Jion in to Domain My 6 th day server class theory

1.  How to join windows 7 \windows 8\or windows xp system add in to domain ?

                                                                                                                        CLIENT PC
SERVER
IP: 192.168.36.99                                                                                  IP: 192.168.36.101
Subnetmask  : 255.255.255.0                                                              Subnetmask  : 255.255.255.0
Default gateway :192.168.36.2                                                           Default gateway :192.168.36.2
Preferred DNS  : 192.168.36.99                                                         Preferred DNS  : 192.168.36.99
Alternet DNS : 192.168.36.2                                                              Alternet DNS : 192.168.36.2


Step :1

 Go to you computer
            ||
log with admin account
            
Step :2

 Close the firewall in server and client machine (in real time we are not turn off the firewall) 

Step :3

Check the connectivity from server to client client to server with ping

Step :4

 In client pc go to my computer properties 
                       ||
click on change settings 
                       ||
click on change click on more tab
                       ||
under the properties DNS suffix of this computer and give the domain name password click apply and ok then restart the computer 


For verification now try to login with any domain user in the client pc .             


2.How to give log on time to a Particular user  ?

 Go to server machine 
             ||
 log on admin account
             ||
Go to Active directory services shortcut for (dsa.msc from run )
             ||
under the users and computers 
             ||
select the particular user 
            ||
go to properties
            ||
click on  the account tab
           ||
  select the log on hours set the days and time click apply ok ..

for the verification try to log on from client machine 
if unauthorized time hours user try to log in user get the following error 
( your account has time restriction that prevent you logging on at this time plese try again  )



 3.How to give the permission to particular user to particular system ? 

 Go to server computer
             ||
 log on admin 
             ||
go to Active directory services (for short cut dsa.msc)
             ||
click on users and computers
             ||
click on particular user go to properties
             ||
and click on account 
             ||
 click on log on tab 
             ||
give the system name 
             ||
and click apply 
             ||
click ok 

for verification we try to log in other client pc  
(its showing the following error 
your account is configured to prevent from using this computer pls try another computer)


4.How to give user lockout policy ?

 Go to server computer
          || 
log on admin account
          ||
open Run Prompt type gpmc.msc (for group polices console)
          ||
under the group polices 
          ||
expand the forest 
          ||
expand domain
          ||
right click on domain controller policy 
          ||
click on group policy management 
          ||
expand computer config polices 
          ||
expand windows security settings
          ||
expand account polices
          ||
dabble click on account lock policy 
          ||
account lockout three should pro properties click on define the policy setting and give the number and click and apply ok ..


open Run prompt 
type gpupdate press enter


 5. How to unlock the user account in server 2012?

Go to server computer
            ||
log on with admin account
            ||
open run prompt type dsa.msc (short cut to open active directory services) 
            ||
go to users and computers 
            ||
select the locked account eg: (sandeep)
right click on account properties 
            ||
click on unlock account 
            ||
        apply 
            ||
        ok


For verification try to log on client pc ..