Virtualization Infrastructure Windows 2008 Article 4-Joining a Windows computer to a domain

1.5 Joining a Windows computer to active Directory

You can use Active Directory for unified management only after you have joined the computer to the domain. In general, not all Windows operating systems can be joined to active Directory (domain), and only the following versions of Windows can join computers to the domain.

L Windows 2000:professional (Professional Edition), Server (server Edition), Advanced Server Edition.

L Windows xp:professional (Professional Edition).

L Windows vista:business (Business Edition), Enterprise (Corporate Edition), Ultimate (Ultimate Edition).

L Windows 7:professional (Professional Edition), Enterprise (Corporate Edition), Ultimate (Ultimate Edition).

L Windows 8:professional (Professional Edition), Enterprise (Corporate Edition).

Windows 2003, Windows 2008, R2, Windows Server 2012: all editions except the Web version.

Typically, the client that corresponds to the Windows Server 2003 server operating system is Windows Xp,windows Server 2008, and the client that corresponds to Vista,windows server R2 is Windows 7. However, these are not very restrictive, and in general, in a Windows network, a high-version workstation operating system can be added to the lower version of the server operating system, but some "advanced features" may not be supported.

Windows XP is similar to Windows 2000, Windows Server 2003, and Windows 7 operations with Windows Vista, Windows Server 2008, Windows when you join a workstation to a domain. Server R2 is similar, so the two versions will be described as examples.

1.5.1 Adding a Windows XP computer to a domain

First take Windows XP Professional as an example, the following steps:

(1) Log on to the computer as a local administrator account, modify the DNS address of each workstation, and set it as the IP address of the active Director domain controller. In this example, the IP address of the workstation setting up Windows XP is 172.30.5.31,dns as shown in 172.30.5.15,1-36.

(2) After joining the domain, it is best to modify the computer name of the workstation and restart the computer after modifying the computer name. For example, in this example, the computer name of the modified workstation is shown in xp-ws,1-37.

650) this.width=650; "height=" 632 "title=" clip_image002 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/ M00/83/6f/wkiol1dzct-thncjaafeenbxr9o625.jpg "border=" 0 "/>

650) this.width=650; "height=" 680 "title=" clip_image004 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/ M01/83/70/wkiom1dzcudqbzbuaafgkdmschq231.jpg "border=" 0 "/>

Figure 1-36 Setting the IP address and DNS figure 1-37 modifying the computer name

(3) After you enter Windows XP again, right-click the My Computer icon and choose Properties from the shortcut menu to display the System Properties dialog box. Select the Computer Name tab, click the Change button, display the Computer Name Change dialog box, select the Domain radio button in the member of Options area, and enter the domain name (heinfo.local in this example), as shown in 1-38.

(4) Click the "OK" button to display the Login dialog box, enter the domain user administrator or the delegated user name and password to add the computer to the domain permissions, first enter the domain Administrator account Administrator and the domain administrator password, as shown in 1-39. In a later chapter, you will describe how to "delegate" a normal user with the "Join Computer to Domain" permission.

650) this.width=650; "height=" 380 "title=" clip_image006 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/ M02/83/6f/wkiol1dzculzg75gaadcscsqg_a500.jpg "border=" 0 "/>

650) this.width=650; "height=" 464 "title=" clip_image008 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/ M01/83/70/wkiom1dzcubgfrxlaac5agcc3fg114.jpg "border=" 0 "/>

Figure 1-38 Entering the domain name Figure 1-39 Enter the domain user name and password

(5) Click "OK" button, join the domain successfully, prompt "Welcome to join Heinfo.local Domain", 1-40 shows. After joining the domain, restart the computer as prompted.

(6) When you log in to Windows XP later, select the Heinfo domain after "log in to", enter the domain user name, password to log in, and 1-41 as shown. In this example, enter the domain administrator account, password, and log on to Windows XP.

650) this.width=650; "height=" "title=" clip_image010 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/ M02/83/6f/wkiol1dzcufsz4b7aab_1gggvtk790.jpg "border=" 0 "/>

650) this.width=650; "height=" 403 "title=" clip_image012 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/ M02/83/70/wkiom1dzcuisxnwyaac5hxwlgx0271.jpg "border=" 0 "/>

Figure 1-40 Join domain success Figure 1-41 Log in as a domain administrator account

The description will show you how to log on to Windows XP with domain normal account.

1.5.2 adding users to the local Administrators group

By default, normal domain users cannot install software on the computer to which they are logged on. However, you can simply add the domain user name of the computer consumer to the local Administrators group on the current computer. Generally speaking, adding a normal domain user to the local Administrators group is available in the following two ways.

• Open the Active directory Users and Computers window on the server, select the user's computer from the Computers group, select the Manage command from the shortcut menu, and open the Computer Management window of the workstation to add from local Users and groups.

Use the domain administrator account to log on to the workstation and open Computer Management → Local users and groups to add.

Both of these methods require the user to have domain administrator privileges, which are typically handled by an administrator. These two methods are described in each of the following.

1. Adding on a domain server

In a Windows Server 2008 server, the steps for administering a workstation, adding a domain user to the local Administrators group of workstations are as follows:

(1) on a Windows Server 2008 server, log on as an administrator, open the Server Manager window, navigate to role →directory Domain Services →active directory Users and Computers in the left task pane, or in the Administrative tools The Active directory Users and Computers snap-in opens in the same way that you can achieve the same functionality.

In the Active directory Users and Computers snap-in, select computers on the left, list all domain-joined computers in the right pane, select the computer you want to manage, right-click, and choose Manage command from the shortcut menu that appears, 1-42.

650) this.width=650; "height=" 321 "title=" clip_image014 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/ M00/83/70/wkiom1dzcumzivbjaacpajtjhdu085.jpg "border=" 0 "/>

Figure 1-42 Managing computers

(2) If the "Unable to manage computer ..." prompt appears (see figure 1-43), switch to the Windows XP computer, turn off the Windows XP firewall settings (see figure 1-44), or select the File and Print Sharing check box on the Exceptions tab. Then return to step (1) to re-operate.

650) this.width=650; "height=" 209 "title=" clip_image016 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image016 "src=" http://s3.51cto.com/wyfs02/ M01/83/6f/wkiol1dzcuqcmnclaabzga6w2c8384.jpg "border=" 0 "/>

650) this.width=650; "height=" 628 "title=" clip_image018 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image018 "src=" http://s3.51cto.com/wyfs02/ M02/83/6f/wkiol1dzcuvwwmv9aaf2jgc8mhy834.jpg "border=" 0 "/>

Figure 1-43 Unable to connect to the workstation for management figure 1-44 shutting down the workstation's firewall

(3) After repeating step (1), open the Workstation's Computer Management window, navigate to Local Users and groups → groups, right-click Administrators in the right pane, and select Properties from the shortcut menu that appears, 1-45.

650) this.width=650; "height=" "title=" clip_image020 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image020 "src=" http://s3.51cto.com/wyfs02/ M00/83/6f/wkiol1dzcuzs6bzlaadni0llu94659.jpg "border=" 0 "/>

Figure 1-45 Administrators group Properties

(4) Open the Administrators Properties dialog box, in the Members list box, you can see the accounts in the current Administrators group, respectively, Heinfo\domain Admins (which is the Administrators group for the Heinfo domain), xp-ws\ Administrator (This is the local administrator account in the computer named Xp-ws), Xp-ws\ln (this is another local administrator account for the XP-WS computer). Click the Add button, in the Select Users, Computers, or Groups dialog box that pops up, enter the domain user or domain user group that you want to add in the enter the object names to select text box, where you enter domain Users (representing all users in the domain), click OK, and then finish adding, 1-46.

Description in actual network management, you should add a domain user account that uses the owner of the computer in the local Administrators group instead of adding the Domain Users user group. In doing the experiment, in order to save time, you can do so.

650) this.width=650; "height=" 363 "title=" clip_image022 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image022 "src=" http://s3.51cto.com/wyfs02/ M01/83/6f/wkiol1dzcu3qc-ykaac6a_ixfcq613.jpg "border=" 0 "/>

Figure 1-46 Adding a domain user group

2. On the local computer, add

For computer users, after they have joined workstations such as Windows XP (or Windows Vista, Windows 7) to the domain, they can log on with their local administrator account to complete adding the domain user account or domain user account group to the local Administrators group 's work, the main steps are as follows:

(1) Log on to the workstation with an administrator account, add the computer to active Directory, and restart. Log on to this computer using the local administrator account after startup.

(2) Right click on the "My Computer" icon, select "Manage" from the shortcut menu, display the "Computer Management" window, select "System tools → local Users and Groups → Group", 1-47.

650) this.width=650; "height=" 294 "title=" clip_image024 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image024 "src=" http://s3.51cto.com/wyfs02/ M02/83/6f/wkiol1dzcu_tbka3aadkooic-uc854.jpg "border=" 0 "/>

Figure 1-47 the Computer Management window

(3) Double-click Administrators on the right side of the window to open the Administrators Properties dialog box, click the Add button and add the domain user account, as shown in 1-48.

650) this.width=650; "height=" 329 "title=" clip_image026 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image026 "src=" http://s3.51cto.com/wyfs02/ M01/83/70/wkiom1dzcvcyhc9uaac15p4u5om237.jpg "border=" 0 "/>

Figure 1-48 Adding a domain user account

"description" in the actual work, when added, will pop up "Enter user name or password" prompt, at this time, enter their own domain user account and password can be (assigned by the administrator). If you are experimenting, you can use a domain administrator account or password, or a user name and password that was previously created named Ws01.

(4) Click the "OK" button to join the domain user to the Administrators group successfully. Log off the current user and log back on to the domain.

1.5.3 adding windows 7 to Active Directory

The steps to join Windows 7 to a domain are similar to the steps for joining Windows XP to a domain, with the following main actions:

(1) Modify the Windows 7 computer name (see Figure 1-49), set the IP address and DNS (see Figure 1-50).

650) this.width=650; "height=" 441 "title=" clip_image028 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image028 "src=" http://s3.51cto.com/wyfs02/ M02/83/6f/wkiol1dzcvgjgr9laacuuk9lj2i358.gif "border=" 0 "/>

650) this.width=650; "height=" 593 "title=" clip_image030 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image030 "src=" http://s3.51cto.com/wyfs02/ M00/83/70/wkiom1dzcvlwr881aae5gqfajqs846.jpg "border=" 0 "/>

Figure 1-49 Modifying the computer name Figure 1-50 Setting the IP address with the DNS

(2) Log in with an administrator account, join the computer to the heinfo.local domain, and enter the domain Administrator account and password in the "Computer name/Domain Change" dialog box that appears in 1-51.

650) this.width=650; "height=" 463 "title=" clip_image032 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image032 "src=" http://s3.51cto.com/wyfs02/ M00/83/70/wkiom1dzcvbg9n9xaad0mnwswjy422.jpg "border=" 0 "/>

Figure 1-51 joining a computer to a domain

(3) After joining to the domain, do not restart, open "Computer management → system tools → local Users and groups → groups", in the right pane, right-click Administrators, in the popup shortcut menu, choose "Add to Group" command, 1-52 is shown.

650) this.width=650; "height=" 351 "title=" clip_image034 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image034 "src=" http://s3.51cto.com/wyfs02/ M01/83/70/wkiom1dzcvjc6n-iaacxnzlzyni272.gif "border=" 0 "/>

Figure 1-52 Adding to a group

(4) In the Administrators Properties dialog box, click the Add button to bring up the Select User, computer, service Account, or Group dialog box, enter the domain user account or group you want to add in the Enter the object name to select text box, click the Check Names button, and the Enter the Network Password dialog box, enter the domain user account (for example, the WS01 account created in the previous section), and then click the OK button, shown in 1-53.

650) this.width=650; "height=" 384 "title=" clip_image036 "style=" border:0px;padding-top:0px;padding-right:0px; Padding-left:0px;background-image:none, "alt=" clip_image036 "src=" http://s3.51cto.com/wyfs02/M02/83/6F/ Wkiol1dzcvmri9ilaadlc6h5bj4525.jpg "border=" 0 "/>

Figure 1-53 Adding the Domain Users group to the Administrators group

(5) After adding, close the Computer Management window, and then restart Windows 7 to complete the operation of joining the computer to the domain, adding domain users to the local Administrators group.

After reading the article, please vote for my vote (Wang Chunhai), thank you

Http://edu.51cto.com/activityvote/voteRanking

This article from "Wang Chunhai Blog" blog, reproduced please contact the author!

Virtualization Infrastructure Windows 2008 Article 4-Joining a Windows computer to a domain