<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://www.lunetikk.de/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="https://www.lunetikk.de/feed.php">
        <title>Lunetikk's IT Wiki windows:windowsserver:activedirectory</title>
        <description></description>
        <link>https://www.lunetikk.de/</link>
        <image rdf:resource="https://www.lunetikk.de/lib/tpl/mindthedark/images/favicon.ico" />
       <dc:date>2026-04-24T15:57:38+00:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:configuration&amp;rev=1488369020&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:environment&amp;rev=1488369020&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:gpo&amp;rev=1512749306&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:groupsusers&amp;rev=1488369020&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:intro&amp;rev=1488369020&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:trust&amp;rev=1488369020&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="https://www.lunetikk.de/lib/tpl/mindthedark/images/favicon.ico">
        <title>Lunetikk's IT Wiki</title>
        <link>https://www.lunetikk.de/</link>
        <url>https://www.lunetikk.de/lib/tpl/mindthedark/images/favicon.ico</url>
    </image>
    <item rdf:about="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:configuration&amp;rev=1488369020&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2017-03-01T12:50:20+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>windows:windowsserver:activedirectory:configuration</title>
        <link>https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:configuration&amp;rev=1488369020&amp;do=diff</link>
        <description>Configuration

You can add shares with rights for your groups.

Release shares and set rights

At first you need to create directorys on your AD named “MA-share” and so on.
To enable those, rightclick -&gt; options and open tab “enabling”. Now open</description>
    </item>
    <item rdf:about="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:environment&amp;rev=1488369020&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2017-03-01T12:50:20+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>windows:windowsserver:activedirectory:environment</title>
        <link>https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:environment&amp;rev=1488369020&amp;do=diff</link>
        <description>Environment

You need to install an AD-server (with its own forest) with a new domain.
The server needs its own DNS and a configured Reverse-Lookup-Zone.
There also have to be atleast 2 Windows XP clients.

Configuring the domain

The installed Windows Server 2008 R2 should have a static ip and activated remote desktop. First you add the role</description>
    </item>
    <item rdf:about="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:gpo&amp;rev=1512749306&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2017-12-08T17:08:26+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>windows:windowsserver:activedirectory:gpo</title>
        <link>https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:gpo&amp;rev=1512749306&amp;do=diff</link>
        <description>GPO

I chose some policies just for a test:
- Group1 gets a red background
- Group2 has no rights to select “Systemcontrol”
- Group3 is the only group with remotedesktoprights
- Group4 has www.google.com for the startingpage (Internet Explorer)
- Group5 will be connected to a network share which will be opened automatically.</description>
    </item>
    <item rdf:about="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:groupsusers&amp;rev=1488369020&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2017-03-01T12:50:20+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>windows:windowsserver:activedirectory:groupsusers</title>
        <link>https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:groupsusers&amp;rev=1488369020&amp;do=diff</link>
        <description>Groups and Users

You can add all sections of a company like Marketing, FacilityManagement, Hotline and so on.

Adding users and groups

At first you have to create an organisation unit (OU).
To do this go to “Start -&gt; Programfiles -&gt; Administration</description>
    </item>
    <item rdf:about="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:intro&amp;rev=1488369020&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2017-03-01T12:50:20+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>windows:windowsserver:activedirectory:intro</title>
        <link>https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:intro&amp;rev=1488369020&amp;do=diff</link>
        <description>Active Directory

This documentation is about the configuration of a Windows Server 2008 with Active Directory and Windows XP.
ATTENTION: THIS DOCUMENTATION IS NOT ABOUT INSTALLING A WINDOWS SERVER 2008 R2, WINDOWS XP OR VMWARE!

What is

Active Directory?</description>
    </item>
    <item rdf:about="https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:trust&amp;rev=1488369020&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2017-03-01T12:50:20+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>windows:windowsserver:activedirectory:trust</title>
        <link>https://www.lunetikk.de/doku.php?id=windows:windowsserver:activedirectory:trust&amp;rev=1488369020&amp;do=diff</link>
        <description>Trust

I connected 3 AD's to test the trust. They are named: AD1, AD2, AD3.

Set a trust

First you need to enable Zonetransmission on all 3 servers. To do this go to DNS -&gt; Domain -&gt; rightclick -&gt; Options -&gt; Zonetransmission 
-&gt; enable Zonetransmission. You also need to enter all</description>
    </item>
</rdf:RDF>
