Now that we've finished rebooting, what are some of the things that we're accessing our system.
What are some of the things we need to know about working with it now that it's a domain controller?
Sure, I think the first cool thing is the fact that when you first log on, it's not gonna accept your machine administrator name anymore because now you're in a real domain.
So now what we've got, we have to click on Use Another Account and say, bicontoso\administrator.
The reason why you need to do that is because now that it's a domain controller, a lot of the local machine accounts that you have are now really domain accounts, because we're on the actual domain controller.
That means the local accounts are no longer there. So, for example, you'll notice some things that are maybe a little bit different when you go in and look at your configuration. Where normally, you would see Users as an option off of your configuration, it's no longer there anymore because there are no local users, because we're sitting on a domain controller. Now, when we go to add users, we have to go in through the Active Directory Users and Computers options and enter in users that way.
So the first thing you want to do is do a Start, Administrative Tools and then notice all of these new Active Directory options that will show up on your computer icon. Now, you have Active Directory users and computers that will show up and recognize that out of contoso.com is where the various users will actually be stored.
So, once here, then you can go in and click Users and see the various users that are in your domain and you'll notice what was your machine administrator is now a domain administrator.
Then, from here, you would go ahead and select a new user and create a new user. We'll pick Sue Smith. We give her a name of S-S-M-I-T-H, this is a user name for Contoso, and you see now she has a logon of BIContoso SSmith.com for what she can do. We'll say that the password never expires so that she can change it herself.
We create the user, so now we have Sue Smith.
The other thing that's kind of interesting is because of the way this process works, if I want to add Sue Smith as a domain administrator, I come in here and say, Add To Group and then I can add her to the group that I want to add, which is Domain. Now, Sue is now a domain administrator, and since we're all on a local machine, she's now the machine administrator and I can log off and log back in as her, and that's how we'll do our product installations off of there. She's a machine admin and she's all ready to go.
So if I need to create any more, any additional accounts that have administrator permissions, do they also need to be domain administrators?
Well, since this a single machine, if you make them administrators of this machine, they will be domain administrators. There's no notion of a separate administrator for this machine per se. Since it's a domain controller, any kind of local groups that you would create or local machine accounts that you would create are really part of the domain. That's why that disappears off of your regular Server Manager and you come in and do it here, okay?