Active Directory Setup

First of all, hello everybody! In this article we will be talking about Active Directory Setup together. We need to go over the question of “What is Active Directory?” before we start the setup. It wouldn’t be wrong to briefly say that Active Directory is directory service. So what are the attributions of Active Directory? We can say manageability, delegation, replication, scalability, expandability, and management with group policy.

Before we go into the questions like “What is Active Directory? What is it used for? What are its FSMO roles?” I want to move on to the setup. Because all the attributions and roles we talk about here are an article topic on their own. First we can complete the Active Directory setup, Forest setup and AD Connect setup and then move onto the roles and their attributions. 

For setup we of course need a server. We activate the “Active Directory Domain Services” Role via“Add roles and features” on the server that we will set Active Directory up on.  

Active Directory

Once the said “Active Directory Domain Services” role is added, we will be required to complete the Active Directory setup.  We can access it through the part that is seen as a yellow flag on the Server Manager screen on top right. Since we will be setting up a new Active Directory in this part, we will continue with “Add a new forest”. We continue with next after entering the domain we want to use to the Root domain name section. 

We are required to specify attributions of the dc that we will be setting up and enter a password after we enter the domain. The password we will be entering here is very important. If we were setting up AADC or RODC our steps would have been different. Since we are setting up Active Directory from zero here the settings can be kept as recommended.  

In the next screen we are welcomed by the area concerning DNS. I leave this area empty because I don’t want DC to provide DNS service for now. We will be coming back to DNS service setup and administration later.  We leave the parts that come after DNS service as default and complete the setup by clicking next-next-install. The server will automatically restart when the setup is complete. 

You can see that Active Directory Role on the “Tools” section which is located on top left and top right on Server Manager once the server is on again. To get to the AD you have set up, after clicking Windows button you can reach it through “Windows Administrative Tools”. 


To get to the Golden Rule with the Intranet Portal Velocity article click here 

A Deep Insight into Guest Access

Guest access allows users outside your organization to access your existing teams and channels and cooperate with the people in your organization.  

Guests are people like partners, suppliers, and consultants that are not workers or members of your organization. Anyone who is not a part of your organization can be added to Teams as a guest. Which means that anyone that has a business (I.e. an Azure AD account) or a consumer e-mail account (Outlook.com, Gmail.com etc.) can join your teams and channels with full access as a guest. All guests in Teams are covered by the same compliance and auditing protection with the rest of Microsoft 365 and can be managed securely within Azure AD 

Guest Access is tenant-level setting that is turned off by default on the Admin Center and when it is turned on everyone in your organization can add guests to Microsoft 356 Groups. Guest Access includes a lot of Microsoft 365 subscriptions without the need of an extra license 


There are two different options as Guest Access and External Access for communication with people outside your organization in Organization-wide Settings of Teams Admin Center . Guests access allows people outside your organization to reach your teams and channels while External Access allows communication by entering their e-mail into the Search Box in Teams. Most importantly, WHILE EXTERNAL ACCESS GIVES ACCESS PERMISSION TO AN ENTIRE DOMAIN, GUEST ACCESS GIVES ACCESS PERMISSION TO INDIVIDUALS!

You can see the guest access diagram below: 

Managing Guest Access 

Guest Access can be managed at 4 main levels: 

  1. Azure Active Directory
  2. Microsoft Teams
  3. Microsoft 365 Groups
  4. SharePoint Online & OneDrive for Business

Azure Active Directory

Microsoft Teams

Microsoft 365 Groups

https://docs.microsoft.com/en-us/microsoftteams/teams-dependencies