Add computers to the perimeter network site

In this section, you will find instructions and a sample script that can be used to domain join a Windows Server 2008, Windows Server 2008 R2 or Windows Vista SP 1 machine to a perimeter network.

Note

For read-only domain joins on Windows Server 2003 or Windows XP client computers, install the RODC compatibility pack. For more information about the installation of the RODC compatibility pack see the Microsoft support article, https://go.microsoft.com/fwlink/? LinkID=122974.

Assumptions

The following conditions are assumed to be in place in order to complete a domain join through a read-only domain controller (RODC):

· The perimeter network and the intranet are separated by a firewall.

· The client computer can communicate with the RODC in the perimeter network but not with domain controllers in the internal network.

· The RODC can communicate with a domain controller in the internal network at the time of the domain join.

· The first four procedures have been completed before the join is attempted.

· If NETBIOS name resolution is required in the perimeter network, ensure Windows Internet Name Service (WINS) is enabled.

Performing a domain join through an RODC

Complete the following tasks to perform a domain join through an RODC. Domain Admin credentials are required to perform these tasks.

· Precreate the computer account

· Set a nondefault password for the computer account

· Make the account cacheable at the RODC

· Replicate the secrets of the computer account to the RODC

· Run the join script on the client computer