Domain operation in windwos

Create a domain

The first is how to create a domain. I refer to this article.

Step by Step Guide for Windows Server 2008 Domain Controller and DNS Server SETUP

The steps in this article are very detailed, but I need to add some content during the installation process:

1. The simplest way to create a domain is to use the dcpromo command, which means Domain Controller promote to upgrade a machine to DC.
2. The "use advanced mode installation" option is not selected at the start of the installation phase. If this option is selected, you will be asked to enter NetBIOS later. NetBIOS stands for the domain name. For example, if the domain I created is corp.ist.com and netbio is set to Corp, the user name that I log on to later can be written in the format of Corp \ user1. If we do not select "use advanced mode installation", it will be set for us by default. However, I only tried to create a domain like ist.com, and then the IST is my NetBIOS.
3. In set forest functional level, I chose Windows Server 2008 because I do not need to be compatible with other versions of the domain.
4. Create a domain as the DC (domain control) or DNS server, so select DNS in additional domain controller option.

Create a domain account

To create a domain account, refer

Create a new domain user account in Windows Server 2008

Add domain

After creating a domain in DC, you can talk about other machines in the domain. For more information, see Add the computer to the domain. The most important thing in it is to set the DNS to the IP address of the DC.

Taking my environment as an example, I used VMware in Windows 7 to create Windows Server 2008 as DC (192.168.0.105), and then created two Windows 7 machines to access the domain, the IP addresses of these two machines are server1 (192.168.0.121) and server2 (192.168.0.122 ). When setting the server's preferred DNS, use the dc ip address, that is, 192.168.0.105. The default gateway still uses 192.168.0.1.

You cannot use a domain account to log on to DC.

Another thing to note is that I created a domain account in DC and tried to log on to DC. The result is as follows:

You cannot log on because the logon method you are using is not allowed on this computer

Find the solution on the Internet as follows:

Stored that "Allow Log On Locally" includes Administrators, Backup Operators, guests, andUsers. However, I found that I do not have a user and cannot add users. It seems that DC cannot be equal to a common domain account. You can only log on to a local account.

Add a domain account as a local administrator account

Before using Windows Server 2008 as the client, the following problems were encountered:

You have created a domain account in the DC, and then the client can log in through the domain account. However, the domain account does not have the permission. opening some programs will display the following error:

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

Then I log on to the client using the local administrator account and want to add the domain account to the Administrator group of administrators. The domain account can be found in the domain, but when you add the domain account, click apply, and the domain account disappears. If you add a domain account again, the system prompts user is already a member of administrators. However, it is very strange that I cannot find a domain account in the Administrators group.

After Windows 7 is installed, this problem does not exist.