Or

Click Start – Run.
Type dcpromo press enter

Active directory installation wizard showing, click next.

click next.

Select domain controller for a new domain and click next.

Select domain in a new forest and click next.

Enter your full DNS name, click next.

Type netbios name, click next.

Click next. (If u want u can change database and log folder locations)

Click next.

Click next.

Select permissions compatible only with windows 2000 or windows 2003 os.

Type directory service restore password, click next.

Click next.

Click finish.

Click restart now.
After restart go to run and type DSA.MSC.

or

Go to Start – All programs – Administrative Tools – select Active directory users and computers.

Start – Run- dnsmgmt.msc

Click change button.

Check store the zone in active directory and click ok.

Click yes.
After you can see Secure only in Dynamic updates drop down box.
Select secure only then click ok.

Click change button.

Check store the zone in active directory and click ok.

Click yes.

After you can see Secure only in Dynamic updates drop down box.
Select secure only then click ok.

Go to active directory users and computers, right domain and select raise domain functional level

Select windows server 2003 functional level.

Click raise button.

Click ok.

Click ok.

Click close button………….

Forest Functional Level

Go to administrative tool- Active directory domains and trusts.

Right click active directory domains and trusts.

Select the windows server 2003 functional level.

Click ok.
Click ok
Click ok button……………….

Right click my computer- properties.

Select computer name tab.

Select domain option and type your domain name after it will ask user name and password.

Type server administrator user name and password.

Click ok.

Click ok.

After you can see computer name with domain name and domain name. Click apply and ok button.

Click yes.
After restart the above dialog box appears, you press ALT

Now you can log in to domain after typing user name and password by clicking log on to drop down box and selecting your domain name click ok.

Goto Start – Run – regedit

expand this key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer and create “DisallowRun” (dword value) and give the value “1″, after create a sub key name “DisallowRun” in “Explorer” key then open DisallowRun key create string value name “1″ value date “Notepad.exe”. If you want more applications restrictions give the sequence numbers for value name and give the applications exe name in value data.

For example you want to restrict Notepad and Adobe Acrobat Reader

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value Name : DisallowRun
Value Type : Dword value
Value Data : 1

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallow Run

Value Name : 1
Value Type : String Value
Value Data: notepad.exe

Value Name : 2
Value Type : String Value
Value Data: AcroRd32.exe

***********************************************************
Control Panel Restrictions for Current Users

Remove control panel in Start menu, Explorer and restrict Run command

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoControlPanel
Value Type : Dword Value
Value Data: 1 (value data: 0 restore control panel)

***********************************************************

Restrict My Computer properties and Control Panel “System”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoPropertiesMyComputer
Value Type : Dword Value
value Data: 1 (value data: 0 to reset)

***********************************************************

Remove Add Printer & Delete Printer options

Add Printer

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoAddPrinter
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Delete Printer

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value Name : NoDeletePrinter
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

***********************************************************

Restirct Folder Options in Control Panel & Tolls menu

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoFolderOptions
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

***********************************************************

Hide Control Panel Applets

(This setting only hide this options in control panel)

Goto Start – Run – regedit
expand this key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer and create “DisallowCpl” (dword value) and give the value “1″, after create a sub key name “DisallowCpl” in “Explorer” key then open DisallowCpl key create string value name “1″ value date “access.cpl”. If you want hide more applets give the sequence numbers for value name and give the applets cpl in value data.

For example you want to hide Add Hardware and Add or Remove Programs

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : DisallowCpl
Value Type : Dword value
Value Data : 1

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCpl
Value Name : 1
Value Type : String Value
Value Data: hdwwiz.cpl

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCpl
Value Name : 2
Value Type : String Value
Value Data: appwiz.cpl

Some Control Panel applets short cuts

Accessibility Option – access.cpl
Add Hardware – hdwwiz.cpl
Add Remove Programs – appwiz.cpl
Adobe Gamma – Adobe Gamma.cpl
Automatic Updates – wuaucpl.cpl
Bluetooth Configuration – btcpl.cpl
Time & date – timedate.cpl
Display – desk.cpl
Game Controllers – joy.cpl
Internet Options – inetcpl.cpl
Mouse Properties – main.cpl
Network Setup Wizard – netsetup.cpl
Phone and Modem Options – telephon.cpl
Power Options – powercfg.cpl
Regional and Language Options – intl.cpl
Sounds and Audio Device Properties – mmsys.cpl
System properties – sysdm.cpl
User Accounts – nusrmgr.cpl
Windows Firewall – firewall.cpl

***********************************************************

Restrict Computer Management

HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}

Value Name : Restrict_Run

Value Type : String Value

Value Data: 1

Enable or Disable Task Manager

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Value Name : DisableTaskMgr
Value Type : Dword Value
Value Data: 1 (disable) 0 (enable)

****************************************************

Enable or Disable Comman prompt

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Value Name : DisableCMD
Value Type : Dword Value
Value Data: 1 (disable) 0 (enable)

****************************************************

Enable or Disable Registry Editor

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Value Name : DisableRegistryTools
Value Type : Dword Value
Value Data: 1 (disable) 0(enable)

****************************************************

Start Menu Restrictions for User

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Start Menu Restrictions for Computer

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Remove Recent Documents menu form startmenu

Value Name : NoRecentDocsMenu
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Clear Recent Documents on Exit

Value Name : ClearRecentDocsOnExit
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Recent Documents History

Value Name : NoRecentDocsHistory
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Windows XP Style Starmenu

Value Name : NoSimpleStartMenu
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Startmenu Common Groups

Value Name : NoCommonGroups
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Mydocuments on startmenu

Value Name : NoSMMyDocs
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Mymusic on startmenu

Value Name : NoStartMenuMyMusic
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Mypictures on Startmenu

Value Name : NoSMMyPictures
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove My Favorites on startmenu

Value Name : NoFavoritesMenu
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove My Network places on startmenu

Value Name :NoStartMenuNetworkPlace
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Network Connections from startmenu – settings

Value Name : NoNetworkConnections
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Help form startmenu

Value Name : NoSMHelp
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Run from startmenu

Value Name : NoRun
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Find form startmenu

Value Name : NoFind
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Logoff from startmenu

Value Name : StartMenuLogoff
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Restrict Taskbar properties

Value Name : NoSetTaskbar
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove user name in startmenu

Value Name : NoUserNameInStartMenu
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Installed programs form startmenu (only from startmenu link)

Value Name : NoStartMenuMorePrograms
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Startmenu

Value Name : NoClose
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

****************************************************

Add or Remove Programs Restrictrions (Control Panel Applet)

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Restrict Add Remove Programs in Control Panel

Value Name : NoAddRemovePrograms
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Change or Remove porgrams page

Value Name : NoRemovePage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Add programs page

Value Name : NoAddPage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Add/Remove Windows Components page

Value Name : NoWindowsSetupPage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Add a Program from Cd-rom or floppy disk page

Value Name : NoAddFromCDorFloppy
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Add program from Internet

Value Name : NoAddFromInternet
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Add Program from Network

Value Name : NoAddFromNetwork
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove choose program page

Value Name : NoChooseProgramsPage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

****************************************************

Display Properties Restrictions

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System

Remove Display Background page

Value Name : NoDispBackgroundPage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Screensaver page

Value Name : NoDispScrSavPage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Appearence page

Value Name : NoDispAppearancePage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Settings page

Value Name : NoDispSettingsPage
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Restrict Display properties

Value Name : NoDispCPL
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Restrict Desktop controls

Value Name : NoDesktop
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

****************************************************

Internet Explorer Internet Options Restrictions

For User Account

HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel

For Computer

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel

Remove General Tab from Internet Options

Value Name : GeneralTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Security Tab from Internet Options

Value Name : SecurityTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Content Tab from Internet Options

Value Name : ContentTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Connection Tab from Internet Options

Value Name : ConnectionsTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Program Tab from Internet Options

Value Name : ProgramsTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove privacy Tab from Internet Options

Value Name : PrivacyTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

Remove Advance Tab from Internet Options

Value Name : AdvancedTab
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

****************************************************

Hide & Restrict Computer Drives

Drive restrictions for User Accounts

Restrict Drives

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoViewOnDrive
Value Type : Binary Value
Value Data: 01 00 00 00

Hide Drives

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value Name : NoDrives
Value Type : Binary Value
Value Data: 01 00 00 00

Drive Restrictions for Computer

Restrict Drives

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoViewOnDrive
Value Type : Binary Value
Value Data: 01 00 00 00

Hide Drives

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value Name : NoDrives
Value Type : Binary Value
Value Data : 01 00 00 00

Drives using hexa decimal values A=1, B=2, C=4, D=8 ****************************************************

Pen drive Write Protect Using registry Value

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\control\StorageDevicePolicies

Value Name : WriteProtect
Value Type : Dword Value
Value Data: 1 (value data: 0 to reset)

****************************************************

Usb Storage Device Enable or Disable

Disable USB
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBsTOR

Value Name : Start
Value Type : Dword Value
Value Data : 4

Enable USB

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBsTOR

Value Name : Start
Value Type : Dword Value
Value Data : 3

****************************************************