Active directory

Introduction

Directory services are getting more critical in organising IT infrastructure. Microsoft’s favour, Active Directory, is one of the most established directory services in the world. In this Blog, I will cover the fundamentals and explain what Active Directory is and how to use it. As the complexity of networking resources has increased, directory services have become ever more critical for managing IT infrastructure. There is no directory service with a more prominent name than Active Directory. Microsoft’s directory service has been a powerful tool amongst network admins. This Active Directory tutorial will look at what Active Directory is and how to use it.

What is Active Directory?

Active Directory is a service that stores data objects on your local network environment. The service records data on users, devices, applications, groups, and devices in a hierarchical structure. The data structure makes it possible to find the details of resources connected to the network from one location. In essence, Active Directory acts like a phonebook for your network so you can look up and manage devices easily.

What does Active Directory do?

There are many reasons why businesses use directory services like Active Directory. The main reason is convenience. Active Directory enables users to log on and manage resources from one location. Login credentials are unified, so managing multiple devices without login details is easier.

How to Set Up Active Directory

First, you will need to ensure that you have Windows Professional or Windows Enterprise installed; otherwise, you will not be able to install Remote Server Administration Tools. Then do the following:

For Windows 10 (Version 1809):

1. Right-click on the Start button and go to Settings > Apps > Manage optional features > Add feature.
2. Now select RSAT: Active Directory Domain Services and Lightweight Directory Tools.
3. Select Install, then go to Start > Windows Administrative Tools to access Active Directory once the installation is complete.

For Windows 8 (And Windows 10 Version 1803) 

1. Download and install the correct version of Server Administrator Tools for your device: Windows8, Windows10.
2. Next, right-click the Start button and select Control Panel > Programs > Programs and Features > Turn Windows features on or off.
3. Slide down and click on the Remote Server Administration Tools option.
4. Now click on Role Administration Tools.
5. Click on AD DS and AD LDS Tools and verify AD DS Tools have been checked.
6. Press Ok.
7. Go to Start > Administrative Tools on the Start menu to access Active Directory.

How to Use Active Directory: Setting Up a Domain Controller, Creating Directory Users

How to Setup A Domain Controller

One of the first things you need to do when using Active Directory is to set up a domain controller. A domain controller is a core computer that will respond to authentication requests and authenticate other computers throughout the network. The domain controller stores the login credentials of all other computers and printers.

All other computers connect to the domain controller so the user can authenticate every device from one location. This advantage is that the admin does not have to manage many login credentials.

The process of setting up a domain controller is simple. Allocate a static IP address to your Domain Controller and install active directory domain services or ADDS, and follow these instructions:

1. Open Server Manager and click Roles Summary > Add roles and features.
2. Select Remote Desktop Services installation if you’re deploying a domain controller in a virtual machine, or select role-based or feature-based building.
3. Select a server from the server pool.
4. Select Active Directory Domain Services from the list and click Next.
5. Leave the Features checked by default and press Next.
6. Click Restart the destination server automatically if required and click Install. Close the window once the installation is complete.
7. Once the ADDS role has been installed, a notification will display next to the Manage menu. Press Promote this server into a domain controller.
8. Now click Add a new forest and enter a Root domain name. Press Next.
9. Select the Domain functional level you desire and enter a password into the Type the Directory Services Restore Mode (DSRM password) section. Click Next.
10. When the DNS Options page displays, click Next again.
11. Enter a domain in the NetBIOS Domain name box (preferably the same as the root domain name). Press Next.

12. Select a folder to store your database and log files. Click Next.
13. Press Install to finish. Your system will now reboot.

How to create Active Directory Users

Users and computers are the two most rudimentary objects you will need to manage when using Active Directory. This section will look at how to create new user accounts. The process is simple, and the easy way to manage users is through the Active Directory Users and Computer or ADUC tool that comes with the Remote Server Administration Tools or RSAT pack. You can install ADUC by following the instructions listed below:

Install ADUC on Windows 10 Version 1809 and Higher:

1. Right-click on the Start button and click Settings > Apps, then click Manage optional features > Add a part.
2. Select RSAT: Active Directory Domain Services and Lightweight Directory Tools.
3. Select Install and wait for the installation to complete.
4. Go to Start > Windows Administrative Tools to access the feature.

Install ADUC on Windows 8 and Windows 10 Version 1803 or Lower: 

1. Download and install Remote Server Administrator Tools for your version of Windows.
2. Right-click on Start > Control Panel > Programs > Programs and Features > Turn Windows features on or off.
3. Scroll down and select Remote Server Administration Tools.
4. Expand Role Administrator Tools > AD DS and AD LDS Tools.
5. Check AD DS Tools and press Ok.
6. Go to Start > Administrative Tools and select Active Directory Users and Computers.

How to Create New Users with ADUC 

1. Open the Server Manager, go to the Tools menu and select Active Directory Users and Computers.
2. Expand the domain and click Users.
3. Right-click on the right pane and press New > User.
4. When the New Object-User box displays, enter a First name, Last name, and User logon name, and click Next.
5. Enter a password and press Next.
6. Click Finish.
7. You can find the new user account in the Users section of ADUC.

Like all forms of infrastructure, Active Directory needs to be monitored to stay protected. Watching the directory service is essential for preventing cyber-attacks and delivering the best end-user experience to your users.