This video covers the installation of the NPS, CA and Remote Access Server roles on a Microsoft Windows 2019 Server. We then configure those roles to support RADIUS authentication within Ubiquiti’s UniFi platform.
What is the difference between an Active Directory Security Group and a Distribution Group?
Distribution Groups – These are used for email distribution. Let’s say we have a group called “Sales” and there are 50 users in that group. We need to send an email to all of them at once. How do we accomplish that? We’d use a distribution group. Within Active Directory, you’d create a group, we’ll call it sales, and add all your sales users to that group. Now when you want to send out a blast email to your entire sales team, you would use a single email address like email@example.com
Additionally, groups can also be updated as users come and go. This helps keep things organized for you, as an Active Directory administrator, as well as your end users.
Security Groups – Security groups have a similar concept to that of distribution groups except that they are used to secure a network resource instead of sending out an email message. Again, lets pretend we have a sales department at Test Company. Test Company has a file server with a shared folder called sales. Only the sales department should have access to this folder. How would you accomplish this?
You could add all of your sales users to the folder individually but that would be extremely messy. You’d have to adjust permissions every time someone left or started at Test Company. Not an efficient way of doing things. So instead, you would create a security group and assign the group permissions to the folder. Let’s call it the Sales-RW group. We know from looking at it, that the group is Sales, and they have Read-Write (RW) access if they are in that group. Now when someone starts or leaves your company, you update the group and the permissions on the folder stay the same. This is a much cleaner way of doing things.
How to create a user in active directory and best practices. This is our lab environment on Windows Server 2019 running on VMWare ESXi 6.7. You can follow these steps to create a user in just about any of the most recent versions of Windows Server.
The installation of Microsoft Windows Server 2019 mirrors that of a Microsoft Windows 10 Installation. At least, graphically. In this case we are installing Windows Server 2019 on a VM running on an ESXi host. First, we need to acquire the ISO for Windows Server 2019.
For this tutorial, we will visit the Microsoft Evaluation Center and download our selected ISO:
Once you VM is created and your ISO is loaded, the first screen we will come to is the language screen. Select your language, time and currency format along with keyboard type. Then click next.
Once you select your languages and click next, you will be brought to the below screen where you will be prompted to “Install Now”
You will now need to select which version of Server 2019 to install. You have options of Standard and Datacenter. Choosing one of those options with (Desktop Experience) will install the traditional Windows GUI. Choosing one of the options without (Desktop Experience) will give you a CLI to use.
Accept the EULA by clicking on the check box and click next
Once you accept the EULA, you will be prompted to select the type installation you wish to perform. In this case, since it is a new VM, we will choose Custom Install.
Select the drive you are going to install Windows Server 2019 onto. For this tutorial, we only have one VHD in our virtual machine. Highlight it and hit the new button.
Enter the size you want the drive to be. We are using the full drive in this instance. Click the apply button.
You will receive notice that Windows will create additional partitions. Click ok.
To continue our installation after partitioning, select the largest partition to install Server 2019 onto. Then click next.
Windows will begin the installation process. This may take several minutes to complete. The system will reboot when it has completed.
Upon reboot, you will see this screen stating the system is getting ready.
Once the system reboots, you will be prompted to set a local administrator password. Set the password and confirm it and click finish.
You will be brought to the lock screen. Hit the control, alt and delete keys.
Enter your newly created password and hit enter.
You are now at the desktop and can continue configuring your new server.
Hope this helps someone out, it is a very basic guide to installing Microsoft Windows Server 2019.