Server 2003 Ent, setting Active Directory on VM

Associate
Joined
18 Nov 2003
Posts
1,803
Hi guys, want to learn a little more on active directory so i downloaded Server 2003 enterprise from MSDN got it installed on VirtualBox, got few tutorials but want to know if i can just set one up in VM and then do some settings and permission and login as a user and see if they have taken effect without connecting client PC?

currently reading this

http://www.petri.co.il/how_to_install_active_directory_on_windows_2003.htm

Thanks
 
want to know if i can just set one up in VM and then do some settings and permission and login as a user and see if they have taken effect without connecting client PC?

I think you're asking whether you can set group policies etc up on just the server and log in as a use on that?

If so. it's not advisable as a lot of the policies are on a per machine basis.

Why not just make a client in another VM?

Burnsy
 
I think you're asking whether you can set group policies etc up on just the server and log in as a use on that?

If so. it's not advisable as a lot of the policies are on a per machine basis.

Why not just make a client in another VM?

Burnsy

yes you are correct, I got XP already installed and Vista (all on VM) so i can use XP to log in? (if i have both running, just not sure i can configure both VM OS to comminucate)

Thanks
 
If your trying to see the effect of permissions on shares then you could try \\servername from the host pc and when the login box pops up enter the users credentials.

or you could setup terminal services on the VM and RDP to the VM as the user.
 
yes you are correct, I got XP already installed and Vista (all on VM) so i can use XP to log in? (if i have both running, just not sure i can configure both VM OS to comminucate)

Thanks

It may be a bit late, but VMware is much better for this sort of thing :)

Burnsy
 
It may be a bit late, but VMware is much better for this sort of thing :)

I definitely prefer VMWare and it is a lot better than VirtualBox.



Just use the host machine to connect to the server shares you could even try using Remote Desktop too if you really want to.
 
i think i got used to VBox and also it hardly runs any process which i like, i do have VMware installed. Gonna see if i can it with VBox as i got everything installed.

Thanks
 
i think i got used to VBox and also it hardly runs any process which i like, i do have VMware installed. Gonna see if i can it with VBox as i got everything installed.

Thanks

I'm unfamiliar with VirtualBox, but if you end up with VMware and have problems, especially with the networking side, I'm happy to help :)

Burnsy
 
Hey Burnsy, i had to reinstall VMware cos i deleted the brigde to network (didnt allow repair)

after i reinstalled i got a error...so gave VB a try and found out how to get the to communicate.

(smiles) I got Server 2003 ent and XP client and i can log in as a user i created :D


but what i want to do now is create a user group (as users) and put some restrictions like not allowing to install apps. How do i do this? normally i would add snap in user groups but when i try it says i cannot and have to use AD. I also want to allowcate small HDD network space.

any one know how i can do this? is there a tutorial? the ones i found are just normal users which i have made already.

Thank you
 
You'll need to install Active Directory. Any messing around with security policies will only affect the local machine otherwise.

Installing active directory is pretty simple look here: http://www.petri.co.il/how_to_install_active_directory_on_windows_2003.htm

To give a user a network share, you'll need to set it up at a network share from the server and then you might want to set up disk quotas/shadow copy service etc.

Bare in mind that all client machines will then need to be domained to the server, so make sure the clients are either non critical (not your main rig) or VMs.

Burnsy
 
Hi, i already have active directory installed and got users ( server is VM server 2003 and client is VM XP pro) I can use XP and log into the domain.

I can create users and groups and i cannot set policy to them or disk quotas (not sure how to do this yet)

thanks
 
Right, In AD, create an OU.
Right click on the OU, goto properties
Click the group policy tab.
Create a new policy.

All users moved into that OU will then have the group policy you specified, if it doesn't automaticly enforce, go to the clicent and type gpupdate in the run box.

Burnsy
 
mate that is magic, thank you!!! really appreciate it :D

1 last thing how do i give users their own disk place?

(i doubt that will be my last thing hehe)

Thank you
 
Disk place?

Do you mean network home directory?

If so make a share on your sever say:

D:\Home shared as Home (so you can get to it from the client by \\servername\home)

Enter the active directory (start / run / dsa.msc)

Find the user and right click on him and then click on properties.
Click on the profile tab.
Near the bottom it says home folder change that to whatever letter and then in the to box type \\servername\home\%username%

This will then create a share in there as long as the user has rights to that share (so you need to give the users relevant permissions in the above directories).


M.
 
P.S. Don't worry about giving two many permissions in the top directory (I'd give them modify (do not give full control) as the folder it creates is locked down to that person.


M.
 
Hi thanks, i think i miss understood what i was trying to do.

I have got C: and D: HDD (virtual ones) when a user is created its localed in C: , but how do i only give them 50mb to use? do i do it via qouta?

also can i move these users to D: ?

D: is now being shared but on the client i have add the network drive manually, i couldnt get username only folder to work for some reason.

cheers
 
ok got a question for Adminstrators.

how many of you know binary (for IP) and how often do you calculate in ** head or paper what a IP and submask belong too?

do you just use a IP calculator?

cheers

(i'm not sure if i asking the question properly, so forgive me)
 
I just keep to standard class B addresses and use VLANs to control traffic flow :)

And yes, I know binary and can do binary arithmetic in my head.

Burnsy
 
Back
Top Bottom