Domain services

Chatper 1: Introduction to Active Directory Domain Services

Cover image

Extract Active Directory Domain Services User Guide 2008.

By John Policelli

Posted by Sams

ISBN-10: 0-672-33045-8

ISBN-13: 978-0-672-33045-2

In this chapter

  • What’s New in Windows Server 2008 Active Directory Domain Services
  • System requirements for Windows Server 2008
  • Installing Windows Server 2008

Active Directory has changed significantly in Windows Server 2008. Windows Server 2008 includes a number of new features for the Active Directory Domain Services server role. The minimum and recommended system requirements for Active Directory Domain Services in Windows Server 2008 have also changed.

This chapter begins with an overview of the Active Directory Domain Services server role in Windows Server 2008. Next, details about new features in Active Directory Domain Services are discussed. Finally, the system requirements for Windows Server 2008 and the steps for installing Windows Server 2008 are covered in this chapter.

Active Directory Domain Services (AD DS) is Microsoft’s implementation of a directory service that provides centralized authentication and authorization services. AD DS in Windows Server 2008 provides a powerful directory service to centrally store and manage security principals, such as users, groups, and computers, and it provides centralized and secure access to network resources.

AD DS is one of the most important server roles in Windows Server 2008. It provides the basis for authentication and authorization for virtually all other server roles in Windows Server 2008, and is the basis for solutions. Microsoft Identity and Access. Additionally, a number of enterprise products, including Exchange Server and Windows SharePoint Services, require AD DS.

What’s New in Windows Server 2008 Active Directory Domain Services

Active Directory Domain Services in Windows Server 2008 offers a number of improvements over previous versions, including the following:

  • Audit—AD DS auditing has been significantly improved in Windows Server 2008. The enhancements provide more granular auditing functionality through four new audit categories: access to directory services, changes to directory services, replication of directory services and detailed replication of directory services. Additionally, auditing now provides the ability to log old and new values ​​of an attribute when a successful change is made to that attribute.

  • Refined password policies—AD DS in Windows Server 2008 now provides the ability to create different password and account lockout policies for different sets of users in a domain. User and group password and account lockout policies are set and enforced through a Password Configuration Object (PSO). A PSO has attributes for all of the settings that can be set in the Default Domain Policy, except Kerberos settings. PSOs can be applied to both users and groups.

  • Read-only domain controllers—AD DS in Windows Server 2008 introduces a new type of domain controller called a read-only domain controller (RODC). RODCs contain a read-only copy of the AD DS database. RODCs are covered in more detail in Chapter 6, “Managing Sites and Replication”.

  • Restartable Active Directory Domain Services—AD DS in Windows Server 2008 can now be stopped and restarted through the MMC snap-ins and the command line. Restartable AD DS service reduces the time required to perform certain maintenance and restore operations. In addition, other services running on the server remain available to satisfy client requests during AD DS shutdown.

  • AD DS Database Mount Tool—AD DS in Windows Server 2008 comes with an AD DS database mount tool, which allows you to compare data as it exists in snapshots or backups taken at different times. Mounting the AD DS database eliminates the need to restore multiple backups to compare the AD data they contain and provides the ability to review any changes to the data stored in AD DS.

System requirements for Windows Server 2008

The published system requirements for Windows Server 2008 are summarized in Table 1.1.

Table 1.1 System requirements for Windows Server 2008

Making up

Requirement

Processor

Minimum: 1 GHz (for x86 processors) or 1.4 GHz (for x64 processors) 2 GHz or faster: An Intel Itanium 2 processor is required for Windows Server 2008 for Itanium-based systems.

Recommended:

REMARK

Memory

Minimum: 512 MB 2 GB or more 4 GB (for Windows Server 2008 Standard) or 64 GB (for Windows Server 2008 Enterprise or Windows Server 2008 Datacenter) 32 GB (for Windows Server 2008 Standard) or 2 TB (for Windows Server 2008 Enterprise, Windows Server 2008 Datacenter or Windows Server 2008 for Itanium-based systems) Computers with more than 16 GB of RAM require more disk space for paging, hibernation, and dump files.

Recommended:

Maximum (32-bit systems):

Maximum (64-bit systems):

REMARK:

Disk space

Minimum: 10 GB 40 GB or more Computers with more than 16 GB of RAM require more disk space for paging, hibernation, and dump files. DVD-ROM drive Super VGA (800 x 600) or higher resolution monitor Microsoft keyboard and mouse (or other compatible pointing device)

Recommended:

REMARK:

Installing Windows Server 2008

The following procedure provides the necessary steps to install Windows Server 2008. These steps cover a complete installation of Windows Server 2008:

  1. Insert the Windows Server 2008 installation media into the DVD drive.

  2. Restart the computer.

  3. When prompted for an installation language and other regional options, make your selection and click Next.

  4. Chart 1.1

    Language and other preferences.

  5. Click Install Now to begin the installation process.

  6. Chart 1.2

    Install now.

  7. On the Select the operating system you want to install page, select Windows Server 2008 Enterprise (full installation) and click Next.

  8. Chart 1.3

    Select the operating system you want to install.

  9. Read and accept the terms of the license by checking the box; then click Next.

  10. What type of installation do you want on? page, select Custom (Advanced).

  11. Chart 1.4

    What type of installation do you want?

  12. On the Where do you want to install Windows page? click Drive Options, click New, and check the size of the drive. Then click on Apply, then on Next.

  13. The installation of Windows Server 2008 begins.

  14. Chart 1.5

    Windows installation.

  15. After the installation process is complete, the server restarts and you are prompted to change the user’s password before logging in for the first time, as shown in Figure 1.6.

  16. Chart 1.6

    Initial password change.

  17. Click OK to change the password for the Administrator account.

  18. Enter a Today01 password! in the New password field.

  19. Re-enter the password Today01! in the Confirm password field and click the arrow, as shown in Figure 1.7.

  20. Chart 1.7

    The password change window.

  21. Click OK on the password change confirmation page.

  22. Windows creates the profile for the Administrator account. Once the profile is created, the Initial Configuration Tasks window is displayed, as shown in Figure 1.8.

  23. On the Initial Configuration Tasks page, check the Do not show this window on login option; then click Close.

  24. After the Initial Configuration Tasks page is closed, Server Manager opens automatically (see Figure 1.9).

    Chart 1.8

    Initial configuration tasks.

    Chart 1.9

    Server manager.

  25. On the Server Manager page, select the Do not show me this console at logon option; then close Server Manager.

Windows Server 2008 installation is now complete.

© Copyright Pearson Education. All rights reserved.

Join the Network World communities on Facebook and LinkedIn to comment on the topics that matter to you.

Copyright © 2009 IDG Communications, Inc.