How to add clients in domain advance method used in Company Environments Server side Configurations
In our last article we saw how a client can join domain. We used default administrator account for this process. Administrator account can be used in LAB environments. But in a real company environments using administrator account for joining or disjoining process create a huge security risk. Always avoid using administrator account for this process. In this article we will discuss that how we can deploy other account for this process.
We assume that you have configured server before starting this process.
Pre-quest of client process
- ADS is configured on server 2003 and working
- DNS is configured on server 2003 and working
- Client computer is connected with Server.
Once you have completed necessary steps go on server computer and login form administrative account. And open Active directory users and computers.
Right click on Users folder and select User form New options
In open window fill the user information and click on next
On password screen give password and remove tick mark from User must change password at next login
On summary screen click on Finish button
Verify that you have successfully created user accounts
Now make this user the member of built in Domain Admins group
User must be show in the Member tab of Domain Admins group's properties
Now create a computer account for client computer. Right click on Computers folder And select Computer from New options
Give client computer name [ Make sure you give exact same name which you have on client computer, Check it before giving here on client computer ]
On managed screen Do not check on This is a managed computer Click on next
On next screen click on finish
Next step is to grant the access of add client in domain. To do this open domain controller security policy
In left pane expand the local polices. In local polices select User Rights Assignment and in right pane double click on Add workstation to domain
Now add administrators [group], administrator [Account], and Vinita[ User which you want to grant the access]
Now refresh the group policy by running GPUPDATE commands in run
We have completed all necessary steps on server in our next article we will see how to use this account to make clients.
Check it now
How to add clients in domain advance method used in company environments client side configurations
