How to add clients in domain advance method used in Company Environments Server side Configurations

In our last article we saw how a client can join domain. We used default administrator account for this process.Administrator account can be used in LAB environments. But in a real company environments using administrator account for joining or disjoining process create a huge security risk. Always avoid using administrator account for this process. In this article we will discuss that how we can deploy other account for this process.

We assume that you have configured server before starting this process.

Pre-quest of client process

• ADS is configured on server 2003 and working
• DNS is configured on server 2003 and working
• Client computer is connected with Server.

Once you have completed necessary steps go on server computer and login form administrative account. And open Active directory users and computers.

Right click on Users folder and select User form New options

In open window fill the user information and click on next

On password screen give password and remove tick mark from User must change password at next login

On summary screen click on Finish button

Verify that you have successfully created user accounts

Now make this user the member of built in Domain Admins group

User must be show in the Member tab of Domain Admins group's properties

Now create a computer account for client computer. Right click on Computersfolder And select Computer from New options

Give client computer name [ Make sure you give exact same name which you have on client computer, Check it before giving here on client computer ]

On managed screen Do not check on This is a managed computer Click on next

On next screen click on finish

Next step is to grant the access of add client in domain. To do this open domain controllersecurity policy

In left pane expand the local polices. In local polices select User Rights Assignment and in right pane double click on Add workstation to domain

Now add administrators [group], administrator [Account], and Vinita[ User which you want to grant the access]

Now refresh the group policy by running GPUPDATE commands in run