Active Directory,DNS,DHCP,on W2Kadv. Server. Help setting up

[tickmike]

Hello All.
Help please with setting up this server for the first time.
Just need a basic set up to run AD ,do updates and be in control of the workstations to stop the little darlings changing all the settings.

W2K adv. Server. to serve 30 computers

On DHCP 'server options' do I select :-

004 Time server.
006 DNS.
015 DNS domain name.


And on DNS do I have to set up the 'Reverse look up zones' ?.

Any tips about setting up Active Directory.with Mandatory Profiles from scratch.

Regards Michael.

[Ric_]

If you have decided that mandatory profiles are the way to go, check out the wiki page at http://www.russdev.com/edugeek/doku....atory_profiles for full instructions

[ChrisH]

Yes do set up the reverse lookup. You may also need the gateway or router option (which ever it calls itself) setting.

[kingswood]

Hello All.
Help please with setting up this server for the first time.
Just need a basic set up to run AD ,do updates and be in control of the workstations to stop the little darlings changing all the settings.

W2K adv. Server. to serve 30 computers

On DHCP 'server options' do I select :-
004 Time server.
006 DNS.
015 DNS domain name.


And on DNS do I have to set up the 'Reverse look up zones' ?.

Any tips about setting up Active Directory.with Mandatory Profiles from scratch.

Regards Michael.

Hi.

You don't need a reverse lookup zone- it's not essential. But I would put one in there anyway. It helps if you plan on running any reverse lookups- so a web server internally etc. And it can also help some other things on your LAN work more efficiently.

The WIKI on here is great for profile information.

Best of luck!

Paul

[tickmike]

Hi Thanks for comments.
Still unsure if I have to select DCHP server options if I want these services to run or does work with out ticking the options box's
From Michael.

[ChrisH]

There are the server options which are the global DHCP options and the the scope options if you want to do something different in one of your scopes of which most people will only have one anyways. You have to tick the boxes to enable them.

[ajbritton]

Assuming xall your clients are win2k/xp then you don't need to set the dns domain name as this is set when they join the domain.

[kingswood]

Hi.

These are optional services so that DHCP can supply the information to clients. See here:

http://www.windowsnetworking.com/art.../w2kdhcpc.html

Hope that helps!

[tickmike]

Hello all thanks for your help and the link (that is a good site). but need some more help !.

Setting up Group policy's for my users and there computers.

open AD users and computers>properties>GP tab>New>give it a name>press enter>edit>configure>Save.

But Its changed the DC settings as well ?.
eg. I set up that users could not turn off computers ... so I end up not being able to turn of the DC when I have finished working on it tonight .

Where have I gone wrong this time.

From Michael.

[ajbritton]

Oops - which container/ou did you link your policy to? It sounds like you linked it to the root of the tree. Policies are inherited down the tree (unless you specifically block inheritance). Best pratcise is to create Organizational Units (like containers) to put your computers/users in. I use a structure as a bit like this...

\Managed
\Managed\Computers - (computer accounts are all in here)
\Managed\Users
\Managed\Users\Staff - (staff user accounts are all in here)
\Managed\Users\Students- (student user accounts are all in here)

When you want a policy to apply to all your users, you can create it at the \Managed\Users level. Policies for staff or students would created at the appropriate level to just apply to those users.

You should also create OUs for other objects (eg Groups, Service Accounts, Admin Accounts).

You should also avoid editing the default policies (default domain policy, default domain controller policy, default site policy).

[Ric_]

@tickmike: Also nip off to MS to download the Group Policy Management Console (GPMC) - it makes dealing with GPOs a bit easier since you can see which OUs have GPOs linked to them at a glance and you can get a display of what policies are set.

[tickmike]

Hi .
A very very big oop's .. I now cannot access the DC . ( it now thinks it's a user workstation !!! ) HELP..... all I can get to is C:\ in safe mode.
Does anyone have any idea's how I can get my DC back. ???

From Michael.

[ajbritton]

What policies did you set?

[Ric_]

I would restore from backup if possible. Otherwise you may need to re-install depending on how much you have crippled.

You appear to have learnt the hard way that you should not edit GPOs on the server and that you should set GPOs up at an OU level that won't affect your DC

[tickmike]

Hi .
Loads of them, went down the list and configured what I did not want the users to change .

I want to get access to the GP and delete it and configure like you suggests above.
I think it must be the root GP.

Can only get to safe mode C:\ or directory restore mode ( but in that still cannot get in to Active directory)
From Michael.

Edit ... just seen other post .
Backup what backup ? not got around to doing any back up's yet !!! .
do you think it will be quicker to do yet another reinstall .

I will get it right.

Edit