Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 

Sign in to follow this  
anoble1

How to I setup a Domain Controller and how to I setup up the IP addres

Recommended Posts

anoble1    0

Hi,

I am trying to make a Domain Controller at my house. I am running Server 2008. On the server:

Under IPv4 do I need to create my own personal IP address and make the Subnet 255.255.255.0? Also do I need to make the Default gateway the ip address of my modem?

Then What does the DNS need to be? The IP address that I made up above as such:

IP: 192.168.1.254

Subnet: 255.255.255.0

Gateway: 192.168.1.1 ---- This is my modem IP

DNS1: 192.168.1.254

DNS2: ??????

Does that look correct?

Share this post


Link to post
Share on other sites
Tripredacus    285

You do not even need a default gateway. But the real question is, what do you want your DC to do? Do you want it to access the internet?

Share this post


Link to post
Share on other sites
anoble1    0

Maybe some roaming profiles, home network. I do want it to access the internet, and for all my PC's be apart of the Server's DOMAIN. And to setup some security policy's.

Share this post


Link to post
Share on other sites
Tripredacus    285

Well your first post makes me think you have the server connected directly to the modem. Where does the wireless router fit in? Does it have ethernet ports? What model is it?

Share this post


Link to post
Share on other sites
Tripredacus    285

Connect 1 PC via ethernet to the router. Configure to obtain IP automatically. Verify that you can access the internet. Drop to a CMD and run ipconfig -all, recording these for the Ethernet connection:

- IP Address

- Subnet mask

- Default Gateway

- DNS server

Log into your router and change its DHCP IP Scope to allow at least 10 IPs it won't assign. So if it currently is set up to assign 192.168.1.1 - 192.168.1.254, then Change it so the scope starts at 192.168.1.10 or so. After doing this, release/renew the PC and verify internet access.

On the server, set a static IP on the NIC using an IP outside of the router's scope, for example 192.168.1.5. Use the Subnet mask, default gateway and DNS server that the PC had gotten. Verify access to the internet by pinging google.com (I will never recommend that you actually surf the internet with a server, but that's up to you).

Now the obvious next step would be to run DCPROMO, but there is a problem where I can't help you any further. There are other things you are going to have to find out about your router, specifically:

- how to add A record to the DNS so your clients can use FQDNs. You might actually need to do this before running DCPROMO.

- how to allow wireless clients ability to see physical devices. Most consumer routers have an internal firewall between the different network types.

Share this post


Link to post
Share on other sites
allen2    1

As he will run AD on the server, i would disable dhcp on the router and use the server as dhcp server and configure it to set dns ip with its address instead of allowing the client computer to use internet dns defined by the router. If you don't do this step you'll have bad time with your AD client computers not seeing properly the DC.

Also AD should have at least 2 DC so you should install at least 2 servers (virtual or physical) if you don't do this you "might" sometime need to reboot all client computers after rebooting the DC to allow them to communicate properly.

What wasn't said and is requirement for a properly working AD, you'll need to properly configure the DC to use a reliable time server as it will be the source of time for the client computers (a five minutes time difference might completely block communication between two AD machines).

Another important point is the AD dns domain name shouldn't be already used or a possible internet dns domain name (for example if you used myad.com as AD dns domain name, you might encounter AD problems as it is already internet registered ). For this matter, usually using anything with strictly more than 3 characters as extension will solve this easily (example mydomain.myad will do perfectly fine).

If you configure the dhcp server properly it should automatically register the client computer in the dns server.

Share this post


Link to post
Share on other sites
icenil    0

Connect 1 PC via ethernet to the router. Configure to obtain IP automatically. Verify that you can access the internet. Drop to a CMD and run ipconfig -all, recording these for the Ethernet connection:

- IP Address

- Subnet mask

- Default Gateway

- DNS server

Log into your router and change its DHCP IP Scope to allow at least 10 IPs it won't assign. So if it currently is set up to assign 192.168.1.1 - 192.168.1.254, then Change it so the scope starts at 192.168.1.10 or so. After doing this, release/renew the PC and verify internet access.

On the server, set a static IP on the NIC using an IP outside of the router's scope, for example 192.168.1.5. Use the Subnet mask, default gateway and DNS server that the PC had gotten. Verify access to the internet by pinging google.com (I will never recommend that you actually surf the internet with a server, but that's up to you).

Now the obvious next step would be to run DCPROMO, but there is a problem where I can't help you any further. There are other things you are going to have to find out about your router, specifically:

- how to add A record to the DNS so your clients can use FQDNs. You might actually need to do this before running DCPROMO.

- how to allow wireless clients ability to see physical devices. Most consumer routers have an internal firewall between the different network types.

How old are You kid?

Share this post


Link to post
Share on other sites
jaclaz    926

....

How old are You kid?

This is gonna be interesting I presume :yes:, do I have time for making some pop-corns? :unsure: (I already have the sofa and beverages ready)

jaclaz

Share this post


Link to post
Share on other sites
Tripredacus    285

This is gonna be interesting I presume :yes:, do I have time for making some pop-corns? :unsure: (I already have the sofa and beverages ready)

jaclaz

I hope 3 days was enough time for you! :P

Share this post


Link to post
Share on other sites
bphlpt    104

It was plenty of time. Too much in fact. My popcorn got cold and the ice melted in my drink. Give me ten minutes to get refills, then on with the show!

Cheers and Regards

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×