Skip to content

Latest commit

 

History

History
51 lines (33 loc) · 2.34 KB

confclientpc.md

File metadata and controls

51 lines (33 loc) · 2.34 KB
Raw

Configuring Windows Client PC to join Active Directory (AD DS)

It is recommended to first add the user to the Active Directory and then join the computer to the Domain.

Add User to Active Directory

  1. Adding the USER to AD is done from a menu "Tools -> Active Directory Users and Computers"

Here you can add new Organization Units (OU) and/or Groups to the AD.

Organizational Units and Groups in Active Directory

  • Organizational Units vs Groups In Active Directory

Groups have SIDs, can be placed on access control lists, and can contain other groups (even the same type of group referred to as group nesting). Organizational units do not have SIDs, can't be placed on an access control list, and can not be placed into a group.

  • What is the difference between group and organizational units in Active Directory?

The difference between an OU and a group is that OUs can contain different kinds of objects rather than being limited to accounts or groups, whereas groups can only contain accounts and other groups.

Аdded a test user:

Client machine network status:

After installation on the client machine, the network settings are:

  • IP by DHCP (it can be seen that it was taken automatically)
  • DNS is also automatic

Add Client machine to AD

  1. In Windows Explorer right click on "This PC" -> "Properties"
  2. Find "Rename this PC (advanced)"
  1. In the section "... rename this computer ..." click (change)
  1. In the section "Member of" change from Workgroup to Domain

  1. Will be prompted to log in to Windows Server for authorization; If you authenticate correctly you will be greeted with "Welcome to domain domain.local and a Restart message.
  1. After the restart, you will be able to log in to the domain with the previously created user and password.