Suppose you have one domain controller in your network. In that case, you may wonder how to add a new domain controller to an existing domain to avoid discontinuity in case of server failure. When you add new domain controllers to an existing domain, they replicate the active directory database with each other. If the primary domain controller fails, you can use the second domain controller to respond to authentication requests and perform the DC’s tasks. Overall, multiple domain controllers increase fault tolerance and load balancing. The following article will elaborate on the steps required for adding a new domain controller to an existing domain in Windows Server 2022.

To demonstrate it in detail, I have two servers (SR1-technig and SR2-technig) running Windows Server 2022. The SR1-technig server acts as a primary server and is also a domain controller. Since the SR1-technig is already a domain controller, I will add the new domain controller in the SR2-technig server and make both SR1-technig and SR2-technig domain controllers.

Step One: Join your server in the domain

At first, I will join the SR2-technig (The second server) to the domain and make it a member of the primary domain controller. To do that, I need to assign the IP address of the existing domain controller to the DNS of the second server that I want to make a domain controller.

1. Open Server Manager, and click on the Local Server option on the left-hand side.
2. In the Local Server window, click on IP Address (Ethernet)

3. Double-click on the network to that you are connected.
4. In the Ethernet Status window, click on Properties.

5. Double-click on Internet Protocol Version 4.

6. Set your DNS Server address manually to the IP address of the domain controller you want to join. Click OK.

7. Close the windows and return to the local server window.
8. In the Local Server Window, click on WORKGROUP to join a domain.
9. On the system properties, click on the Change button.
10. Check the domain box, write the domain name you want to join, and click OK.

11. Provide the credential and click ok.
12. Restart your computer.

Step Two: Install Active Directory Domain Services

In the second step, you need to install the Active Directory Domain Services on the server you want to promote to the domain controller.

1. Click on Manage > Add Roles and Features in the server manager window.
2. Click next on the before you begin Wizard.
3. Select the installation type and click next: Role-based and Feature-based installation.
4. After selecting the destination server, click next.
5. Find the Active Directory Domain Services Roles and, select it, click Add features.

6. Click on the Next button till the installation button activates.
7. Finally, confirm the installation and click on the Install button. The installation takes a few seconds.

Related: How to Install Active Directory Using PowerShell on Windows Server 2022

Step Three: Promote the Server to Domain Controller

Now that your server is a member of the domain controller and you have installed the Active Directory Domain Services roles in your server. It is time to promote or add the new domain controller to the existing domain.

1. In the Server Manager screen, click on the notification flag next to the Manage.
2. Click on the Promote this Server to Domain Controller to open the DC’s promotion wizard.

3. In the Deployment Configuration wizard, select the deployment operation. I CHOOSE THE FIRST OPTION since I add a new domain controller to an existing domain.

4. Specify the domain information: you can click on the Select button next to the text box, select your domain name, and click Ok. If you are already a member of the domain controller, it automatically finds the domain name.
5. After selecting the domain name, click on the Change button to provide credentials to perform the task. Click next.

6. Specify the domain controller capabilities. The DNS server, Global Catalog, and Site Name are already selected by default. I provide the Active Directory Services Restore Mode password and click next.

7. Click the next button to pass the DNS options wizard.
8. Specify from which domain controller it should replicate the Active Directory database, and click next.

9. Although I can change the location of the AD DS database and log files, I keep its default location and click next.
10. After reviewing the configuration, click Next.
11. The Prerequisites Check verifies the prerequisites for domain controller operation. If the prerequisites checks passed successfully, click on the Install button.
12. The installation will complete after a few seconds, and your server will restart automatically.

How to check if the new domain controller has been added?

After installing the Active Directory Domain Services and promoting it to the domain controller, you can check whether the domain controller has been added successfully or not.

1. In the server manager window, click on Tools management.
2. Click on Active Directory Users and Computers.
3. Expand the domain and click on the Domain Controllers Organizational Unit.

You will see the domain controller(s) in your current domain.

Conclusions

To conclude, we talked about the steps required for adding a new domain controller to an existing domain in Windows Server 2022. You can share your thoughts and questions in the comment section of this page.

The post How to Add New Domain Controller to Existing Domain appeared first on TECHNIG.

A child domain is a subdomain of another domain in a tree which we call the parent domain. In the active directory hierarchical structure, the subdomain segmentation helps partition the active directory into smaller segments. It is useful when we have a sub-business design and geographical differences. Put it another way, if, for example, company.com is a domain, we can create a subdomain CA.company.com for that larger domain. This subdomain has its own domain controller and administrative boundary for its users and computers. With this brief illustration in mind, this article aims to cover how to create a child domain in Windows Server 2022 with a step-by-step approach and visual illustration.

Steps to Create a Child Domain in Windows Server 2022

To create a child domain, we need to install the Active Directory Domain Services (AD DS) role on our Windows Server 2022 Machine. Then, following its post-installation task, we create a child domain in an existing domain. Thus, to keep the article simple and easy to understand, we will accomplish the abovementioned two processes in two separate sections. First, we will install the AD DS role in our Windows Server 2022. Then, we will go through the post-installation process and create our new child domain.

To install AD DS and create a forest using Windows PowerShell, read Install Active Directory On Windows Server 2022 Using PowerShell article.

Install AD DS role in Windows Server 2022

To install the AD DS role using Server Manager, follow the steps below.

1. Open the Server Manager from the Start Menu.
2. On the Server Manager console, click on Manage and select Add roles and features.

3. Click Next on the first window.
4. Choose the first option on the Installation Type window. Click Next afterward.

5. Select the server on which you install the AD DS and click Next.

6. Check out the Active Directory Domain Services checkbox on the Server Roles window. Then, click on Add Features button on the pop-up window. Finally, click on Next.

7. Let the Features window as its default, and click Next.
8. Likewise, click Next on the AD DS window.
9. On the Confirmation window, check out the Restart Server option, so it restarts the machine automatically if it needs to. Then click on the Install button. Wait for a few moments until it finishes the installation process.

10. In the last step, once the AD DS installation completes, click on the Close button to close the window.

To this point, we have installed the AD DS in our Windows Server 2022 Machine. Now, let’s move forward and go with the post-installation tasks and create our child domain.

Create a Child Domain in Windows Server 2022

Now that we have installed the AD DS role in our Windows Server 2022 machine, we can create a child domain in its post-installation task. Follow the steps below to do so.

1. On the Server Manager console, click on the flag notification. Then, click on Promote this server to a domain controller option.

2. On the Deployment Configuration window, check out the Add a new domain to an existing forest option. Select the Child Domain as illustrated in the below picture. Then, enter the parent domain name in the relevant box, or use the Select button to select from the existing domains. Finally, enter the Child Domain Name in its relevant textbox. The child domain name must be single-labeled. Use the Change button to change the credential if needed. Once everything is set, click on Next.

3. Set the Domain functional level and Global Catalog settings. Then, provide the DSRM password and click on Next.

4. Click Next on the DNS Options window.

5. Verify the NetBIOS name and click Next to continue.

6. Set the AD DS database and other files’ paths or leave it as its default. Click on Next afterward.

7. Read the details of your setting on the Review Options window. If everything is set correctly, click on Next to continue.

8. Click on Install on the Prerequisite Check window once it has passed the requirements. Wait for a moment until it finishes the installation task. It automatically restarts during the installation operation.

That is it! We have created our child domain throughout the above steps.

Conclusion

To sum up this article, we first explained briefly what a child domain is and where we use it. Then, we discussed the steps to install Active Directory Domain Services in Windows Server 2022. Finally, in a separate section, we promoted the server to a domain controller and created the child domain.

We are happy to be effective throughout our articles. Please do not hesitate to share your thoughts and questions in the comment section.

The post How to Create a Child Domain in Windows Server 2022 appeared first on TECHNIG.

The process of install and configure Active Directory in Windows Server 2016 is the same as Windows Server 2012 and R2. If you already know the installation and deployments of Active Directory with old Windows Server, you can install and deploy Active Directory Windows Server 2016 as well.

Before you begin to deploy Active Directory Windows Server 2016, you must know the basic requirements for Active Directory. First of all, install a clean Windows Server and set static IP address, assign the server name and enable or disable Windows features you need to have on Windows server.

• Windows Server Initial Configuration: It shows and demonstrates all necessary configuration that requires an Active Directory Server.

Deploy Active Directory Windows Server 2016 – Technig

This is the Windows Server 2016 Server Manager Dashboard. I have installed ADDS, DHCP, DNS and other services.

Install and Configure Active Directory in Windows Server 2016

To install and configure Active Directory Domain Services in Windows Server 2016, try to read the below step by step guide to install and configure active directory. It is a clear pictorial guide to deploy active directory Windows Server 2016.

• Install and Configure Active Directory in Server 2012 R2: It’s work the same for Windows Server 2016.

If you don’t like to read the article, just watch the below short video tutorials about installing active directory domain services in Windows Server 2016.

That’s all, short and simple guide to install and deploy active directory in Windows Server 2016. If you have any question, don’t hassle yourself, try to ask us through the comments section. And follow the below topics to know more about Windows Server and Active Directory Domain Services.

MCSA Complete Lab Manual Guide:

You might need to know more about Windows Server and MCSA certification. Follow this “MCSA Lab Manual Articles For Windows Server 2012 R2” article.

What’s New in Windows Server 2016:

The content in this section describes what’s new and changed in Windows Server® 2016 Technical Preview. The new features and changes listed here are the ones most likely to have the greatest impact as you work with this release. Read more on what’s new in Windows Server 2016.

What’s New in Active Directory Domain Services Windows Server 2016:

The following new features in Active Directory Domain Services (AD DS) improve the ability for organizations to secure Active Directory environments and help them migrate to cloud-only deployments and hybrid deployments, where some applications and services are hosted in the cloud and others are hosted on premises. Read more on what’s new in Active Directory Domain Services Windows Server 2016.

The post Install and Configure Active Directory in Windows Server 2016 Step by Step Guide appeared first on TECHNIG.

The users in a network using a different operating system like Windows, Mac OS, and Linux. One of the most popular is Windows 10, the latest client-side Microsoft operating system. Here we just try to join Windows 10 to domain server 2016. The process of joining a PC to a domain name is the same. You can use this article for other operating systems as well.

Before you join Windows 10 to domain server 2016. You must check the network connectivity between Windows Server and Windows 10 client. You might have a DHCP server that provides IP address for network clients. If you don’t have a DHCP server or router, you need to configure IP address manually for client machines.

Related: DHCP configuration guide on Windows Server and Cisco Router.

The process to join a Windows 10 to Domain Server 2016.

1. Set a unique name for the client computer.
2. Check the IP address and network connectivity.
3. Create a user in the Active Directory.
4. Join Windows 10 to Domain.
5. Restart client computer.
6. Log in with the domain account.
7. Customize your Windows desktop environment.

That’s all you need to apply for joining a Windows 10 PC to a domain Windows Server 2016 or another version of Windows server.

Join Windows 10 to Domain Server

In a short video, we describe how to join Windows 10 PC to a domain Windows server. But I just note some important commands and parts here. Joining a PC to the domain is not complicated but sometimes it doesn’t join easy. Anyway, if you have any issue with joining client PC to the domain, comment us your issue.

Read the important notes about how to join Windows 10 to domain Windows server 2016. The notes are important parts, if you face any problem, feel free to ask us.

1. Change Client Computer Name

Before joining a client computer to a domain in the network, change the default name. The default name is name generated when the Windows installed on the system. It is a long name and hard to read. Changing to a short and readable name helps you find the client on the network easy.

1. To change the computer name, type “sysdm.cpl” in Run to open the System Properties.
2. After changing the computer name, once restart your computer to apply the changes.

On Windows 10 you can change the computer name from the different section. Changing computer name with the command line, Windows settings and the above step.

2. Check IP Address and Connectivity

A computer identified by its IP address on the network. If the IP address is not configured correctly, the system will not recognizable. So checking the computer IP address is necessary for connecting to a domain server.

1. To check the IP address of a system type “ipconfig” command on command prompt. It shows the computer IP address, subnet mask, and default gateway.

2. To change IP address just type “ncpa.cpl” on Run top open Network Connection Settings. You can change the IP address manually from network connection settings or with command line “netsh” commands. Windows has many options to change the IP address. The easy way is using the GUI for newbies.

Anyway, right-click the network adapter (Ethernet x) then select Properties. On the properties select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Now set the IP address manually on the Internet Protocol Version 4 (TCP/IPv4) Properties.

That’s the GUI option for configuring an IP address on Windows system. There are command options for command prompt and Powershell. Windows PowerShell has its own cmdlet for network configuration. The other options are the network shell (netsh) command prompt command. The following articles focus on configuring Windows IP address with PowerShell and Netsh.

• Configure Windows IPv4 Networking with Netsh,
• Configure IP Address with PowerShell,

3. Create a user in the Active Directory

An Active Directory user account allows a computer to join to the domain and works as the workstation of a network. Creating Active Directory objects performs from AD on Windows Server.

• Create a user account in Active Directory.
• Create User Account Using PowerShell.

That’s all necessary configurable options you need to know about joining Windows 10 to domain server 2016 Active Directory. Hope you enjoy the article. Please comment us the related issue with Windows 10 and Server configuration.

The post How to Join Windows 10 to Domain Windows Server appeared first on TECHNIG.

In Windows Server 2008 R2 by default the Active Directory Recycle Bin is disabled. You can not recover the deleted objects without Active Directory Recycle Bin enabled. If you want to secure Active Directory environment from deletion of nonrecoverable objects, first you should enable Active Directory Recycle bin. To perform this action, the AD forest functional level must set to Windows Server 2008 R2.

Related: Enable AD Recycle Bin in Server 2012 and 2016 using Active directory administrative center

Enable Active Directory Recycle Bin with PowerShell

Let’s do it step by step with recommended method of Microsoft using Windows Power Shell command. To do so run PowerShell and import Active Directory module. Type ‘Import-Module ActiveDirectory’ and press enter like the screenshot.

Now type the following PowerShell command to enable Recycle Bin in active directory.

Enable-ADOptionalFeature -Identity ‘CN=Recycle Bin Feature,CN=Optional Features,CN=Directory
Service,CN=Windows NT,CN=Services,CN=Configuration,dc=one,dc=local’ -Scope ForestOrConfigurationSet -Target one.local

Do it the same as screenshot and type Y in order to accept it.

Note: Remember this action is not reversible, you cant not disable it once you have been enabled in active directory environment.

So good, the Active Directory Recycle Bin has been enabled successfully. The next step is to know how to recover deleted objects.

Recover Deleted Objects of Active Directory Using PowerShell

To recover the deleted objects, you must see the list of deleted objects with ‘Get-ADObject‘ PowerShell Command. Type the following command to display all removed objects.

Get-ADObject -Filter {(isdeleted -eq $true) -and (name -ne “Deleted Objects”)} -includeDeletedObjects

You see the deleted active directory objects. Now you can restore it with ‘Restore-ADObject‘ command.

Now try to restore with the below command.

Get-ADObject -Filter {(isdeleted -eq $true) -and (name -ne “Deleted Objects”)} -includeDeletedObjects | Restore-ADObject

That is all. Go to active directory users and computers console, then you will see the restored object.

Hope this article will help you to restore the deleted Active Directory Objects quickly in the Active Directory environment.

The post How to Enable Active Directory Recycle Bin with PowerShell and GUI? appeared first on TECHNIG.

The brain of network has a huge responsibilities for any system administrator. From day to day complicated Active Directory management to performing the networking tasks. All must done clearly to keep the engine of your network warm and have peace of mind. The Softerra provide an Active Directory auto management tools (Adaxes) that empowering system admins with it’s powerful tools to manage Active Directory faster and easier. 

Adaxes Active Directory Auto Management Tools

In this review post I want to write about pros & cons of Adaxes, Active Directory Auto management, monitoring and administration tools from Softerra Ltd. It’s very important to know how Adaxes can help IT professionals to automating Active Directory managements in their daily duties, while the builtin AD management tools are pretty powerful in Windows servers.

I can say the Adaxes is a replacement solution for ADUC as Active Directory management tools. It has it’s own GUI central interfaces, Web interfaces, and PowerShell cmdlets for managing Active Directory.

Create and Manage AD Objects with Adaxes

One of the most used section of Active Directory hierarchy is Active Directory Users and Computers. System admins are using dsa.msc to create active directory objects such as user, OU, Group, and etc. So let’s do how easily Adaxes can manipulate and mange AD objects.

1. To create an object, just right click main domain and select New then chose the exact AD objects you want to create. The below screenshot show the process of create an Organization Unit using Adaxes

2. On the Organizational Unit Information page, fill out all OU information and click Finish to create the OU.

That’s it, the OU object has created successfully. Do the same process for creating other objects and fill out with exact information.

I found some great options on user account creation. These are really interesting and necessary features that an admin need to access them quickly.

• Password Policy Settings
• Password Generator

The View Password Policy link allows you see what password policies are applied currently for user account password. And the Generate option help your generate a complex password quickly. When you attempt to change a user password, you have the auto password generator here as well.

Note: For security reason it generate completely complex password that is hard to remember. But you should select the User must change password at next logon option to force the user for changing the password at first logon attempt.

Moving Objects Between OUs in Multiple Domains

Like Active Directory Users and Computer, you can easily drag and drop AD objects for moving objects between OUs. AD objects are easily moving between OUs while you are working with multiple domains using Adaxes. Because the Adaxes support managing multiple Active Directory domains from different forests over multiple geographical network locations.

Edit and Deleting Objects with Adaxes

In case of changing and editing Active Directory objects, simply right click the object you need to edit and select Add/Modify Property or use the shortcut keys (Ctrl+Shift+P).

Navigate to find the AD object attributes or type the name of property. The search option is better feature to find the exact property among these huge names.

That’s it, editing the attributes of Active Directory objects with Softerra Adaxes, the Active Directory uuto management tools. All works perfectly. So let’s delete the objects.

Deleting Active Directory objects are easy, but recovering the accidental deletion objects are a bit difficult. Specially when you are working with Windows Server 2008. But in Windows Server 2012 and Server 2016 the Active Directory recycle bin came’s with easier option. You can simply enable Active Directory Recycle Bin through Active Directory Administrative Center.

Note: 🙁  In Softerra Adaxes Active Directory auto management tools, I could’t found Active Directory Recycle Bin. I hope we have this on the next coming update.

Monitoring and Maintaining Active Directory Activities

Monitoring Active Directory with Adaxes is easily perform through Adaxes administrator console and Web interface. The Administrative console shows a clear log reports of Active Directory modification and changes activities. A simple way to find out what has been changed inside AD.

Mostly monitoring occurs when you need to have a clean report’s of Active Directory for documentation or understanding what is going on. This section is very important for system admins.

Adaxes Web Interface for Administrators and Help Desk

I find the web interface for administrator and help desk very helpful. Exactly when remotely moderating the Active Directory. To open the Adaxes Web Interfaces tools, navigate to Start Menu > All Apps and expand the Softerra Adaxes 2015 to see all Web Interfaces tools.

Select Web Interface for Administrators and login with domain admin account. See the below screenshot Adaxes Web Interface for Administrators.

You can simply do most common task of Active Directory User and Computers remotely from any domain joined network machines through web browser.

The Search tab of Web interface is for searching and exploring the Active Directory objects. Type the name a user to find or search them alphabetically.

The most valuable section in Web Interface is Reports tab which make a quick and full detailed reports of user account status, general task, password policy settings and etc. Amazingly perform all reporting tasks just by one click.

To maintain AD objects, search, find and edit the objects attributes and properties. Works the same as Administrative tools.

The other web interfaces are Web Interface Customization and Web Interface Self Services. Both are accessible remotely for AD self services and customizing the Web interfaces settings. For instance enabling automatic logon of Web Interface Consoles.

It’s where you can customize your web interfaces environment for moderating and managing Active Directory.

Adaxes Administration Console

In the Adaxes administration console you find out many useful Active Directory tools under Configuration. The tools are Security Roles, Business Rules, Property Patterns, Custom Commands, Scheduled Tasks, Password Self-Service, and Cloud Services that all playing it’s rules as AD management.

From Security Roles to Cloud Services allow’s you to manage Active Directory in a simple and quick ways. It’s not completely auto but most features are designed to not be a time consuming AD configuration tasks.

You can edit the builtin rules or quickly create new one for each roles. As a task automation features of Adaxes Administrator Console is Scheduled tasks. It exactly works like Windows scheduled tasks that let you run and automate the Adaxes actions quicker and faster.

The Password Self Services related to password policy of Windows group policy. It’s a shortcut way to create a password policy for users and groups using Password Self Service feature. The amazing option is specifying security questions, but the others feature are the same as Windows password policy settings. It would be better to have more options to make group policy management with Adaxes.

Adaxes PowerShell Module for Active Directory

Like AD PowerShell module, the Adaxes has it’s own Active Directory PowerShell module which works the same as AD PowerShell commands.

Open Windows PowerShell and import Adaxes AD module with “Import-Module Adaxes“ command. You can use the Adaxes PowerShell module interface as well, but the color of Windows PowerShell interface is better.

To check out the Adaxes PowerShell cmdlets for AD, type “get-command -module Adaxes“. There are Add, Get, Set, New, Remove, Rename, Enable, Disable, Move, and Unlock cmdlets ready to manage Active Directory objects using PowerShell.

Working with PowerShell command line is easy like builtin Windows PowerShell. To manage AD objects with PowerShell follow the PowerShell articles.

Conclusion

I’m sure using Softerra Adaxes would completely sufficient a system admin in small and large network environments. It has great features that make Active Directory management quicker and faster. The web interfaces for administrators are really great and useful tools for remotely managing Active Directory.

If you are looking for Active Directory management tools that make your work faster and easier, I recommend you to use Soterra Adaxes Active Directory auto management tools. It’s also Gold award wining of WindowsNetowrking website which is the hive of most professional and experienced network and system admins.

Download the 30-day evaluation period of Softerra Adaxes and learn more about licensing and price information. Softerra provide you full access to Adaxes and technical support during the 30-days for free.

The post Adaxes Active Directory Auto Management Tools – Review appeared first on TECHNIG.

How to create User Account using PowerShell in Active Directory. I’m using Windows Server 2012 R2, but this article will work with Windows Server 2008 to Server 2012 R2 or Server 2016.

A simple description about PowerShell. Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to COM and WMI, enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and CIM enabling management of remote Linux systems and network devices.

So if you have problem with creating objects in Active Directory with GUI, read the article: How to Create Objects in Active Directory?

Create User Account using PowerShell

In Windows Server run PowerShell and import Active Directory module or run Active directory module for Windows PowerShell from Tools in Server manager dashboard.

Type ‘Import-Module activedirectory’ and press enter to import the AD PowerShell module. This action will load all Active Directory commands for using in the current PowerShell window.

If you close the current PowerShell window, the Active Directory module will also exit and unload from PowerShell.

Type Get-Module and press enter to insure that module loaded successfully.

To see and list all active directory commands (CmdLet), just type ‘Get-Command -Module activedirectory’ and press enter then once explore all commands.

We need to create User Account with New-ADUser command. Type the below command and press enter.

PS C:\> New-ADUser -Name “Mehdi Hussaini” -GivenName Mehdi -Surname Hussaini -SamAccountName Mehdi -UserPrincipalName Mehdi@technig.local -AccountPassword (ConvertTo-SecureString -AsPlainText “PassW0rD” -Force ) -Enabled $true -ChangePasswordAtLogon $true

To get help for a command type ‘Get-Help New-ADUser -full’ or –example.  The –full option will show you by details but the –example just show some examples for command.

To see if the user (Hehdi) has created or not, simply type ‘Get-ADUser -Identity Mehdi’ and press enter.

For getting full information about a user, type ‘Get-ADUser -Identity -Properties *’ then press enter.

That’s all, simple and easy. But it’s better to know the below Active Directory CmdLets for managing user account also.

1. To enable an Account type: ‘Enable-ADAccount -Identity mehdi’. This will enable the disabled user account immediately.

2. Disable an Account: ‘Disable-ADAccount -Identity Mehdi’

3. Reset the password of an account.

4. Remove a User Account: ‘Remove-ADUser -Identity Mehdi’

OK. Now you can create, modify, enable, disable, and delete a user account from active directory with Windows PowerShell within Windows Servers. Hope you enjoy to create user account using PowerShell

The post How to Create User Account Using PowerShell? appeared first on TECHNIG.

Related to creating objects in AD, learn how to  create and manage Group Accounts in Active Directory within Windows Servers. You can perform the tasks on all Windows Servers from 2008 to 2012 R2. Using PowerShell to manage Active Directory is not hard, if you try to understand the PowerShell CmdLets structures.

Manage Group Accounts in Active Directory Using PowerShell

The easy way to learn PowerShell is to perform some simple network management tasks with PowerShell. Specially when you are working with Active directory, Exchange Server, and other Microsoft products.

Create and Mange Group Accounts in Active Directory

In Windows Server run PowerShell and load active directory module. Type ‘Import-Module activedirectory’ and press enter.

To see the result, type ‘Get-Module’ and press enter.

Find the related PowerShell CmdLets for group account, type ‘Get-Command *ADGroup*’ and press enter.

Create a group with ‘New-ADGroup’

PS C:\> New-ADGroup -Name “Sales Team” -DisplayName “Sales Members” -SamAccountName SalesTeam -GroupScope global -GroupCategory Security -Description “Technig Products Sales Team”

To see the group account attributes or Properties type ‘Get-ADGroup -Identity salesteam -Properties *’ and press enter.

You can add users to a Group with ‘Add-ADGroupMember -Identity Salesteam -Members Nigar,Mahdi’ command.

Now I have added users Nigar and Mahdi to SalesTeam group.

The ‘Get-ADGroupMember salesteam’ will show you all members of SalesTeam group.

Remove a user from group, type ‘Remove-ADGroupMember -Identity SalesTeam -Members Mahdi’ and press enter. When ask you Are you sure you want to perform this action? Just type Y then press enter to accept it.

Do the same to remove a group with  Remove-ADGroup command. If you want to modify a group attributes, do it with Set-ADGroup command.

OK friends that’s all about How to Create and Manage group accounts in active directory. You may need to read How to create User Account with PowerShell in Active Directory or you have any question? just ask trough comment.

The post Manage Group Accounts in Active Directory using PowerShell appeared first on TECHNIG.

Related to Windows Server 2012 R2 articles, I’m going to show you how to create object in Active directory using the graphical interface of Active directory Users and Computers.

Active Directory objects represent the physical entities that make up a network. An object is an instance of storage of a class. A class is defined in the Active Directory schema as a specific set of mandatory and optional attributes — that is, an attribute can be present in an object in Active Directory only when that attribute is permitted by the object’s class. Classes also contain rules that determine which classes of objects can be superior to (parents of) a particular object of the class. Each attribute is also defined in the directory schema. The attribute definitions determine the syntax for the values the attribute can have. Read more

There are many ways to open the Active Directory Users and Computers for create object. But the simple and easy is to type dsa.msc an press enter in Windows Run. (Windows+R)

You see the Active Directory Users and Computers graphical interface. If you don’t know how to install AD in Windows Server 2012 R2, read the step by step installation and configuration here.

1.  Let’s create our first object Organizational Unit (OU) the container of objects in Active Directory.

To create an OU, right click the domain name then New and click Organizational Unit.

Type the name of organizational unit and click OK to create the OU. Here I have create Marketing Team.

You can create Organizational Unit as much as you need in your Network.

2. So try to create User object in Marketing Team. Just click the icon’s of User or right click domain name then New and click User.

In the New Object User window, fill out the form with User information like First name, Last name, and User Logon name then click Next.

Set a password for new user and select user must change password at next logon then click Next.

Just check to insure that everything is correct and click Finish.  Now you must see the user in marketing team OU.

3. Now the last one is Creating a Group.

Click the group icon and fill out the group form with correct information. Leave the group scope and group type by default and click OK.

There are all created objects, OU=Marketing Team, User=Ali Sina, and Group=Marketing Group in the Active Directory.

The post How to Create Object in Active Directory? appeared first on TECHNIG.

The step by step guide to Install Active Directory in Windows Server 2012 and 2012 R2. Installation and configuration of AD DS in Windows Server 2012 R2 and Windows Server 2016 is bit different from earlier Windows Servers. Dcpromo.exe command has been removed and added some new features like metro, dashboard, and server manager with new style, but the core configuration and Installation is the same.

How to Install Active Directory?

So let’s start to install Active Directory rule and promote the server to Domain Controller.

1. Click the Server Manager to open it.

2. Here you see the Server manager dashboard. Now go to Manage tab and click Add Roles and Features.

3. Just click Next in Add Roles and Features Wizard page.

4. Let the default Role based or feature base installation has selected and click Next.

5. In the Select destination server page, select the server you want to install AD and click Next.

6. Now select the Active Directory Domain Services from Roles list in order to install it. When prompt to add the required features for Active Directory Domain Services within a new window, click Add Features.

7. Now the Active Directory Domain Services has been selected and ready to install. Just click Next.

8. Leave the Windows Features page by default and click Next.

9. Now, you may need to read some information about Active Director domain service. In this page read once and click Next.

10. In the Confirm Installation selections page click Install to begin installation of AD DS.

Be patient, the installation process will take a few minutes to complete.

#2. Promote Server to Domain Controller

1. When the AD DS installation has complete. click the Promote this server to a domain controller.

2. The Active directory Deployment Configuration page will open.

3. In this window select add a new forest and type your domain name in the Root domain name field then click Next. I have chose the domain name Technig.local.

4. Leave the Domain Controller Options by default, just type and password for Directory services restore mode (DRSM) password and click Next.

5. Ignore the delegation for DNS server warning and click Next.

6. On the Additional Options, system will create a NetBIOS name according to your domain name. In this window do nothing and click Next.

7. You can change the default directories for Database folder, Log files, and SYSVOL folder, but in test lab leave it by default and click Next.

8. Finally on the Review Options page once check and review all option to insure and click Next.

9. Once the system has checked prerequisites features for Active Directory, click Install and ignore the DNS delegation warning again.

System will restart automatically when the installation has complete successfully.

You will see the installed roles from Tools tab of Server Manager dashboard.

How to Install Active Directory on Windows Server 2016 – Video Tutorial

That’s all. Ask your question if you have any problem.

The post Install Active Directory in Windows Server 2012 R2 appeared first on TECHNIG.