White Papers

Active Directory Configuration
9
Figure 2. Active Directory Domain Services Installation Wizard.
3. On the Operating System Compatibility page, click Next.
4. Select the Create a new domain in a new forest option, and then click Next.
5. Enter the FQDN of the forest root domain (for example, ci.local).
6. For both Forest and Domain functional levels, select either Windows Server 2003 or Windows
Server 2008, click Next, and then click Next.
If DNS is not already installed, you are asked to install it. Accept the default options and install
DNS.
7. Accept the default locations for the Database, Log files, and SYSVOL, and then click Next.
8. Assign a Directory Services Restore Mode Administrator Password, and then click Next.
9. On the Summary page, click Next.
10. Allow the installation to complete and restart the system when prompted.
11. Your system is now a Domain Controller that is running DNS.
Note: If DHCP is not already running on your network, you can optionally install it on the Domain
Controller ,or use static IP addresses on your network.
Installing and Configuring Active Directory Certificate Services
Installing Certificate Services as an Enterprise Root CA
1. Open Server Manager, go to Roles > Add Roles, and then click Next.
2. Select Active Directory Certificate Services, and then click Next.
3. Click Next.
4. Select the Certification Authority option.
5. Click Next > Enterprise > Next > Root CA > Next > Create a New Private Key > Next.
5. Accept the default values of CSP, key character length, hash algorithm, and then click Next.
6. Accept the default CA name, and then click Next.
7. Select the default validity period, and then click Next.
8. Select the default database and log locations, and then click Next.
9. Click Install.
When installation is complete, you should get an Installation Succeeded message as shown in the
screen host here.