Overview
This lecture explains how to join Windows computers to an Active Directory (AD) domain using both the graphical interface and PowerShell, and introduces Active Directory functional levels.
Workgroups vs. Active Directory Domains
- Workgroup computers operate independently and are not centrally managed.
- Active Directory (AD) domains provide centralized administration and authentication.
Joining a Computer to an AD Domain (GUI)
- To join a domain, access System Properties and select "Change Settings."
- In the Computer Name/Domain Changes window, choose "Domain" (not both domain and workgroup at once).
- Enter the domain name (e.g., example.com) and authorize with a domain admin username and password.
- Upon joining, a computer account is created in AD, and the computer uses AD for authentication.
- A reboot is required to complete the domain join.
Verifying and Managing Joined Computers
- After joining, the computer appears in the "Computers" container in the Active Directory Administrative Center.
- Group Policy can now be used to manage the joined machine.
Joining a Computer Using PowerShell
- Use the command:
Add-Computer -DomainName example.com -Server dc1 to join via CLI.
- Provide credentials when prompted.
- Adding the
-Restart parameter will automatically reboot the machine after joining.
Active Directory Functional Levels
- Functional levels define the features available in a domain or forest.
- Each domain or forest has a specific functional level version (e.g., 2016).
- Use PowerShell commands
Get-ADForest and Get-ADDomain to view forest and domain mode.
- Upgrading the functional level enables new AD features.
Key Terms & Definitions
- Workgroup — A collection of standalone Windows computers not centrally managed.
- Active Directory (AD) Domain — A network environment providing centralized authentication and administration.
- Domain Controller (DC) — A server that handles authentication and domain services in AD.
- Functional Level — A version identifier for AD domains/forests that determines available features.
Action Items / Next Steps
- Practice joining a computer to an AD domain using both GUI and PowerShell.
- Check your AD domain and forest functional levels using PowerShell (
Get-ADForest, Get-ADDomain).