This flexible asset will link together component parts of the Active Directory (AD) infrastructure.
Before you begin, watch the following video (1:46):
- Load all the network attached devices in the client environment, including the servers with AD roles, as configuration items.
- Make sure that you have domain admin access to domain controller.
- Navigate to the organization you are onboarding.
- Go to the Active Directory section from the sidebar.
- Click + New in the top right corner.
- Next, sign in to AD Primary Domain Controller as the domain admin.
- Establish the fully qualified domain name (FQDN) and short name by typing
ipconfig /allat the command prompt (or from Control Panel > System).
netdom query fsmoat the command prompt to confirm AD server roles.
- Next, use nslookup on the domain to confirm the local DNS servers:
set type=ns<enter> and then enter the local domain name.
- Open Powershell and run
(Get-ADDomain).DomainModeto confirm the AD domain functional level.
- From IT Glue, start adding all of this information and tag the servers in the Active Directory flexible asset. Fill out as many or as few fields as you wish.
- Click Save.
- Record the AD domain admin credentials in the Passwords area (if that's not already done) and then add them under Related Items.
- Under Embedded Passwords, add the AD Restore Mode credentials.
- (Optional) Design a flexible asset to define key security groups. Once that's done, you can customize your Active Directory flexible asset to add a security group tagging field.
- How to document Active Directory (IT Glue blog post)