Windows 2003 setup

Install the server using Per User or Per Device licensing. Have the computer just join the workgroup for now. After your install is complete, run the Windows update.

Install suptools.msi from the Windows 2003 Server install disk, located under the Tools directory.

Setup a trust with a Kerberos realm:

       C:> Ksetup /addkdc UFL.EDU kerberos.ufl.edu
       C:> Ksetup /addkdc UFL.EDU kerberos1.ufl.edu
       C:> Ksetup /addkdc UFL.EDU kerberos2.ufl.edu
       
    

When this completes you should be able to run ksetup and see the following results:

          C:\>ksetup
          default realm = ad.cns.ufl.edu <NT Domain>
          UFL.EDU:
	  kdc = kerberos.ufl.edu
          kdc = kerberos1.ufl.edu
	  kdc = kerberos2.ufl.edu
	  Realm Flags = 0x0 none
          No user mappings defined.
       
       

Run regedit and locate the key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]. Edit the values AltDefaultDomainName=Your Domain, DefaultDomainName=Your Domain replacing Your Domain with UFL.EDU.

When all updates are complete, go ahead and change to join the domain ad.cns.ufl.edu. You will need an appropriate domain username and password for this action.

Right click on My Computer and click on the Remote tab. Click the check box next to Allow users to connect remotely to this computer.

Create a group in AD with users that need to have access to the server. With the format of "servername - Remote Desktop Users". For example "TERMSVR01 - Remote Desktop Users".

Add this group to the local server from AD and give it the same permissions as the Rdesktop User group on that local server.

Right click My Computer, and click on Remote. Check the box that says Allow users to connect remotely to your computer.