How to create Active Directory Group in Windows Server 2019

For better administration, Windows Server classifies the groups as follows:

• Distribution groups. Used to create e-mail distribution lists
• Security groups. Implemented to assign permissions to shared resources in the domain

As for the scope of location, Windows Server classifies the groups in:

• Universal: Applies to both local and external connections
• Global: Applies to all computers and servers in the domain
• Domain local: This applies only to the local server with Windows Server 2019

Before starting to create the group it is advisable to create an organizational unit, as I show you here. The first thing you have to do is go to the Server Manager. Then, from the Tools menu please select Active Directory Users and Computer:

Then right-click on the organizational unit. Then select New>Group

A wizard will immediately be displayed to assign the group name and manage other aspects. Such as the scope and type of the group.

Finally, you can see the successfully created group:

How to add members to a group in Windows Server

There are a couple of methods to add users to a group on Windows Server. The first is through the properties of the group itself. To do this, double-click on the group and then click on the Members tab. Then click on Add.

Then enter the name of the user you want to add to the group. It is also necessary to check the name to verify the existence of the user.

Back to the previous screen you can see that the user has been added successfully. Please press OK to save the changes.

The other way to add a user to a group is through the user’s own properties. With this in mind, double-click on it and then select the Member of tab

Once again, add the name of the group and check to verify its existence:

Back to the previous window, you can see the new group added. Please click OK to save the changes.

Conclusion

At the end of the day we have seen how to create Active Directory Groups in Windows Server 2019/2016. Therefore, user management tasks are greatly facilitated. All right, that’s it for now. Stay tuned for more info on Windows Server. See you later!

The post How to create Active Directory Groups in Windows Server 2019/2016. appeared first on Linux Windows and android Tutorials.

Creating user template from the Server Manager. Generating a new user.

The first thing you have to do is go to the Server Manager. Once there, open the Tools menu and click on Active Directory Users and Computers.

An administration console will be immediately deployed. Please click on Users. Then right-click on an empty space and follow the path below: New>User

Then enter the data of the new user.

On the next screen, please enter the user’s password. It is also possible to configure some general aspects about it. Press Next to continue

Next we will see a summary of the account to be created. Click on Finish to complete the process.

Setting up some aspects of the new user.

With the previous steps, we have created the basic elements of a new user. However, it is possible to configure some more aspects. With this intention, please double-click on the new user. In this opportunity we will see the groups where the new user is. To edit this configuration, please click on the Member of tab. Then click on Add to enter a new group.

Another aspect that you can edit is the time range allowed for user input. With this intention, click on the Account tab and then on Logon Hours

Once there, please edit the time allowed for the Logon. Press OK to continue

Similarly, we can add any other data relevant to the user.

Creating the new user template in Windows Server

Once the new user is created, it is time to generate the template. With this in mind, right-click on the user and then click on Copy.

In the next window, please enter the data of the new user.

Once again, enter the password for the user.

Finally you will see a message confirming that the data was copied from one user to another.

You can check the above, verifying some configuration of the new user. For example, the Logon times.

Conclusion

At the end of the day, we saw how to create user template in Windows Server 2019/2016. This facilitates the process of creating multiple users. In addition, the time saved can be spent on other important tasks for the company. Very good! That’s all for now. Before I say goodbye, I invite you to see our post about backing up and restoring GPO on Windows Server. Bye!

The post How to create user template in Windows Server 2019/2016 appeared first on Linux Windows and android Tutorials.

Hello! A fundamental purpose of a server is to be able to manage the components of the organization’s domain. Consequently, it is necessary to be able to correctly configure the server to function as a domain controller. Indeed, the organization can be part of an existing domain or implement a new one. This is a fundamental task since this feature allows it to be managed through the Active Directory. In addition, the domain controller allows centralized management of items relating to users and their data. Well, in this post we will see how to create a domain controller in Windows Server 2019/2016.

Previous server settings to create a domain controller.

Before installing the domain driver, it is necessary to make some modifications to the server. This requires an administrator account. Well, in the first place it is necessary to change the name of the server. This step is not strictly necessary, but it allows you to work more comfortably. With this intention, from the Server Manager, please select the Local Server. Once there, click on the name of the computer:

In the next window, please click on the Computer Name tab. Then press Change:

Now, set the new name you want to assign for the server. Finally, press OK to save the changes.

Finally, restart the server to set the new name.

Now, it is time to modify the IP address of the server. That is, by default the system obtains the IP address automatically and dynamically. For Windows Server to work properly, the IP address must be static.

Install the Active Directory Domain Services role

Now it’s time to add the Active Directory domain service role. In addition, the administrator must have a secure password before proceeding. And that the updates of Windows Update have been installed. Then, from the Server Manager click on Add Roles and Features.

In the warning message, please click on Next.

Two configuration options are shown below. Please click on Role-based or feature-based installation:

Now select the server where the domain controller will be installed.

The following window shows the server roles available for installation. Please check the box corresponding to Active Directory Domain Services

Immediately a window will be displayed with the additional options to be installed. Please click on Add Features.

Please verify that the corresponding box is checked and press Next.

You can skip the following information by clicking on Next

Now the wizard shows brief information about Active Directory Domain Services. Press Next to continue.

Now, it is time to confirm the installation.

Installation will begin immediately. After a few minutes, the process will be successfully completed:

Promoting the server to domain controller

After the installation of the role is completed, the server manager will warn about a pending task. Indeed, clicking on the warning signal will indicate that it is necessary to promote this server to a domain controller.

Now it is time to select the deployment operation. Please add a new forest.Then enter the domain name.

In the next screen, three items need to be configured. In the first place, the level of functionality of the new forest and root domain. Then the domain controller capabilities. And finally the Directory Services password.

You can disregard the warning about DNS delegation. Since this can be solved later.

Now specify the address of the paths in the active directory. You can leave it as default, or modify it according to your preference.

Now check the installation of the server elements.

Finally, the wizard will verify the installation prerequisites.

Installation will begin immediately. After a few moments, the server will be restarted.

After the server is restarted, you will see the domain name in the login window.

Finally, you can start managing the domain controller from the server manager.

Conclusion

Ultimately we have seen how to create a domain controller in Windows Server 2019/2016. From now on the company has this tool to manage functions. Before I say goodbye I invite you to see our post about how to change the local administrator’s password in Windows Server. Bye!

The post How to create a domain controller in Windows Server 2019/2016 appeared first on Linux Windows and android Tutorials.

How to open the active directory administrative center.

Once the server is started, please press the Win+R combination. Then run the following command:

dsac.exe

After pressing enter or accept, the loading of the Administrative Center will begin:

After a few seconds, the administration center interface is displayed. As you can see, it looks very similar to the Server Administrator.

How to Use Active Directory Administration Center

Once the console is displayed, please click on the domain:

The domain structure will then be displayed in the right-hand column. Items such as computers, deleted objects and groups are displayed. In addition, it is possible to perform searches using more complex criteria. On the other hand, by clicking on any element of the domain, you can extend the search range. With this intention, just click on the top menu to add extra search criteria.

As you can see, this element facilitates the administration tasks. In addition, it allows you to create customized queries based on your search criteria.

On the other hand, there is Dynamic Access Control. In this section, you will find the rules and policies for access to the server.

Next is the Authentication section. There you will see the various options for authentication based on policy and others. And finally, there is the global search section:

As the name suggests, as soon as you enter a value, the results are displayed.

The Administrative Center allows the development of diverse tasks. For example, adding a new user. With this in mind, select the folder and right click on the mouse. Then select to add a new user:

Finally, it is possible to review the history of the cmdlets used in the system. That is the date and time of their execution in the system. To do this, just click on Windows PowerShell History.

Conclusion

At the end of the day, we saw how to use the Active Directory Administrative Center in Windows Server 2019/2016. Obviously, this tool allows you to centralize the administration of various elements of the server. We hope you find this information useful before I say goodbye I invite you to see our post about Thumb Launcher. Bye!

The post How to use Active Directory Administrative Center in Windows Server 2019/2016. appeared first on Linux Windows and android Tutorials.

Active Directory Recycle Bin was released back in 2012 with the releases of Windows Server 2012. And with the release of Server 2016 the technology Is more mature and easy to use.

Administrators can restore deleted Items with a few easy clicks with Active Directory Recycle Bin. However, for the feature to work the recycle bin need to be enabled first and once enabled you can’t disable it.

If you’ve deleted a user before enabling the AD Recycle Bin, you won’t be able to restore it.

Deleted object will stay in the recycle bin for 180 days.

You will need an Administrator account first.

Log In a Domain Controller or a Server that has the RSAT tools Installed and open Active Directory Administrative Center

In the ADAC right-click on the domain and click on Enable Recycle Bin…

Confirm by clicking OK

Click OK

Once done, Refresh the console and you will see a new Deleted Objects OU. Next time you delete a user and need to restore it you will see In the OU

If you click on a deleted object you will have the option to restore it its original location or a different location

The post How To Enable Active Directory Recycle Bin appeared first on Linux Windows and android Tutorials.

Prerequisites

• The client computer running Windows 10 must be added to a domain running Windows Server 2019. If you don’t know how to do it, I invite you to read this tutorial.
• This function runs only on Windows 10 Professional, Windows 10 Enterprise and Windows 10 Education
• An equal version to or more recent than Windows 10 October 2018 Update.
• Users with a version prior to Windows 10 October 2018 Update, can download and install the RSAT package from here.

Adding Remote Server Administration Tools on Windows 10.

Starting with Windows 10 October 2018 Update, RSAT is included as a set of “Features on Demand” in Windows 10 itself. So what we are going to do is add the feature. With this in mind, type optional in the search bar and select Add an optional feature.

A list of options will open. Click on Add a feature

In the following box navigate to RSAT and there download the function you need.

Once you have selected them, go back to the previous screen to see the progress of the installation.

This process will take several minutes, depending on the speed of your connection. After the installation is done, let’s check if it’s working. With that in mind follow this path: Control Panel>System and Security>Administrative Tools.

Then double-click on Active Directory Users and Computers. The Active Directory will then be opened

Add user in Active Directory

To add a user in Active Directory we need to use an account with administrative privileges. With this in mind, on the welcome screen you have to follow the following syntax in the username:

nameofserver/Administrator

In my case, I am working with the Telematic server. Then enter the password. Once the system loads, start Active Directory as explained above. Locate the users folder and right-click on it. Once the system loads, start Active Directory as explained above. And then select new user.

We are going to create a user named Tom Sawyer.

In the following box assign the password, duration and if the user can change it. It also establishes if the account is active or not.

Confirm the parameters and press finish to create the new user.

All right, that’s it for now. Finally, we have learned to install Active Directory in Windows 10. This will allow us to use all the functions offered by this management tool. Before saying goodbye, I would like to invite you to join our Telegram channel.

The post How to install Active Directory on Windows 10. appeared first on Linux Windows and android Tutorials.

Introduction

“Flexible Single Master Operation” (FSMO) is a Microsoft Active Directory feature that is a specialized domain controller task used when standard data transfer and update methods are inadequate. Tasks that do not suit multi-master replication are only viable as flexible single-master operations.

Multi-master models have a number of operators, which are held by a single master. This problem is solved by applying a number of operations to a single domain controller. A single domain controller holds the role for a particular operation and is the single master for that operation. These operation masters are called flexible single-master operations.

The FSMO roles are logical Server roles that control the management and operation of an Active Directory Domain, the roles are listed below:

• Schema master
• Domain naming master
• RID master
• PDC emulator
• Infrastructure master

In most Active Directory environments the roles are located on the first deployed Domain Controller and In most places, the roles are always kept together for simplicity reasons.

When upgrading a Domain or retiring a Server we must move the roles before decommissioning the old Domain Controller.

FSMO Transfer

The move operation is done using 3 consoles as you will see below.

To get started, Open Active Directory Users and Computer and right-click on the domain and select Change domain Controller to the new Domain Controller

How to Move FSMO Roles on Windows Server 2016

Once connected to the new DC, Right click again on the Domain and select “Operations Masters”.

From here I’ll change 3 roles as you will see below

To move the role, Click change

Next, I’ll change the Domain Naming roles, by opening Active Directory Domains and Trusts and again right click on Operations Master

Once again, Click change

How to Move FSMO Roles on Windows Server 2016

Next, I’ll move the scheme Master Role, for that I’ll need to register Schema master MMC Console for the run task bar: Regsvr32 schmmgmt.dll

Once the MMC registered, Open the MMC and the “Active Directory Schema” snap-in

Once again, right click and select “Change Domain Controller”.

Select the New DC from the menu and click OK

Right Click again select Operations Master

Click Change

Finally, To verify that FSMO roles have moved to the new Server, type the cmdlet:

netdom query fsmo

Felicitation, you have done a great job. Now you can securely remove the old Domain Controller.

The post How to Move FSMO Roles on Windows Server 2016 appeared first on Linux Windows and android Tutorials.

In addition to the immediate benefit of having that data on a file server that is much easier to keep backed up, the user also gets the benefit of being able to go to multiple computers in your organization and still have access to their data. Using the default Windows settings and the default share settings on your file server, this redirection will be even made available offline automatically for your users. Let’s get started.

01 – Create a Shared Folder

On your server, on second Local Disk create New folder.

Right-click the New folder (I rename it to “Redir“), click Share with, and then click Specific people.

In the File Sharing dialog box, click the drop-down arrow, select Everyone, and then click Add.

For the “Everyone group” section, click the Permission Level drop-down arrow, and then click Read/Write. Click Share, and then click Done.

02 – Create a GPO to redirect the Documents folder

Open Server Manager, click Tools and then click Group Policy Management.

In the navigation pane, right-click on the domain name, and then click Create a GPO in this domain and Link it here.

In the New GPO dialog box, in the Name text box, type Folder Redirection, and then click OK.

Now In the navigation pane, right-click Folder Redirection, and then click Edit.

In the Group Policy Management Editor window, under User Configuration, expand Policies, expand Windows Settings, and then expand Folder Redirection.

Right-click Documents, and then click Properties.

In the Document Properties dialog box, on the Target tab, click the Setting drop-down arrow, and then select Basic-Redirect everyone’s folder to the same location.

Ensure that the Target folder location box is set to Create a folder for each user under the root path.

In the Root Path text box, type \\Server\Redir, and then click OK.

In the Warning dialog box, click Yes.

On the Client PC, right-click Documents, and then click Properties.

Verify that on the General tab, the Location field has a value of \\Server\redir\username.

If not type the following command : gpupdate /force, Sign out and Sign in again.

The post How to Configure Folder Redirection in Windows Server 2016 appeared first on Linux Windows and android Tutorials.

Azure AD connect is completely free to use and synchronize even if we don’t own any cloud subscriptions. It is an upgraded version of Azure AD sync and Dirsync.

Requirement for Azure AD connect

1. Azure AD tenant. (domainname.onmicrosoft.com)
2. AD schema version and forest functional level (FFL) must be set to Server 2003 or higher.
3. Domain Admin credential.
4. Global Admin of the tenant.
5. Add and verify the domain.
6. Update the UPN name of the users in local AD to match the public domain name verified in the cloud. (UPN suffix to be updated from user@domain.local to user@domain.com)
7. SQL database (optional- To manage 100,000+ objects)
8. Ports to be allowed in firewall – https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports

Microsoft recommends to use Idfix Dirsync error remediation tool before initial sync to remediate the object errors in the Active Directory preparation.

Installation of Azure AD connect

1. Download the latest Azure AD connect and double-click on the installed file for installation.

2. Read the license agreement and click ‘Continue’ if you agree.

3. Azure AD connect is available to install as ‘Custom installation‘ and ‘Express installation‘. Click ‘Customize‘ to enter custom installation.

• Custom installation provides option to specify custom location, sync only the selected OU, adding the SQL server instance. Proceed with custom installation to sync users only from the selected OU.

• Express installation is recommended by Microsoft for single server forest. By default, password hash sync and auto upgrade is enabled with express settings. Proceed with express installation to sync the entire domain. In this example, we installing with express install option.

4. Enter the credential of the Azure AD Global admin and click ‘Next‘.

5. Enter enterprise admin credential of on premise AD and click ‘Next’

6. In Next step, AD connect will verify that UPN suffix of local AD matches with added custom Azure AD domain. Verify your domain and click ‘Next’.

7. Configure: Select ‘Synchronization process’ to start sync immediately. Select ‘Exchange hybrid deployment’ if planning to migrate mailboxes (Recommended). Click ‘Install’

8. AD connect will install synchronization service and initiate sync between local AD and Azure AD.

9. Congrats! Configuration is completed successfully. 

10. Verify the configuration : Login in to Microsoft 365 admin center – https://admin.microsoft.com with global admin credential to verify initial sync.

• Also verify the login of  https://portal.office.com using on premise AD user credential.
• By default, sync between local AD and Azure AD occurs in every 30 minutes. To force AD sync Open Windows Azure Active directory powershell and run following commands:
  Import-module Adsync
  Start-ADSyncSyncCycle -PolicyType Delta          # To initiate Delta Sync
  < or > 
  Start-ADSyncSyncCycle -PolicyType Delta       # To initiate Full Sync
• An Azure AD tenant allows by default 50K objects and increased to 300K objects on domain verification.

The post Install and configure Azure AD connect in server 2019 appeared first on Linux Windows and android Tutorials.

Although this may be true, it presents a serious security issue, inasmuch as, all the information is sending in a clear-text sign-in protocol, including username and password of the account. In that sense, if a malicious user intercepts connection, then he can steal valuable data. For secure transmission that protects the username and password, and encrypts the content, FTP is often secured with SSL/TLS (FTPS) or replaced with SSH File Transfer Protocol (SFTP).

Installing FTP Server in Windows Server 2019. Adding Web Server (IIS)

In order to install FTP server, we need to assign a static IP to our connection. Then go the dashboard and select Add roles and features

On the nex window, we select next. The wizard is a very intuitive tool for configuring services of the server.

Select Role-based or feature-based installation

Select the server where we will install the services.

Next, on the list of roles to install, we need to check Web Server (IIS), a new window will be open with a description of the features required to manage it. Just select Add features and later press next.

In addition, press Next twice until we getting to role services windows. Once there, check FTP Server and select next to continue the installation. Then, select install to start the procedure and we have to wait until the installation is completed.

Adding group and users to FTP Server

Now, we must add users and groups on Active Directory Domain, with this intention, that feature would be installed in Windows Server, if you do not how to do it, please check our site’s article. For the purpose of it, in the dashboard, select Active Directory Users and Computers

In the next windows, we will create two users (for example) and a group to add them. For it, select user folder, right-clicking on it, New, User. And just type the user’s credentials as you wish, like the name and password. In my particular case, I added two users: rogerpol and josuepol.

Now, we need to create a group where users will belong. Once again, click on user, new and group.

Assign the group’s name, in my case I use telematic.ftp.

Select both of the users to add to the group recently created, by right-clicking on names.

The next point is to create the repository where we have to store the FTP information, for this we create a folder in the C drive, called Totem FTP (for example) and this must be edited as follows. Right-click on Properties and there, we select the Security tab, click on Advanced.

We need to click on disable inheritance, in the popup window select convert inherited permissions into explicit permissions on this object.

Now again in the Security tab click on Edit and there we will remove the Users group

We will add the group we have created for FTP, in my case telematic.ftp and provide the necessary permissions by activating the corresponding boxes. Click Apply and then Accept

Creating FTP site

Now is time to create our FTP site. For the purpose of that, we have to open dashboard, tools and select Internet Information Services (IIS) Manager.

On the window, select Sites in order to add FTP Site

Assign FTP site name and specific physical path to the folder previously created and press Next.

Select Ip Address to site and select No SSL. And press next.

Set Basic authentication, to management entry by user and password, and allow authorization to the group previously created (in my case: telematic.ftp) just press next and our FTP site will be created.

Testing FTP server

In order to test our FTP site, we must run a CMD terminal and type ftp ip address (in my case is 192.168.1.59) and insert user and password.

This is it, It has been a long, but very productive way. Now we can seize the advantages of this feature.

The post How to install FTP Servers in Windows Server 2019 appeared first on Linux Windows and android Tutorials.