newbie questions

  • Thread starter Thread starter s
  • Start date Start date
S

s

I am an absolute newbie to Active Directory and System administration
in general. I have read Active Directory 2nd edition by O Reilly. Can
anybody please give some ideas for a total starter? Should I read more
or should I start experimenting? I am going through group archives
which is helping me a lot.

Also, are there any specific points a newbie should be aware of?

Your help and time would be highly appreciated.

Thanks a lot.
 
s said:
I am an absolute newbie to Active Directory and System administration
in general. I have read Active Directory 2nd edition by O Reilly. Can
anybody please give some ideas for a total starter? Should I read more
or should I start experimenting?

Both, but if you have to pick on then experimenting.

You have absorbed a lot of facts in reading that (very good)
book but you now need to apply it.

You need to do a DCPromo on a TEST domain -- i.e.,
one you do NOT intend to use for production and then
try a lot of things. If you don't tear it up and need to
re-install then you aren't trying hard enough.

Bend it, break it, fold it, mutilated it. Both the DC and
Domain.

Your goal is to make as many mistakes NOW as you
can and to learn how to fix them or (better) to avoid
them in the future.
I am going through group archives
which is helping me a lot.

That's good too. Probably the best resource you aren't
mentioning is the BUILT-IN HELP which is excellent.

A good place to start is with the search:

[ checklist Active Directory ]

Or

[ checklist DNS ]
Also, are there any specific points a newbie should be aware of?

A key point: Practically all AD replication and authentication
problems are REALLY DNS issues at heart (assuming you have
basic network functionality.)

Whenever you suspect a DC replication or client authentication
problem IMMEDIATELY THINK: DNS, DNS, DNS*
Your help and time would be highly appreciated.

Sure we are happy to help but generally you have to ask
(specific) questions and that means you have to try things
and then ask about problems and design choices.

What is your ultimate goal with AD? Admin a real domain
you already own (e.g., upgrade from NT), get a job, just
curious, get a promotion where there is already an AD
domain, etc.?

Here is some brief stuff on DNS for AD (that practically
everyone messes up in the earlier learning stages):

1) Dynamic for the zone supporting AD
2) All internal DNS clients NIC\IP properties must specify SOLELY
that internal, dynamic DNS server (set.)
3) DCs and even DNS servers are DNS clients too -- see #2
4) If you have more than one Domain, every DNS server must
be able to resolve ALL domains (either directly or indirectly)

netdiag /fix

....or maybe:

dcdiag /fix

(Win2003 can do this from Support tools):
nltest /dsregdns /server:DC-ServerNameGoesHere
http://support.microsoft.com/kb/q260371/

Ensure that DNS zones/domains are fully replicated to all DNS
servers for that (internal) zone/domain.

Also useful may be running DCDiag on each DC, sending the
output to a text file, and searching for FAIL, ERROR, WARN.

Single Label domain zone names are a problem Google:
[ "SINGLE LABEL" domain names DNS 2000 | 2003 microsoft: ]


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Thanks a lot.
 
Herb said:
What is your ultimate goal with AD? Admin a real domain
you already own (e.g., upgrade from NT), get a job, just
curious, get a promotion where there is already an AD
domain, etc.?

Hi Herb,

Thanks a lot for the reply. I want to hook up 9 machines(5 Win XP
Professional, 1 Win 98, 3 Win 2k Prof. with SP4). Hence, I want to know
Active Directory so I can create domains allowing users to share files
and printers. I have heard Win 98 cannot be connected so am not clear
how to deal with it. The machine running Win 98 is slow on 98 itself.
It cannot run a Win2k/XP and I don't have the budget to upgrade it.

Hence, I went through the O Reilly book. Your post was very helpful and
I am grateful for that.

Thanks a lot.
 
s said:
Hi Herb,

Thanks a lot for the reply. I want to hook up 9 machines(5 Win XP
Professional, 1 Win 98, 3 Win 2k Prof. with SP4). Hence, I want to know
Active Directory so I can create domains allowing users to share files
and printers.

This is actually pretty easy so we could just tell you
to go ahead and do it, instead of killing a couple of
DCs first but you can do both and if you have to re-install
then it won't matter if you don't put TOO much work into
the domain client users and computers for the first few days.
I have heard Win 98 cannot be connected so am not clear
how to deal with it.

Someone told you wrong. Win98 can associate with a domain
to user printers and file shares. For Win2003 it needs the
AD Client Upgrade (on the Server CDRom in Clients subdirectory
but you want the NEW one on the MS web site.)

The AD Client Upgrade is also known as DSClient but
get the one for 9x and not NT.

You really should have this anyway even if you only have
Win2000 though anyway.

The machine running Win 98 is slow on 98 itself.

Doesn't matter if you need it to be part of the domain
sharing.

This is the ONLY machine you should NOT create a
Computer account -- 9x machine do NOT use NT/AD
computer accounts when they associate with a domain,
they only use the domain name in place of their workgroup
name.
It cannot run a Win2k/XP and I don't have the budget to upgrade it.

Ok. But machines to run XP can be had for practically
nothing. There are tons of Pentium 3s and such around.
Hence, I went through the O Reilly book. Your post was very helpful and
I am grateful for that.

We'll help if you keep posting questions.

DCPromo your Windows Server and play with it.

You really cannot hurt anything permanently by doing
that. You can always DCPromo a second time to remove
the domain as many cycles as you wish but truth is you
probably won't mess anything up.

(And remember that DNS stuff I gave you last.)
 
Herb said:
We'll help if you keep posting questions.

DCPromo your Windows Server and play with it.

You really cannot hurt anything permanently by doing
that. You can always DCPromo a second time to remove
the domain as many cycles as you wish but truth is you
probably won't mess anything up.

(And remember that DNS stuff I gave you last.)

Thanks Herb,

I am feeling overwhelmed by the amount of information. The amount of
concepts in the book O Reilly Active Directory 2nd edition, sites of
MS, DNS materials you gave are all very helpful but how do actual
system admins manage to get things done without feeling swamped by
information? I find it difficult to remember everything and am worried
that I may be forgetting a small but important detail which may be
required. Would reading any MSCE books help?

Can you please clarify?

Thanks a lot.
 
s said:
Thanks Herb,

I am feeling overwhelmed by the amount of information. The amount of
concepts in the book O Reilly Active Directory 2nd edition, sites of
MS, DNS materials you gave are all very helpful but how do actual
system admins manage to get things done without feeling swamped by
information?

I will tell you the answer if you will first STOP and promise
yourself that you will read the next paragraphs several times
until you fully realize that it is literally the answer to your
question and not some trivial or casual response. (When
an expert tells you "how" they actually know or do something
the answer is usually very simple, so simple it sounds almost
unimportant.)

Think about doctors, both interns and senior residents or
very experienced teachers: They both learn the same
INFORMATION in medical school, but the main difference
is that the difference is that the true expert knows which
information to pay focus upon in each context.

So the true answer is that you learn the key points really,
really well (e.g., med school, being an intern) and EVERY
time you run into a difficult problem not immediately
obvious from what you know you STOP, and run through
both your knowledge base (those facts) AND your trouble
shooting or diagnostic procedures (which are also data
you can learn) until you find the problem or satisfy yourself
there is no quick answer -- this last though must NOT be
done until you actually carry out the procedure a few times
over.

Then, if there is still no answer you look it up, you hit
help (or look in the textbook), you ask someone for help
but doing so by giving absolutely precise SYMPTOMS,
no fudging, no approximation (for medical interns this
is vital signs and stuff but for IT people this is exactly
what you were doing, exactly the WORDING or NUMBERS
on the error message), and no assumptions.

Troubleshooting and diagnostics are a very teachable skill,
closely related to accelerated learning in general.

Two of the the most important steps are BEING EXPLICIT
(no hand waving, no assumptions) and DIVIDE and
CONQUER (simplify, simplify, simplify).

Even being explicit (which either sounds easy, it's not
always, or sounds like a platitude, it's not that either)
can be taught explicitly. (And I guarantee that if you
learn this explicitly you will think it does sound trivial
<grin> but it is not.)

BUT the most important skill to troubleshooting is that
you must believe you are smart enough to succeed, to
figure it out, to win -- and you must be stubborn enough
to keep going but not by doing the same thing over and
over.

Instead, you keep trying other methods (remember asking
others etc.) until you find an approach that simplifies the
problem (notice that if the problem is this hard you then
you are no longer looking directly for the solution but
rather an approach to finding it most of the time.)

All of this can be learned and done using explicit steps
(and an expert uses those same steps consciously when
the problem is hard.)
I find it difficult to remember everything and am worried
that I may be forgetting a small but important detail which may be
required.

Why worry? You will forget important details sometimes.

You will never remember "everything" so you just do your
best to remember those things that are truly important. In
fact if lives are in danger you build checklists etc. (e.g., even
the most experienced pilots use a formal checklist to prepare
an airplane for flight).

You remember what you can, you focus on the key points,
you look up the rest whenever you don't remember it.

Or you ask someone. Above all: You never allow yourself
to "stay stuck" but insist on either trying something new or
being even more explicit about challening your assumptions.
Would reading any MSCE books help?

Over time.

This is the reason that learning to Speed Read is one of the
most important skills to learn. And one that is not typically
taught in our standard education programs.
Can you please clarify?

If you ask specific questions I can do so more easily.
 
Back
Top