LAB 3

WORKSHEET
DEPLOYING ACTIVE
DIRECTORY

This lab contains the following exercises and activities:

Exercise 3.1 Installing Active Directory Domain Services

Exercise 3.2 Creating a New Subdomain

Exercise 3.3 Administering a Subdomain

Exercise 3.4 Removing a Domain

Exercise 3.5 Creating a New Forest

Exercise 3.6 Administering Forests

Lab Review Questions

Lab Challenge Administering Two Forests

Workstation Reset Return to Baseline

Exercise 1 Installing Active Directory Domain Services

Overview The IT director has decided that the new division should have its
own domain, and your first assignment is to build the domain
controller for that domain on a Windows Server 2008 computer. In
this exercise, you install the Active Directory Domain Services role.
Completion time 5 minutes
Exercise 2 Creating a New Subdomain
Overview The first domain configuration you have been instructed to test is a
subdomain beneath the company’s existing contoso.com domain. In
this exercise, you create the new subdomain by promoting your
server to a domain controller.
Completion time 15 minutes

What is the fully qualified domain name (FQDN) of the new

Question domain you are creating?
1
domain01.Contosa.com

Why is the Read-only domain controller (RODC) option

grayed out on the Additional Domain Controller Options
Question page?
2
the first domain controllor in a new domain cannot be a
RROC

Exercise 3 Administering a Subdomain

Overview You have been instructed to configure the new domain so that the
administrators of the original contoso.com domain are able to
manage it. In this exercise, you use group memberships to provide
contoso.com users with access to the new subdomain.
Completion time 20 minutes

Why can’t you log on to the new domain by using your

Student## account?
Question
3
Because Student01 is a part of a different Domain and
does not have the permission
2. Press Ctrl+Prt Scr to take a screen shot of the Initial Configuration Tasks
window, showing the new domain you created in Exercise 3.2, and then
press Ctrl+V to paste the resulting image into the lab03_worksheet file in
the page provided.
 Why are you unable to create new organizational unit or user
objects in the contoso.com domain?
Question
4
Since we are signed in under the Domain01 Domain we do
not have the right to modify,change, or add users or settings

Are you now able to create new objects in the contoso.com

domain? Why or why not?
Question
5
No, i am still unable to creare new objects because i did not
restart my compyter so that the changesw take affect

Are you now able to create new objects in the

domain##.contoso.com domain while logged in with a
contoso.com user account? Why or why not?
Question
6
Yes i am able to create new objects now because on
exercise 3 i added student01 as an administrator to the
contoso.com domain giving it full permissions

Exercise 4 Removing a Domain

Overview In this exercise, you remove the domain you created prior to
creating a new forest.

Completion time 10 minutes

12. Press Ctrl+Prt Scr to take a screen shot of the Summary page, and then
press Ctrl+V to paste the resulting image into the lab03_worksheet file in
the page provided.
Exercise 5 Creating a New Forest
Overview Another possibility is to create a separate forest for the new division.
In this exercise, you promote the domain controller again, this time
keeping the new domain completely separate from the existing
domain.
Completion time 15 minutes

Now that the domain##.contoso.com domain is gone, why

can’t you administer the contoso.com domain after logging on
with your Student## account?
Question
7 Because in exercise 4 we added student01 as administor
in the domain.contoso.com domain so when we deleted
the domain we deleted the ability to administor with
studento1
2. Press Ctrl+Prt Scr to take a screen shot of the Initial Configuration Tasks
window, and then press Ctrl+V to paste the resulting image into the
lab03_worksheet file in the page provided.
Exercise 6 Administering Forests
Overview In this exercise, you examine the administrative capabilities of the
two forests in your Active Directory namespace.

Completion time 15 minutes

What is the result?

Question
The result is that i created an organizational unit named
8
SALES and added a user named MARK LEE under the
sales organizational unit.

Why were you unable to change to the contoso.com domain?

Question
Because i was logged in under the domain01.com
9
domain and forest which is a seperate entity than
contoso.com and without permissions

Why does the contoso.com domain not appear in the

Locations dialog box?
Question
10 Because i created a new domain in a new forest
(domain01.com) which is totelly apart from the
contoso.com domain
12. Press Ctrl+Prt Scr to take a screen shot of the Locations dialog box, and
then press Ctrl+V to paste the resulting image into the lab03_worksheet
file in the page provided.