Active Directory Prep - Revision history

Mauirixxx: /* FreeNAS setup */ fixed link

2017-04-17T21:26:47Z

‎FreeNAS setup: fixed link

Mauirixxx: /* Before we start */ added note about Windows Server setup differences between their versions. tl;dr: there's none.

2017-04-17T21:22:54Z

‎Before we start: added note about Windows Server setup differences between their versions. tl;dr: there's none.

Mauirixxx at 20:19, 9 May 2014

2014-05-09T20:19:55Z

Mauirixxx: /* NTP server prep / tooooo many 's

2014-05-01T20:45:21Z

‎NTP server prep: tooooo many *'s

Mauirixxx at 02:35, 28 April 2014

2014-04-28T02:35:43Z

Bigphil at 03:17, 25 April 2014

2014-04-25T03:17:45Z

Mauirixxx: added Windows time server info.

2014-04-25T02:49:19Z

added Windows time server info.

Mauirixxx: I seem to have a word.

2014-04-25T02:06:25Z

I seem to have a word.

Bigphil at 23:31, 24 April 2014

2014-04-24T23:31:02Z

Mauirixxx: added a few more screenshots

2014-04-24T23:10:20Z

added a few more screenshots

← Older revision		Revision as of 21:26, 17 April 2017
Line 36:		Line 36:

	== FreeNAS setup ==		== FreeNAS setup ==
−	* If everything went ok, move on to [[FreeNAS setup]]	+	* If everything went ok, move on to [[:Category:FreeNAS-Setup\|FreeNAS setup]]

@@ Line 1: / Line 1: @@
 [[Category:FreeNAS-AD]]
 == Before we start ==
 * We used a virtualized setup in order to create this walkthrough, using generic domain & computer names where possible.
 * We used the private IP address range of 10.10.10.x - obviously you'll want to replace our internal IP addresses with your own

← Older revision		Revision as of 20:19, 9 May 2014
Line 1:		Line 1:
		+	[[Category:FreeNAS-AD]]
	== Before we start ==		== Before we start ==
	* We used a virtualized setup in order to create this walkthrough, using generic domain & computer names where possible.		* We used a virtualized setup in order to create this walkthrough, using generic domain & computer names where possible.

@@ Line 27: / Line 27: @@
 * Verify the accuracy of your server's clock - since every computer joined in the domain will be using the DC as a time server as well, it needs to be accurate.
 == NTP server prep ==
-** From a CMD prompt, type '''w32tm /query /configuration''' - if NtpServer shows time.windows.com - you should really think about changing it.
+* From a CMD prompt, type '''w32tm /query /configuration''' - if NtpServer shows time.windows.com - you should really think about changing it.
 ** To change the time server to both use a more accurate clock, and redundant clocks, type the following:
 *** '''w32tm /config /syncfromflags:manual /manualpeerlist:"0.us.pool.ntp.org,0x1 1.us.pool.ntp.org,0x1 2.us.pool.ntp.org,0x1" /update /reliable:yes'''
 *** If you got any result '''other''' then "The command completed successfully", verify your command line. View an example successful result [[:File:W32tm command to add multiple time servers.png|<u>HERE</u>]].
 *** Restart the Windows time service by issuing the following command '''net stop w32time && net start w32time'''. View an example successful restart [[:File:Restart Windows time service.png|<u>HERE</u>]].
 == FreeNAS setup ==
 * If everything went ok, move on to [[FreeNAS setup]]

@@ Line 1: / Line 1: @@
 * Create a DNS "A" record
 [[File:DNS A record.png]]
 * Create a FreeNAS user specifically for joining the FreeNAS server to the domain, named '''freenasAdmin'''
 [[File:User freenasAdmin creation.png]]
 * Create a non-expiring password for user freenasAdmin
 [[File:User freenasAdmin password.png]]
 * Create a computer account in preparation for joining the FreeNAS server to the domain. The name should match the "A" record you created earlier.
 ** Before clicking OK to finalize the computer account creation, click "Change" and assign the previously created user "freenasAdmin" the ability to join the server to the domain
@@ Line 13: / Line 26: @@
 [[File:Computer freenas give user freenasAdmin full control.png]]
 * Verify the accuracy of your server's clock - since every computer joined in the domain will be using the DC as a time server as well, it needs to be accurate.
 ** From a CMD prompt, type '''w32tm /query /configuration''' - if NtpServer shows time.windows.com - you should really think about changing it.
 ** To change the time server to both use a more accurate clock, and redundant clocks, type the following:
@@ Line 18: / Line 32: @@
 *** If you got any result '''other''' then "The command completed successfully", verify your command line. View an example successful result [[:File:W32tm command to add multiple time servers.png|<u>HERE</u>]].
 *** Restart the Windows time service by issuing the following command '''net stop w32time && net start w32time'''. View an example successful restart [[:File:Restart Windows time service.png|<u>HERE</u>]].

← Older revision		Revision as of 02:49, 25 April 2014
Line 12:		Line 12:
	** NOTE: If you don't see the security tab, you need to switch your view to "Advanced Features" - you can see where [[:File:View Advanced Features.png\|<u>HERE</u>]].		** NOTE: If you don't see the security tab, you need to switch your view to "Advanced Features" - you can see where [[:File:View Advanced Features.png\|<u>HERE</u>]].
	[[File:Computer freenas give user freenasAdmin full control.png]]		[[File:Computer freenas give user freenasAdmin full control.png]]
		+	* Verify the accuracy of your server's clock - since every computer joined in the domain will be using the DC as a time server as well, it needs to be accurate.
		+	** From a CMD prompt, type '''w32tm /query /configuration''' - if NtpServer shows time.windows.com - you should really think about changing it.
		+	** To change the time server to both use a more accurate clock, and redundant clocks, type the following:
		+	*** '''w32tm /config /syncfromflags:manual /manualpeerlist:"0.us.pool.ntp.org,0x1 1.us.pool.ntp.org,0x1 2.us.pool.ntp.org,0x1" /update /reliable:yes'''
		+	*** If you got any result '''other''' then "The command completed successfully", verify your command line. View an example successful result [[:File:W32tm command to add multiple time servers.png\|<u>HERE</u>]].
		+	*** Restart the Windows time service by issuing both '''net stop w32time''' & '''net start w32time''' commands. View an example successful restart [[:File:Restart Windows time service.png\|<u>HERE</u>]].

← Older revision		Revision as of 23:10, 24 April 2014
Line 9:		Line 9:
	*** NOTE: Normal users in Active Directory CAN join computers to a domain, but there's a predefined limit of to how many times (it's 10) this can happen - this may not apply to Server 2008 and above, needs verification		*** NOTE: Normal users in Active Directory CAN join computers to a domain, but there's a predefined limit of to how many times (it's 10) this can happen - this may not apply to Server 2008 and above, needs verification
	[[File:Computer freenas account creation.png]]		[[File:Computer freenas account creation.png]]
		+	* Afterwards, right click on the "freenas" computer object, and select Properties, then click on the Security tab, and give the freenasAdmin user "Full Control" and click OK.
		+	** NOTE: If you don't see the security tab, you need to switch your view to "Advanced Features" - you can see where [[:File:View Advanced Features.png\|<u>HERE</u>]].
		+	[[File:Computer freenas give user freenasAdmin full control.png]]