's ok,

sorted that bit.

remove roles!!  its just so much easier using windows server 2008!!

Cheers

Author

Commented:
And are yuu any good with TS?  In that I might be posting some more on here for a bit of guidance...

Thanks
Awarded 2009
Top Expert 2010

Commented:
Not too bad, will keep an eye out for your questions.

Author

Commented:
OK Cheers!
Top Expert 2012

Commented:
Windows 2008 Server makes a great terminal server.

Author

Commented:
Hi,

In the diagram attached I am not entirely sure what to put as the common name.

Please advise?

Thanks





Certificates.png
Top Expert 2012

Commented:
If you are using this as a external place for users to connect to when they are out of the office you need to have public DNS name and public records setup for this name so you can register DNS A record.
Awarded 2009
Top Expert 2010

Commented:
the common name is what ever users will use to connect with.

so for example if you have an A record for owa.yourdomain.com then this would be the common name.

Author

Commented:
Thanx!

and what about the Certificate Authority and friendly name?

Cheers
Awarded 2009
Top Expert 2010

Commented:
The friendly name can be anything you like the CA is only if you are using an Internal Certificate Authority: http://technet.microsoft.com/en-us/library/cc731509.aspx

Author

Commented:
Hi,
Have tried to create certificate and get the error - attached:


server-certificate.jpg

Author

Commented:
Is this because I havent registered the common name yet?

Author

Commented:
Thank you.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial