Wiki Home Active Directory CCBoot Works With Active Directory

CCBoot Works With Active Directory

2016/05/29 00:28

Preparation

1) You should have successfully installed CCBoot and diskless booted your clients. In this example, CCBoot server's IP address is 192.168.1.200

2) Windows Domain Services has already been installed, and the domain server's IP address is 192.168.1.200.(For details, please refer to "Install Windows Domain Service"). 

Note. Window Server 2008 is used as Domain Server as well as CCBoot Server.

3) CCBoot server can be on the same computer with Windows domain server or different computer,depends on you.

4) Prepare a client example. "PC101" with IP address 192.168.1.101.

5) Set administrator password for the client.

1. Add PC to Domain

1) Open the CCBoot installation directory, copy "CCBootAD.exe" files to the domain server.

2) Run the"CCBootAD.exe" program on the domain server.

3) Click the"Add" button in the popup "CCBoot AD" dialogbox. (Figure 1-1)

Add PC

Figure 1-1

4) Click the"..." button in the popup "CCBootAD Machine" dialog box to select domain "Computers", type PC101 into the "Machine Name" edit box, and click the "OK" button, then the operation is completed. (Figure 1-2)

Added PC

Figure 1-2

5) If you want other clients to join the domain as well, you can repeat the above operation steps.

2. Add Personal Disk

1) Set a personal disk for PC101. Please refer to "The usage of personal disk" for details.

 

3.  CCBoot Settings and Boot Parameter

1) Click the"Options" button on the toolbar of CCBoot main interface.

2) In the popup"CCBoot Options" dialog box, select the "DHCP Settings" tab, and type the domain server's IP address into the "DNS Address 1"edit box, then click the "OK" button. (Figure 1-3)

DHCP DNS

Figure 1-3

4) In the popup "CCBoot Options" dialog box, click the "General" tab, tick the “Login With Domain” check box and type in the domain name in this case it “test.com”, if have OU settings, you can set domain name as "test.com OU=testOU,DC=test,DC=com" (more info), and click “OK” to save the settings. (Figure 1-4)

Domain

Figure 1-4

 

4. Add AD Support

Since test version 20160516 the addition of AD support has been changed to make it easier for users to use Active Directory function.

1) Diskless boot PC101 with super client which has personal disk enabled.

2) Login PC101 with the local account of administrator.

3) Run the C:\CCBootClient program, in the "CCBoot Client" dialog box and click the "Install AD Support" button in the "CCBoot Client"dialog box, then click “Yes” in the preceding dialog box. (Figure 1-5)

Install AD support

Figure 1-5

4) Now another pop up dialog box will open asking you to choose the drive to store the “User Profile” (see Figure 1-6)

Note: the drive referred here is personal disk assigned to the clients. Hence, before you do this step you need to enable personal disk for the client.

 Choose User Profile

Figure 1-6

5) Now, click the drop down menu in the red box and choose the drive (in this case we E:\),now click “OK” to continue. (see Figure 1-7).

Choose User Profile 2

Figure 1-7

6) Once you click the OK button, it will notify you that the client needs to be restarted. Click OK or close the prompt and client will reboot.

7) Once the client reboots i will show you the domain login window.

8) Login to Domain Administrator account to Add domain users to the client PC.

5. Add Domain User

From Version 20151216 we have introduced two function “Add Domain User” and “Reset Domain User”.

1)     After rebooting PC101, a prompting of"Press CTRL + ALT + DELETE to log on" will pop up. Press “CTRL +ALT + DELETE” to enter credentials.

domain login

Figure 1-13

2)     Login the computer with the domain administrator account. In this case “TEST\Administrator” .

login credentials

Figure 1 - 14

3)     Now, you can login to domain using “Users” account. To login, Open CCBoot Client Application, then choose “Logon AD user” (Figure 1 - 15).

Logon AD user

Figure 1 - 15

4)     It will Open “AD User” dialog box,there enter your domain username, password and domain name and click “OK” (as in Figure 1-16).

 login credential AD

Figure 1 - 16

5)     Once it successfully logins then another prompt will open, telling you the adding user was successful and disable the superclient and update the image. Press “Yes” to proceed with saving the image (Figure 1-17).

Successfull login

Figure 1 - 17

6)     Press “Yes” in the preceding dialogbox to save the image, you can create recovery image you like.

update image login

Figure 1 - 18

6. Reset Domain User

1)     Super client a PC and then boot your client, After booting is successful login to the client with domain administrations credentials.

login reset domain user

Figure 1-19

2)     Now, you can reset any users you want. To reset a user, Open CCBoot Client Application, then choose “Resetting AD user” (as in Figure 1-20).

Reset AD User

Figure 1 - 20

3)    Itwill Open “AD User” dialog box, there enter your domain username, password and domain name you want to reset and click “OK” (as in Figure 1-21). 

Credentials Reste

Figure 1 – 21

 

4)     Once the user has been successfully reset then another prompt will open, telling you the Resetting user was successful and disable the superclient and update the image. Press “OK” to proceed with saving the image (Figure 1-22).

Success Reset

Figure 1 - 22

5)     Press “Yes” in the preceding dialogbox to save the image, you can create recovery image you like.

Update Reset

Figure 1 – 23

Note: The computers, which are needed to join the domain, should be set the correct time,otherwise it will be failed to join the domain.

We have created a video - "CCBoot Works With Active Directory"

7. Add a New User

1) Add a new domain account on the domain server.

2) Enable super client for PC201 on the CCBoot server.

3) Login PC201 with the newly added domain account.

4) Disable super client on the CCBoot server.

Notes:

1. The computers, which are needed to add into domain, should be set for the right time, or it will be failed to add.

2. Use Win2008 system as domain server, XP system as client, please process following operations on domain server:

1) Log in domain server of Windows Server 2008.

2) Click "Start" and enter "gpmc.msc" in edit box of "Run", then press "Enter".

3) Unfold "Domain Name" in popup window of "Group Policy Management", then right-click "Default Domain Policy", and click to choose "Edit". (Figure 1-24)

Group Policy Management

Figure 1-24

4) Unfold "Computer Configuration"->"Policies"->"Administrative Templates"->"System" in popup dialog box of "Group Policy Management Editor", then click "Net Logon", and double-click "Allow cryptography algorithms compatible with Windows NT 4.0" in detailed windows at right side. (Figure 1-25)

Group Policy Management Editor

Figure 1-25

5) Choose "Enabled" radio button in popup dialog box of "Allow cryptography algorithms compatible with Windows NT 4.0", then click "OK" button. (Figure 1-26)

Allow Cryptography Algorithms Compatible with Windows NT 4.0

Figure 1-26

6) Close all dialog boxes at last.



Related:

Problem when Domain Account Login

Install Windows Domain Service