Active Directory Prep

2014-04-25T03:17:45Z

Bigphil:

* Create a DNS "A" record
[[File:DNS A record.png]]
* Create a FreeNAS user specifically for joining the FreeNAS server to the domain, named '''freenasAdmin'''
[[File:User freenasAdmin creation.png]]
* Create a non-expiring password for user freenasAdmin
[[File:User freenasAdmin password.png]]
* Create a computer account in preparation for joining the FreeNAS server to the domain. The name should match the "A" record you created earlier.
** Before clicking OK to finalize the computer account creation, click "Change" and assign the previously created user "freenasAdmin" the ability to join the server to the domain
*** NOTE: Normal users in Active Directory CAN join computers to a domain, but there's a predefined limit of to how many times (it's 10) this can happen - this may not apply to Server 2008 and above, needs verification
[[File:Computer freenas account creation.png]]
* Afterwards, right click on the "freenas" computer object, and select Properties, then click on the Security tab, and give the freenasAdmin user "Full Control" and click OK.
** NOTE: If you don't see the security tab, you need to switch your view to "Advanced Features" - you can see where [[:File:View Advanced Features.png|HERE]].
[[File:Computer freenas give user freenasAdmin full control.png]]
* Verify the accuracy of your server's clock - since every computer joined in the domain will be using the DC as a time server as well, it needs to be accurate.
** From a CMD prompt, type '''w32tm /query /configuration''' - if NtpServer shows time.windows.com - you should really think about changing it.
** To change the time server to both use a more accurate clock, and redundant clocks, type the following:
*** '''w32tm /config /syncfromflags:manual /manualpeerlist:"0.us.pool.ntp.org,0x1 1.us.pool.ntp.org,0x1 2.us.pool.ntp.org,0x1" /update /reliable:yes'''
*** If you got any result '''other''' then "The command completed successfully", verify your command line. View an example successful result [[:File:W32tm command to add multiple time servers.png|HERE]].
*** Restart the Windows time service by issuing the following command '''net stop w32time && net start w32time'''. View an example successful restart [[:File:Restart Windows time service.png|HERE]].

Active Directory Prep

2014-04-24T23:31:02Z

Bigphil:

* Create DNS "A" record
[[File:DNS A record.png]]
* Create a FreeNAS user specifically for joining the FreeNAS server to the domain, named '''freenasAdmin'''
[[File:User freenasAdmin creation.png]]
* Create a non-expiring password for user freenasAdmin
[[File:User freenasAdmin password.png]]
* Create a computer account in preparation for joining the FreeNAS server to the domain. The name should match the "A" record you created earlier.
** Before clicking OK to finalize the computer account creation, click "Change" and assign the previously created user "freenasAdmin" the ability to join the server to the domain
*** NOTE: Normal users in Active Directory CAN join computers to a domain, but there's a predefined limit of to how many times (it's 10) this can happen - this may not apply to Server 2008 and above, needs verification
[[File:Computer freenas account creation.png]]
* Afterwards, right click on the "freenas" computer object, and select Properties, then click on the Security tab, and give the freenasAdmin user "Full Control" and click OK.
** NOTE: If you don't see the security tab, you need to switch your view to "Advanced Features" - you can see where [[:File:View Advanced Features.png|HERE]].
[[File:Computer freenas give user freenasAdmin full control.png]]

FreeNAS using Active Directory Wiki - User contributions [en]

Active Directory Prep

Active Directory Prep