Active Directory and DNS Setup on Windows Server 2003 for the ...

<strong>Active</strong> <strong>Directory</strong> <strong>and</strong> <strong>DNS</strong> <strong>Setup</strong> on Windows Server 2003
for the Applied CS Labs – Clarkson University
Preparation:
- Static IP address reserved <strong>and</strong> set on the future Domain Controller.
- The following Firewall Exceptions are open
Name of Service Port Number Protocol Scope
BINL 4011 UDP 10.0.0.0/255.255.255.0
<strong>DNS</strong> 53 UDP 10.0.0.0/255.255.255.0
<strong>DNS</strong> 53 TCP 10.0.0.0/255.255.255.0
File <strong>and</strong> Printer Sharing 139 TCP My network (subnet) only
File <strong>and</strong> Printer Sharing 445 TCP My network (subnet) only
File <strong>and</strong> Printer Sharing 137 UDP My network (subnet) only
File <strong>and</strong> Printer Sharing 138 UDP My network (subnet) only
Global Catalog Service 3269 TCP 10.0.0.0/255.255.255.0
Global Catalog Service 3268 TCP 10.0.0.0/255.255.255.0
Kerberos 88 UDP 10.0.0.0/255.255.255.0
Kerberos 88 TCP 10.0.0.0/255.255.255.0
Kerberos Password V5 464 TCP 10.0.0.0/255.255.255.0
LDAP Server 389 UDP 10.0.0.0/255.255.255.0
LDAP Server 389 TCP 10.0.0.0/255.255.255.0
LDAP SSL 636 TCP 10.0.0.0/255.255.255.0
LDAP SSL 636 UDP 10.0.0.0/255.255.255.0
NAT-T 4500 UDP 10.0.0.0/255.255.255.0
NETBIOS Name Service 137 TCP 10.0.0.0/255.255.255.0
NTP 123 UDP 10.0.0.0/255.255.255.0
128.153.0.0/255.255.0.0
PPTP 1723 TCP 10.0.0.0/255.255.255.0
RPC 135 UDP 10.0.0.0/255.255.255.0
RPC 135 TCP 10.0.0.0/255.255.255.0
RPC 1024 1024 TCP 10.0.0.0/255.255.255.0
RPC 1025 1025 TCP 10.0.0.0/255.255.255.0
RPC 1026 1026 TCP 10.0.0.0/255.255.255.0
RPC 1027 1027 TCP 10.0.0.0/255.255.255.0
RPC 1028 1028 TCP 10.0.0.0/255.255.255.0
RPC 1029 1029 TCP 10.0.0.0/255.255.255.0
RPC 1030 1030 TCP 10.0.0.0/255.255.255.0
RPC 1031 1031 TCP 10.0.0.0/255.255.255.0
RPC 1032 1032 TCP 10.0.0.0/255.255.255.0
RPC 1033 1033 TCP 10.0.0.0/255.255.255.0
RPC 1034 1034 TCP 10.0.0.0/255.255.255.0
RPC 1035 1035 TCP 10.0.0.0/255.255.255.0
RPC 1036 1036 TCP 10.0.0.0/255.255.255.0
RPC 1037 1037 TCP 10.0.0.0/255.255.255.0
RPC 1038 1038 TCP 10.0.0.0/255.255.255.0
RPC 1039 1039 TCP 10.0.0.0/255.255.255.0
SNMP 161 UDP 10.0.0.0/255.255.255.0
SNMP Traps Outbound 162 UDP 10.0.0.0/255.255.255.0

Unknown Service 64131 TCP 10.0.0.0/255.255.255.0
Unknown Service 464 UDP 10.0.0.0/255.255.255.0
Step 1: Open “Manage Your Server” <strong>and</strong> choose “Add or remove a role.”
Step 2: Make sure you have completed all Preliminary Steps.

Step 3: Wait for settings to be detected
Step 4: Choose “Domain Controller (<strong>Active</strong> <strong>Directory</strong>)” for the new Server Role.

Step 5: Choose “Next” at the next prompt <strong>and</strong> choose “Next” at the “Welcome to the <strong>Active</strong> <strong>Directory</strong>
Installation Wizard” prompt.
Step 6: Choose to continue installing at the “Operating System Compatibility” prompt.

Step 7: Choose “Domain controller for a new domain” at the “Domain Controller Type” prompt.
Step 8: Choose “Domain in a new forest” next.

Step 9: Enter the full <strong>DNS</strong> name of the new domain. (Ex. cslabs.sclab.clarkson.edu)
Step 10: Choose the NetBIOS name of the new domain. (Ex. CSLABS)

Step 11: Choose the location of your Database <strong>and</strong> Log Folders.
Step 12: Choose the location of your SYSVOL folder.

Step 13: If you receive a “Diagnostic Failed” at the “<strong>DNS</strong> Registration Diagnostics” screen.
Choose to “Install <strong>and</strong> configured the <strong>DNS</strong> server on this computer, <strong>and</strong> set this computer to use this
<strong>DNS</strong> server as its preferred <strong>DNS</strong> server.”
Step 14: Choose to have your domain permissions compatible only with Windows 2000 <strong>and</strong> newer
operating systems.

Step 15: Set the “<strong>Directory</strong> Services Restore Mode Administrator Password.”
Step 16: Review the Summary <strong>and</strong> choose “Next” to continue the installation.

Step 17: Wait for the installation to finish. That’s it, <strong>Active</strong> <strong>Directory</strong> is set up <strong>and</strong> ready to use.