Professional Documents
Culture Documents
Learning product number: 6425A Vendor contact email: v-stanr@microsoft.com Vendor support contract expiration: 12/08
Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. The names of manufacturers, products, or URLs are provided for informational purposes only and Microsoft makes no representations and warranties, either expressed, implied, or statutory, regarding these manufacturers or the use of the products with any Microsoft technologies. The inclusion of a manufacturer or product does not imply endorsement of Microsoft of the manufacturer or product. Links are provided to third party sites. Such sites are not under the control of Microsoft and Microsoft is not responsible for the contents of any linked site or any link contained in a linked site, or any changes or updates to such sites. Microsoft is not responsible for webcasting or any other form of transmission received from any linked site. Microsoft is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement of Microsoft of the site or the products contained therein. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. Copyright 2008 Microsoft Corporation. All rights reserved. Microsoft, Access, Active Directory, Internet Explorer, MS-DOS, Outlook, SharePoint, Visual SourceSafe, Windows, Windows Vista, and WinFX are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Setup Requirements
Virtual Hard Disks
Virtual Hard Disks File name Drive Type The role of the VHD: Parent, Differencing, Parent/Differencing, or Stand Alone Base Base Base Base Differencing Differencing Differencing Differencing Differencing Differencing Differencing Differencing Differencing Base08A.vhd Base08A.vhd Base08B.vhd Base08A.vhd Base08B.vhd Base08A.vhd Base08A.vhd Base05D.vhd Base08C.vhd Parent (if applicable) If the drive is a differencing drive, list the file name of its parent drive.
Base08A.vhd Base05D.vhd Base08C.vhd Base08B.vhd 6425A-NYC-DC1.vhd 6425A-NYC-DC2.vhd 6425A-MIA-RODC.vhd 6425A-NYC-SVR1.vhd 6425A-NYC-SVR2.vhd 6425A-LON-DC1.vhd 6425A-NYC-RAS.vhd 6425A-VAN-DC1.vhd 6425A-NYC-CL1.vhd
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
Yes /No Yes/No # # of of times days run until locked N/A Yes 1
Windows Server 2008 Enterprise Edition Windows Server 2008 Enterprise Edition Windows Server 2008 Enterprise Edition Server Core Windows Server 2008 Enterprise Edition Windows Server 2008 Enterprise Edition Server Core Windows Server 2008 Enterprise Edition
N/A
Yes 1
03/10/08
N/A
Yes 1
03/10/08
6425A-NYCSVR1.vhd 6425A-NYCSVR2.vhd
N/A
Yes 1
03/10/08
N/A
Yes 1
03/10/08
6425A-NYCRAS.vhd
N/A
Yes 1
03/10/08
N/A
Yes 1
03/10/08
03/10/08
Windows Vista
03/10/08
Virtual Machines
Virtual Machine File name of the virtual machine Settings List all the relevant settings for the virtual machine. Be sure to include the following: Memory: Hard Disk 1: Hard Disk 2: Undo Disks: Networking: Memory: 512 MB Network: Local Only Hard Disk 1: 6425A-NYC-DC1.vhd Hard Disk 2: 6425A-NYC-DC1Allfiles.vhd Undo Disks: Enabled 6425A-NYCDC2.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-NYC-DC2.vhd Undo Disks: Enabled 6425A-MIARODC.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-MIA-RODC.vhd Undo Disks: Enabled 6425A-NYCSVR1.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-NYC-SVR1.vhd Undo Disks: Enabled Windows Server 2008 Enterprise Domain Controller WoodgroveBank.com DNS Windows Server 2008 Enterprise Server Core Read-only domain controller WoodgroveBank.com Windows Server 2008 Enterprise Standalone server Description Describe the role of the virtual machine in the learning product.
6425A-NYCDC1.vhd
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
(continued)
Virtual Machine File name of the virtual machine Settings List all the relevant settings for the virtual machine. Be sure to include the following: Memory: Hard Disk 1: Hard Disk 2: Undo Disks: Networking: Memory: 256 MB Network: Local Only Hard Disk: 6425A-NYC-SVR1.vhd Undo Disks: Enabled 6425A-NYCSVR2.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-NYC-SVR2.vhd Undo Disks: Enabled 6425A-LONDC1.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-LON-DC1.vhd Undo Disks: Enabled 6425A-VANDC1.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-VAN-DC1.vhd Undo Disks: Enabled 6425A-NYCCL1.vhd Memory: 384 MB Network: Local Only Hard Disk: 6425A-NYC-CL1.vhd Undo Disks: Enabled Windows Server 2008 Enterprise Domain Controller EMEA.WoodgroveBank.com DNS Windows Server 2003 Enterprise Domain Controller Fabrikam.com DNS Windows Vista SP1 Client computer in the Woodgrovebank.com domain Windows Server 2008 Enterprise Server Core Standalone Server Description Describe the role of the virtual machine in the learning product.
6425A-NYCRAS.vhd
Classroom Configuration
Virtual Machine Name 6425A-NYC-DC1.vmc Computer Name NYC-DC1 Internet Protocol (IP) Address 10.10.0.10/16 Domain Name Default System (DNS) Server Gateway 10.10.0.10 10.10.0.11 6425A-NYC-DC2.vmc NYC-DC2 10.10.0.11/16 10.10.0.10 10.10.0.11 6425A-MIA-RODC.vmc 6425A-NYC-SVR1.vmc 6425A-NYC-SVR2.vmc 6425A-LON-DC1.vmc MIA-RODC NYC-SVR1 NYC-SVR2 LON-DC1 10.10.0.12/16 10.10.0.24/16 10.10.0.25/16 10.10.0.110/16 10.10.0.10 10.10.0.10 10.10.0.10 10.10.0.110 10.10.0.10 6425A-NYC-RAS.vmc NYC-RAS 10.10.0.1/16 10.20.0.1/16 10.30.0.1/16 192.168.0.1/24 6425A-VAN-DC1.vmc 6425A-NYC-CL1.vmc VAN-DC1 NYC-CL1 10.20.0.10/16 10.10.0.50 10.20.0.10 10.10.0.10 10.20.0.1 10.10.0.1 10.10.0.10 10.10.0.1 10.10.0.1 10.10.0.1 10.10.0.1 10.10.0.1 10.10.0.1
Software
The following table shows all the software needed to set up the virtual machines for this learning product, including the version, whether the version that was tested for the learning product is retail or evaluation, and where the software can be obtained.
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
The table also includes a column to track whether the product group has approved inclusion of the software for the life of the product and a column to track compliance with application programming interface (API) and GDI+ policies.
PG Approval OK to Distribute CPx policy Complete Yes/no
Software Package Group Policy Log View Download from http://go.microsoft.com/fwlink/?Li nkId=117157
CPx Release ID #
User Accounts
The following table lists all of the user or group accounts required for this learning product. These accounts should be localized using MILS-approved names.
Password (not applicable for group accounts)
Other Account Properties Create a global security group in the ITAdmins OU Create in the Computers container
Kiosk Computers
Setup Files
The following table lists all installation files that are not already listed in the software section, and that are required for the creation of the virtual machines. If application source files are required, they will also be listed here.
File or Folder Name SetupWoodgrove.bat SetupWoodgrove.csv ResetPasswordWoodgrove.vbs MIA-RODCInstall.txt SetupEMEA.bat SetupEMEA.csv ResetPasswordEMEA.vbs SetupFabrikam.bat SetupFabrikam.csv ResetPasswordFabrikam.vbs Path in Microsoft Visual SourceSafe or Source Depot Longhorn\BaseImageBuildFiles\WoodgroveSetup Longhorn\BaseImageBuildFiles\WoodgroveSetup Longhorn\BaseImageBuildFiles\WoodgroveSetup Longhorn\BaseImageBuildFiles\RODCSetup Longhorn\BaseImageBuildFiles\EMEASetup Longhorn\BaseImageBuildFiles\EMEASetup Longhorn\BaseImageBuildFiles\EMEASetup Longhorn\BaseImageBuildFiles\FabrikamSetup Longhorn\BaseImageBuildFiles\FabrikamSetup Longhorn\BaseImageBuildFiles\FabrikamSetup
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
Note: After this drive is attached to NYC-DC1, copy the contents of the Allfiles directory in Source Depot to this drive.
Differencing Drives
This section lists the differencing drives that are specific to this learning product. Create a section for each differencing drive, each containing the following three subsections.
Important: The differencing drives for this course are based on the differencing drives that Microsoft Learning provides. The setup instructions below include the setup steps used to create the differencing drives. The section at the end of each differencing drive description, entitled Modify the Microsoft Learning differencing drive, describes the changes made to the differencing drive for this course.
5. 6. 7.
10
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
8.
11
9.
10. In xxxy-NYC-DC1 Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK. 11. In the Virtual Machine Remote Control Client (VMRC) connected to xxxyNYC-DC1, click Run Setup.exe. 12. In the Virtual Machine Additions dialog box, click Next. 13. On the Setup Completed page, click Finish. 14. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot.
12
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7. 8. 9.
On the Welcome page, click Next. On the Operating System Compatibility page, click Next. Click Create a new domain in a new forest, and then click Next. In the Full DNS name box, type WoodgroveBank.com, and then click Next. In the Forest functional level box, click Windows Server 2003, and then click Next.
10. On the Set Domain Functional Level page, click Next. 11. Verify that DNS server is selected as an additional option, and then click Next. 12. In the Static IP assignment dialog box, click Yes. 13. Click Yes to continue when warned about creating a delegation for this DNS server. 14. Click Next to accept the default file locations. 15. In the Password and Confirm password boxes, type Pa$$w0rd, and then click Next. 16. Review the settings, and then click Next. 17. Select the Reboot on completion check box. 18. After the system reboots, log on as Administrator with the password Pa$$w0rd. 19. Select the Do not show this window at logon check box, and then click Close.
13
10. On the Windows Update page, click Change settings. 11. Click Never check for updates (not recommended), and then click OK. 12. Close Windows Update. 13. Right-click the Taskbar, and then click Properties. 14. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. 15. On the Notification tab, clear all check boxes, and then click OK. 16. Open Microsoft Internet Explorer. 17. Click Tools, and then click Internet Options. 18. On the General tab, click Use blank. 19. Under Browsing History, click Delete all. 20. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK.
14
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
21. Close Internet Explorer. 22. On the Start menu, right-click Command Prompt, and then click Run as administrator. 23. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. 24. Type del *.pnf, press ENTER, and then close the command prompt. 25. Open a Windows Explorer window. 26. On the Tools menu, click Folder Options. 27. On the View tab, clear the Hide extensions for known file types check box, and then click OK. 28. Close Windows Explorer.
15
4.
Korean (Korea) Korean Polish (Poland) Polish (214) Portuguese (Brazil) Brazilian ABNT Portuguese (Portugal) Portuguese Russian (Russia) Russian Spanish (Spain, International Sort) Spanish Spanish (Argentina) Latin America Swedish (Sweden) Swedish
16
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4.
Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYCDC1.vhd. In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link. Select the check box next to Enable undo disks. Click Add Disk, and then in the Known virtual hard disks list, click C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC1Allfiles.vhd. Click OK, and then click OK again.
5. 6. 7. 8.
9.
5.
17
Right-click NYC, and then click Delegate Control. On Welcome page, click Next. On the Users and Groups page, click Add, type Helpdesk, click OK, and then click Next. On the Tasks to Delegate page, select both the Create, delete and manage user accounts, and Create, delete and manage groups check boxes, click Next, and then click Finish. On the View menu, click Advanced Features. Expand NYC, right-click BranchManagers, and then click Properties.
8. 9.
10. On the Security tab, click Add. 11. Type Markus, click OK, and then click Yes. 12. In the Permissions for Markus Breyer section, select the Deny check box for Full control, and then click OK. 13. On the View menu, click Advanced Features. 14. Close Active Directory Users and Computers.
18
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4. 5. 6.
Click Start, click All Programs, click Windows PowerShell 1.0, and then click Windows PowerShell. At the PS prompt, type set-executionpolicy unrestricted, and then press ENTER. Close the Windows PowerShell window.
6. 7. 8.
9.
10. Close Active Directory Users and Computers. 11. Click Start, point to Administrative Tools and then click Group Policy Management. 12. Expand Forest: WoodgroveBank.com, expand Domains, and then expand WoodgroveBank.com. 13. Right-click Group Policy Objects, and then click New. 14. In the New GPO dialog box, in the Name field, type Lab 11A.
19
15. Repeat the previous two steps to create three more GPOs named Lab 11B, Lab 11C, and Lab 11D. 16. Right-click Lab 11A, and then click Edit. 17. Under User Configuration, expand Policies, expand Windows Settings, click Scripts, and double-click Logon. 18. In the Logon Properties dialog box, click Add. In the Add a Script dialog box, in the Script Name field, type \\NYC-DC1\Scripts\Map.bat, and then click OK twice. 19. Close Group Policy Management Editor. 20. Right-click Lab 11B, and then click Edit. 21. Under User Configuration, expand Policies, expand Administrative Templates, and then click Control Panel. 22. Double-click Prohibit access to the Control Panel, click Enabled, and then click OK. 23. Close Group Policy Management Editor. 24. On the Delegation tab of the Lab 11B policy, click Advanced to open the Security Settings, and then add the MIA_BranchManagersGG. In the Permissions area, select the Deny check box for the Apply group policy permission, click OK, and then click Yes. 25. Right-click Lab 11C, and then click Edit. 26. Under User Configuration, expand Policies, expand Administrative Templates, and then click Start Menu and Taskbar. 27. Double-click Add the Run command to the Start Menu, click Enabled, and then click OK. 28. Close Group Policy Management Editor. 29. Right-click Lab 11D, and then click Edit. 30. Under Computer Configuration, expand Policies, expand Administrative Templates, expand System, and then click Group Policy. 31. Double-click User Group Policy loopback processing mode, click Enabled, and then click OK. 32. Under User Configuration, expand Policies, expand Windows Settings, expand Security Settings, and then click Software Restriction Policies.
20
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
33. Right-click Software Restriction Polices, and click New to create a new policy. 34. Right-click Additional Rules, and then create a new path rule with a path of C:\Program Files\Internet Explorer\Iexplore.exe. Set the Security Level to Disallowed, and then click OK. 35. Close Group Policy Management Editor. 36. In the Group Policy Objects folder, right-click Lab 11A, and then click Back Up. In the Location field, type D:\6425\GPOBackup, click Back Up, and then click OK. 37. Repeat the previous step to back up the Lab 11B, Lab 11C and Lab 11D Group Policy Objects (GPOs). 38. In the Group Policy Objects folder, delete the four lab 11 GPOs. 39. Close Group Policy Management. 40. Download and install the Group Policy Log View Tool. Accept all defaults during the installation.
Note: Before shutting down the 6425A-NYC-DC1 virtual machine, complete the configuration of the other virtual servers for this course.
21
9.
10. At the command prompt, type slmgr rearm, and then press ENTER. 11. In the Windows Script Host dialog box, click OK. 12. Close the command prompt. 13. Copy VMClean version 1.0.36 to the computer desktop. 14. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean. 15. Click Exit and Delete. 16. Shut down the virtual machine, and commit all changes.
22
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link. Select the check box next to Enable undo disks, and then click OK.
6.
23
8. 9.
10. In xxxy-NYC-DC2 Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK. 11. In the VMRC connected to xxxy-NYC-DC2, click Run Setup.exe. 12. In the Virtual Machine Additions dialog box, click Next. 13. On the Setup Completed page, click Finish. 14. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot.
24
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5.
Configure the IP address, Subnet mask, Default gateway, and Preferred DNS server based on the settings listed in the previous Classroom Configuration table. Click Advanced, and then remove any IP addresses other than the address specified in the IP addresses box, and then click OK. Close all open windows except Server Manager.
6. 7.
4. 5. 6. 7. 8. 9.
10. In the Static IP assignment dialog box, click Yes. 11. Click Yes to continue when warned about creating a delegation for this DNS server. 12. Click Next to accept the default file locations. 13. In the Password and Confirm password boxes, type Pa$$w0rd and then click Next. 14. Review the settings, and then click Next.
25
15. Select the Reboot on completion check box. 16. After the system reboots, log on as WoodgroveBank\Administrator with the password Pa$$w0rd. 17. Click the Do not show this window at logon check box, and then click Close.
10. On the Windows Update page, click Change settings. 11. Click Never check for updates (not recommended), and then click OK. 12. Close Windows Update. 13. Right-click the taskbar, and then click Properties. 14. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. 15. On the Notification tab, clear all check boxes, and then click OK. 16. Open Internet Explorer. 17. Click Tools, and then click Internet Options. 18. On the General tab, click Use blank.
26
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
19. Under Browsing History, click Delete all. 20. Select the Also delete files and settings stored by add-ons check box, click Yes, and then Click OK. 21. Close Internet Explorer. 22. On the Start menu, right-click Command Prompt, and then click Run as administrator. 23. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. 24. Type del *.pnf, and then press ENTER. 25. Close the command prompt. 26. Open a Windows Explorer window. 27. On the Tools menu, click Folder Options. 28. On the View tab, clear the Hide extensions for known file types check box, and then click OK. 29. Close the Windows Explorer window.
27
4.
German (Germany) German German (Switzerland) Swiss German Italian (Italy) Italian Japanese (Japan) Japanese Korean (Korea) Korean Polish (Poland) Polish (214) Portuguese (Brazil) Brazilian ABNT Portuguese (Portugal) Portuguese Russian (Russia) Russian Spanish (Spain, International Sort) Spanish Spanish (Argentina) Latin America Swedish (Sweden) Swedish
28
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
29
8.
At the command prompt, type slmgr ipk 4BTYB-J6KK3-8DDDP-B9WYG3VQH9, and then press ENTER. After approximately two minutes, the Windows Script Host dialog box appears. In the Windows Script Host dialog box, click OK.
9.
10. At the command prompt, type slmgr rearm, and then press ENTER. 11. In the Windows Script Host dialog box, click OK. 12. Close the command prompt. 13. Copy VMClean version 1.0.36 to the computer desktop. 14. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean. 15. Click Exit and Delete. 16. Shut down the virtual machine, and commit all changes.
30
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link. Select the check box next to Enable undo disks, and then click OK.
31
4. 5. 6. 7. 8. 9.
In the VMRC, connected to xxxxy-MIA-RODC, at the command prompt, type D:, and then press ENTER. Type CD Windows, and then press ENTER. Type Setup.exe, and then press ENTER. In the Virtual Machine Additions dialog box, click Remove. On the Setup Completed page, click Finish. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot.
10. After the computer reboots, log on as Administrator using the password Pa$$w0rd. 11. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC, and then click Edit Configuration. 12. Under xxxxy-MIA-RODC Configuration, click Virtual Machine Additions. 13. In xxxxy-MIA-RODC Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK. 14. In the VMRC connected to xxxxy-MIA-RODC, at the command prompt, type D:, and then press ENTER. 15. Type CD Windows, and then press ENTER. 16. Type Setup.exe, and then press ENTER. 17. In the Virtual Machine Additions dialog box, click Next. 18. On the Setup Completed page, click Finish. 19. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. 20. After the computer reboots, log on as Administrator using the password Pa$$w0rd.
32
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
3.
Type netsh interface ipv4 add dnsserver name="ID" address=10.10.0.10 index=1 (where ID is the number assigned to the Local Area Connection), and then press ENTER. In the command prompt window, at the command prompt, type netdom join MIA-RODC /domain:Woodgrovebank.com /Userd:Administrator /passwordD:*, and then press ENTER. Type Pa$$w0rd, and then press ENTER. Type shutdown /r /t 0, and then press ENTER. Wait for the server to reboot, and then log on as WoodgroveBank\administrator with the password Pa$$w0rd.
4.
5. 6. 7.
To configure the server as a read only domain controller in the WoodgroveBank.com domain
1. 2. 3. 4. At the command prompt, type mkdir c:\Setup, and then press ENTER. Copy the MIA-RODCInstall.txt file to the c:\setup folder. At the command prompt, type dcpromo /unattend:c:\setup\MIARODCinstall.txt, and then press ENTER. The server will be promoted to a domain controller, and then it will restart. Wait for the server to reboot, and then log on as WoodgroveBank\administrator with the password Pa$$w0rd. At the command prompt, type cd c:\setup, and then press ENTER. Type Del *.*, and then press ENTER. Type Y, and then press ENTER Type CD\, and then press ENTER. At the command prompt, type rmdir c:\setup, and then press ENTER.
5. 6. 7. 8.
33
French (Canada) Canadian French French (Switzerland) Swiss French German (Germany) German German (Switzerland) Swiss German Portuguese (Brazil) Brazilian ABNT Portuguese (Portugal) Portuguese Spanish (Spain, International Sort) Spanish Spanish (Argentina) Latin America Japanese (Japan) Japanese Korean (Korea) Korean Italian (Italy) Italian Swedish (Sweden) Swedish Dutch (Netherlands) Dutch Danish (Denmark) Danish Russian (Russia) Russian Chinese (Simplified, PRC) Chinese (Simplified) Microsoft Pinyin IME Chinese (Traditional, Hong Kong S. A. R.) US Polish (Poland) Polish (214) Czech (Czech Republic) Czech
34
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7. 8.
At the command prompt, type Wevtutil.exe cl System, and then press ENTER. At the command prompt, type Wevtutil.exe cl Security, and then press ENTER. At the command prompt, type Wevtutil.exe cl Application, and then press ENTER. At the command prompt, type Wevtutil.exe cl Setup, and then press ENTER.
35
4.
Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-MIARODC.vhd. In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link, select the check box next to Enable undo disks, and then click OK.
5. 6.
6. 7. 8. 9.
10. Shut down the virtual machine, and commit all changes.
36
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6.
37
8. 9.
10. In xxxy-NYC-SVR1 Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.
38
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
11. In the VMRC connected to xxxy-NYC-SVR1, click Run Setup.exe. 12. In the Virtual Machine Additions dialog box, click Next. 13. On the Setup Completed page, click Finish. 14. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. After the server reboots, log on as administrator using the password Pa$$w0rd.
39
6. 7. 8. 9.
In the New User dialog box, type Student as the User Name, and Pa$$w0rd in both the Password and Confirm password dialog boxes. Clear the User must change password at next logon check box, select the Password never expires check box, and then click Create. Click Close, and log off the computer. Log on as Student using the password Pa$$w0rd.
10. Click Tools, and then click Internet Options. 11. On the General tab, click Use blank. 12. Under Browsing History, click Delete all. 13. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK. 14. Close Internet Explorer, and then log off.
40
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
10. Under Startup and Recovery, click Settings, in the Write debugging information list, click (none), and then click OK twice. 11. On the Server Manager page, click Configure Updates. 12. On the Windows Update page, click Change settings. 13. Click Never check for updates (not recommended), and then click OK. 14. Close Windows Update. 15. Right-click the taskbar, and then click Properties. 16. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. 17. On the Notification tab, clear all check boxes, and then click OK. 18. Open Internet Explorer. 19. Click Tools, and then click Internet Options. 20. On the General tab, click Use blank. 21. Under Browsing History, click Delete all.
41
22. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK. 23. Close Internet Explorer. 24. On the Start menu, right-click Command Prompt, and then click Run as administrator. 25. At the command prompt, type rmdir /s /q c:\Windows\Panther, and then press ENTER. 26. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. 27. Type del *.pnf, and then press ENTER. 28. Close the command prompt. 29. Open Windows Explorer. 30.- On the Tools menu, click Folder Options. 31. On the View tab, clear the Hide extensions for known file types check box, and click OK. 32. Close Windows Explorer.
42
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4. 5. 6.
Spanish (Argentina) Latin America Japanese (Japan) Japanese Korean (Korea) Korean Italian (Italy) Italian Swedish (Sweden) Swedish Dutch (Netherlands) Dutch Danish (Denmark) Danish Russian (Russia) Russian Chinese (Simplified, PRC) Chinese (Simplified) Microsoft Pinyin IME Chinese (Traditional, Hong Kong S. A. R.) US Polish (Poland) Polish (214) Czech (Czech Republic) Czech
Click OK twice. On the Language Bar, click Hidden, and then click OK. Close the Control Panel.
43
5. 6. 7.
44
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
9.
10. At the command prompt, type slmgr rearm, and then press ENTER. 11. In the Windows Script Host dialog box, click OK. 12. Close the command prompt. 13. Copy VMClean version 1.0.36 to the computer desktop. 14. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean. 15. Click Exit and Delete. 16. Shut down the virtual machine, and commit all changes.
45
5. 6. 7.
46
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
10. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC, and then click Edit Configuration.
47
11. Under xxxxy-MIA-RODC Configuration, click Virtual Machine Additions. 12. In xxxxy-MIA-RODC Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK. 13. In the VMRC connected to xxxxy-MIA-RODC, at the command prompt, type D:, and then press ENTER. 14. Type CD Windows, and then press ENTER. 15. Type Setup.exe and then press ENTER. 16. In the Virtual Machine Additions dialog box, click Next. 17. On the Setup Completed page, click Finish. 18. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. 19. After the computer reboots, log on as Administrator using the password Pa$$w0rd.
3.
4. 5.
48
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
49
Miscellaneous settings
1. 2. 3. At the command prompt, type rmdir /s /q c:\Windows\Panther and then press ENTER. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. Type del *.pnf, and then press ENTER.
50
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
51
2. 3. 4. 5.
52
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4.
Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-LONDC1.vhd. In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link. Select the check box next to Enable undo disks, and then click OK.
5. 6. 7.
53
8. 9.
10. In xxxy-LON-DC1 Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK. 11. In the VMRC connected to xxxy-LON-DC1, click Run Setup.exe. 12. In the Virtual Machine Additions dialog box, click Next. 13. On the Setup Completed page, click Finish. 14. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. After the server reboots, log on as administrator using the password Pa$$w0rd.
54
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7. 8. 9.
Configure the IP address, Subnet mask, Default gateway, and Preferred DNS server based on the settings listed in the Classroom Configuration table. Click OK twice, and then click Close. Right-click Local Area Connection, and then click Properties. In the Local Area Connection Properties dialog box, click Internet Protocol Version 4 (TCP/IPv4), and then click Properties. Click Advanced, and remove any IP addresses other than the IP address specified in the IP addresses box.
10. In the FQDN of the parent domain box, type WoodgroveBank.com. 11. In the Single-label DNS name of the child domain box, type EMEA, and then click Next. 12. In the Domain functional level box, click Windows Server 2003, and then click Next twice. 13. On the Select a Site page, click Next.
55
14. On the Additional Domain Controller Options page, verify that DNS server is selected as an additional option, and then click Next. 15. In the Static IP assignment dialog box, click Yes. 16. Click Next to accept the default file locations. 17. In the Password and Confirm password boxes, type Pa$$w0rd, and then click Next. 18. Review the settings, and then click Next. 19. Select the Reboot on completion check box. 20. After the system reboots, log on as Administrator with the password Pa$$w0rd.
56
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
9.
10. On the Windows Update page, click Change settings. 11. Click Never check for updates (not recommended), and then click OK. 12. Close Windows Update. 13. Right-click the taskbar, and then click Properties. 14. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. 15. On the Notification tab, clear all check boxes, and then click OK. 16. Open Internet Explorer. 17. Click Tools, and then click Internet Options. 18. On the General tab, click Use blank. 19. Under Browsing History, click Delete all. 20. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK. 21. Close Internet Explorer. 22. On the Start menu, right-click Command Prompt, and then click Run as administrator. 23. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. 24. Type del *.pnf, and then press ENTER. 25. Close the command prompt. 26. Open a Windows Explorer window. 27. On the Tools menu, click Folder Options. 28. On the View tab, clear the Hide extensions for known file types check box, and then click OK. 29. Close the Windows Explorer window.
57
58
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
59
9.
10. At the command prompt, type slmgr rearm, and then press ENTER. 11. In the Windows Script Host dialog box, click OK. 12. Close the command prompt. 13. Copy VMClean version 1.0.36 to the computer desktop. 14. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean. 15. Click Exit and Delete. 16. Shut down the virtual machine, and commit all changes.
60
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7. 8. 9.
61
62
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
7.
In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. After the server reboots, log on as administrator using the password Pa$$w0rd. On the Virtual Server Administration Web site, click xxxy-NYC-RAS, and then click Edit Configuration. Under xxxy-NYC-RAS Configuration, click Virtual Machine Additions.
8. 9.
10. In xxxy-NYC-RAS Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK. 11. In the VMRC connected to xxxy-NYC-RAS, click Run Setup.exe. 12. In the Virtual Machine Additions dialog box, click Next. 13. On the Setup Completed page, click Finish. 14. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. After the server reboots, log on as administrator using the password Pa$$w0rd.
63
10. Click Internet Protocol Version 4 (TCP/IPv4), and then click Properties. 11. Configure the IP address and Subnet mask based on the settings listed in the Classroom Configuration table, and then click OK. 12. Close all open windows except Server Manager.
10. Click Close, and log off the computer. 11. Log on as Student using the password Pa$$w0rd.
64
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
6. 7. 8. 9.
Right-click the taskbar and then click Properties. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. On the Notification tab, clear all check boxes, and then click OK. Open Internet Explorer.
10. Click Tools, and then click Internet Options. 11. On the General tab, click Use blank. 12. Under Browsing History, click Delete all. 13. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK. 14. Close Internet Explorer, and then log off.
10. Under Startup and Recovery, click Settings, in the Write debugging information list, click (none), and then click OK twice. 11. On the Server Manager page, click Configure Updates. 12. On the Windows Update page, click Change settings.
65
13. Click Never check for updates (not recommended), and then click OK. 14. Close Windows Update. 15. Right-click the taskbar, and then click Properties. 16. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. 17. On the Notification tab, clear all check boxes, and then click OK. 18. Open Internet Explorer. 19. Click Tools, and then click Internet Options. 20. On the General tab, click Use blank. 21. Under Browsing History, click Delete all. 22. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK. 23. Close Internet Explorer. 24. On the Start menu, right-click Command Prompt, and then click Run as administrator. 25. At the command prompt, type rmdir /s /q c:\Windows\Panther, and then press ENTER. 26. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. 27. Type del *.pnf, and then press ENTER. 28. Close the command prompt. 29. Open a Windows Explorer window. 30 On the Tools menu, click Folder Options. 31. On the View tab, clear the Hide extensions for known file types check box, and then click OK. 32 Close the Windows Explorer window.
66
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
67
4. 5. 6.
Click OK twice. On the Language Bar, click Hidden, and then click OK. Close the Control Panel.
68
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
2. 3. 4. 5. 6.
On the Welcome page, click Next. On the Select Server Roles page, select the Network Policy and Access Services check box, and then click Next twice. On the Select Role Services page, select the Routing and Remote Access Services check box, and then click Next. Accept all defaults to install the Routing and Remote Access role. When the installation finishes, click Close. Close Server Manager.
10. On the Windows Update page, click Change settings. 11. Click Never check for updates (not recommended), and then click OK. 12. Close Windows Update. 13. Right-click the taskbar, and then click Properties. 14. On the Start Menu tab, clear the Store and display a list of recently opened programs check box. 15. On the Notification tab, clear all check boxes, and then click OK.
69
16. Open Internet Explorer. 17. Click Tools, and then click Internet Options. 18. On the General tab, click Use blank. 19. Under Browsing History, click Delete all. 20. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK. 21. Close Internet Explorer. 22. On the Start menu, right-click Command Prompt, and then click Run as administrator. 23. At the command prompt, type cd C:\Windows\Inf, and then press ENTER. 24. Type del *.pnf, and then press ENTER. 25. Close the command prompt. 26. Open a Windows Explorer window. 27. On the Tools menu, click Folder Options. 28. On the View tab, clear the Hide extensions for known file types check box, and click OK. 29. Close Windows Explorer.
70
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4. 5. 6.
Portuguese (Brazil) Brazilian ABNT Portuguese (Portugal) Portuguese Spanish (Spain, International Sort) Spanish Spanish (Argentina) Latin America Japanese (Japan) Japanese Korean (Korea) Korean Italian (Italy) Italian Swedish (Sweden) Swedish Dutch (Netherlands) Dutch Danish (Denmark) Danish Russian (Russia) Russian Chinese (Simplified, PRC) Chinese (Simplified) Microsoft Pinyin IME Chinese (Traditional, Hong Kong S. A. R.) US Polish (Poland) Polish (214) Czech (Czech Republic) Czech
Click OK twice. On the Language Bar, click Hidden, and then click OK. Close the Control Panel.
71
5. 6. 7. 8. 9.
10. Repeat the previous step two more times to configure a total of four network adapters, and then click OK.
72
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
10. On the Configuration page, click Custom configuration, and then click Next. 11. On the Custom Configuration page, select the LAN routing check box, click Next, and then click Finish. 12. Click Start service. 13. Close Routing and Remote Access.
73
8.
At the command prompt, type slmgr ipk 4BTYB-J6KK3-8DDDP-B9WYG3VQH9, and then press ENTER. After approximately two minutes, the Windows Script Host dialog box appears. In the Windows Script Host dialog box, click OK.
9.
10. At the command prompt, type slmgr rearm, and then press ENTER. 11. In the Windows Script Host dialog box, click OK. 12. Close the command prompt. 13. Copy VMClean version 1.0.36 to the computer desktop. 14. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean. 15. Click Exit and Delete. 16. Shut down the virtual machine, and commit all changes.
74
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link. Select the check box next to Enable undo disks, and then click OK.
75
5. 6. 7.
76
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4.
On the Rename the Computer page, select the Rename the computer to check box. In the Rename the computer to box, type the computer name specified in the Setup Requirements section, and then click Next. On the Ready to Apply SID page, click Next. The computer SID will be changed, and the computer will restart. This might take several minutes. Log on as Administrator with the password Pa$$w0rd. In the Shutdown Event Tracker dialog box, in the Comment box, type newsid, and then click OK. On the guest operating system desktop, click newsid.exe, and then press the DELETE key. In the Confirm File Delete dialog box, click Yes.
5. 6. 7. 8. 9.
77
78
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4.
Russian (Russia) Russian Spanish (Spain, International Sort) Spanish Spanish (Argentina) Latin America Swedish (Sweden) Swedish
Click OK twice.
10. Right-click Application, click Clear All Events, and then click No. 11. Right-click Security, click Clear All Events, and then click No. 12. Right-click Directory Service, click Clear All Events, and then click No. 13. Right-click System, click Clear All Events, and then click No. 14. Right-click File Replication Service, click Clear All Events, and then click No. 15. Close Event Viewer.
79
Miscellaneous settings
1. 2. On the Start menu, in the Start Search box, type regedit, and then press ENTER. In Registry Editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionM anager\MemoryManagement, and then double-click ClearPageFileAtShutdown. In the Edit DWORD dialog box, in the Value Data box, type 1, and then click OK. Ensure that the display settings are configured to 800 x 600. Configure Automatic Updates to Notify me but dont automatically download or install. Open Internet Explorer, and set the default home page to blank.
3. 4. 5. 6.
80
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
5. 6. 7.
In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create. Click the Hard disks link. Select the check box next to Enable undo disks, and then click OK.
3. 4.
81
5. 6. 7.
82
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
8. 9.
10. In the System Properties dialog box, click Close, and then click Restart Now.
83
Miscellaneous settings
1. 2. 3. 4. 5. 6. 7. 8. 9. Right-click the desktop, and then click Personalize. Click Screen Saver. On the Screen Saver tab, set the Screen saver to None, and then click OK. Click Display Settings. Ensure that the display settings are configured to 800 x 600. Click Windows Color and Appearance, and then click Effects. Clear all check boxes, and then click OK twice. Click Start, right-click Computer, and then click Properties. In the Tasks list, click Advanced system settings. On the Advanced tab, in the Performance section, click Settings, click Adjust for Best Performance, and then click OK twice. On the System page, click Windows Updates. On the Windows Update page, click Change settings.
10. Click Never check for updates (not recommended), and then click OK. 11. Right-click the taskbar, and then click Properties. 12. On the Start Menu tab, clear the Store and display a list of recently opened programs and the Store and display a list of recently opened files check boxes, and then click OK. 13. Open Internet Explorer, and set the default home page to blank. 14. In the task bar, right-click Windows Sidebar, and then click Properties. 15. In the Windows Sidebar Properties dialog box, clear the Start Sidebar when Windows starts check box, and then click OK.
3.
84
6425A: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services
4. 5. 6. 7. 8. 9.
At the command prompt, type slmgr rearm, and then press ENTER. In the Windows Script Host dialog box, click OK. Close the Command prompt. Copy VMClean, version 1.0.36 to the computer desktop. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean. Click Exit and Delete.
10. Shut down the virtual machine, and commit all changes.