And this demonstration you'll see how to stage a delegated installation of a android is sea view and
road is sees past for application policy can figure on the road is this specific password replication
policy and verify the resultant password policy on this one and Sora manager.
I'll click tools and then click active directory sites and services in active directory sites and services
in the navigation pane I click sites from the action menu I'll click new site in the new object site
dialog box in the name field I'll type Munich and select the default IP site link site link and then
click okay in the Active Directory Domain Services message books I'll click okay and then switch to
server manager and click tools and then click Active Directory.
Administrative Center inactive directory.
Administrative Center in their navigation pane.
I'll click ADT them and then in the details pane double click.
The Domain Controllers Organization or the unit in the task Spain and in their domain controller section.
I'll click recreate a reading The Domain Controller account and in the Active Directory Domain Services
installation reserved on the.
Welcome to the Active Directory Domain Services installation resource page.
I'll click next and on the network credentials page child click next.
Then on the specify the computer name [REMOVED] I'll type the computer name as m you see Dash raw DC 1 and
then click next on the select a side page I'll click Munich and then click next on the additional domain
controller options speech.
I'll accept the default settings and select the DNS server and global catalog check boxes and then click
next on the delegation of roads C installation and administration page I'll click next and on the summary
page I will review the selection and then click next then on their complete in the Active Directory
Domain Services installation rather.
PAGE I'll click finish.
Now let's view and reduces password to application policy to do this in Active Directory.
Administrative Center in the domain controllers.
Oh you select em you see their Schroeders see one and in the task span in the you see this road is the
one section I'll click properties learning that I mean you see there Schroeders see disabled properties
dialog box I'll scroll.
Scroll down to extensions and then click the password replication policy tab and review the default
groups users and computers in the password replication policy.
No I leave this dialog box open and to configure and rather a specific password replication policy.
I'll switch to server manager and click tools and then click Active Directory users on computers in
their navigation pane I'll expand a datum dot com and then click users on the action menu I'll click
new and then click group in the new object group dialog box.
I'll type the group name as Munich allowed to rather see password replication group and then click Okay.
Then I'll double click Munich allow draw the a password replication group and click the member step
and then click Add and in the select user contacts computer service accounts and groups dialog box in
the enter the object name to select text box I'll type Anna and then click.
Check box check names and in the multiple names found dialog box I'll select and I control and then
click Okay.
Out in the select users computers contacts dialog box I'll click Okay.
And then in the Munich allowed I wrote this C password replication group properties dialog box I'll
click okay and close Active Directory user or computer.
Now I'll switch to active directory.
Administrative Center and open the em you see the Schroeders see one properties in the extension section
on the password replication Ball is a dirt pile click Add and in the out groups use a recent computer's
dialog box I'll select the allow passwords for the account to replicate to this road this si option
and then click or get out in the select user of computer service accounts or groups dialog box in the
enter the object names to a select text box I'll type Munich and click check names and then click Okay
get out in the em you see there Schroder see one disabled dialog box I'll click Okay.
Now let's verify the resultant password policy in Active Directory administrative center of the task
Spain of the m you see there Schroeders see one section I'll click properties and in the properties
dialog box in the extension section on the password replication policy derp I'll click Advanced please
know that the advanced password replication policy for AM use cedar Schroder C1 dialog box displays
all of the accounts with passwords that are stored in this road is C so next on the display use there
are some computers that meet the following criteria dropdown list I'll click accounts that have been
authenticated to this read only domain controller and then you have to note that this page will only
show accounts that have the requisite permissions and that the road SC has authenticated next on the
result and Paul is a dab click out out in the select user of so computer's dialog box in the enter the
object name to select field type Anna and click check names and then click Okay twice and we should
have Anna who has a result uncertain of allow.
Now let's recap.
In this demonstration we saw how to stage delegated installation of Android is see how to view Android
this is possible replication is and configure and wrote a specific password replication policy.
We also verified the resultant password policy.
Next up we'll be talking about separate and raw DC local administration.
I'll see you there.