2.2 Installation Checklist

Use the following checklist to guide you through the installation process. You should install the Administration server on a Microsoft Windows server. You can deploy the appropriate user interfaces on the Administration server computer and on multiple client computers.

 

Checklist Items

Ensure your server and client computers meet the product hardware and software requirements. For more information, see Section 1.0, Understanding Requirements.

Identify the domains or subtrees you want to manage. For more information, see the Administrator Guide for Directory Resource Administrator and Exchange Administrator

Ensure that all your DRA servers are in a trusted domain.

Determine the account information you want to use for the DRA Service Account.

Create the local domain admin group you want DRA to use as the AD LDS admin account.

Identify the user account or group you want DRA to assign the built-in DRA Admins role. Ensure the user account or group you specify meets the following requirements:

  • Is a security group or user account.

  • Is a member of the managed domain, managed subtree, or a trusted domain. If you specify a local Administrator group, ensure the local computer is a managed object. If you specify an account from a trusted domain, ensure the Administration server computer can authenticate this account.

Decide if you want to allow the DRA installer to configure DCOM for you. If not, after installing DRA, configure DCOM settings on that computer. For more information, see Configuring DCOM Settings.

Identify the user accounts you want DRA to use as access accounts for your managed domains, subtrees, and servers. Ensure these accounts meet the appropriate permissions requirements. For more information, see the Administrator Guide for Directory Resource Administrator and Exchange Administrator.

Review Installing the Administration Server and Installing the User Interfaces. Install DRA.

(Optional) Install reporting components on a SQL Server computer to enable DRA Management reports. For more information, see Installing Reporting Center.

Complete the following tasks:

  • Select the Integrated Windows Authentication check box on the Internet Options Advanced tab of Internet Explorer. For more information, refer to the NetIQ Knowledge Base article NETIQKB14935, available at www.netiq.com/support/dra/knowledgebase.asp.

  • Ensure the IIS server running the Directory and Resource Administrator Web Component is configured as a local intranet site and not as a trusted site. For more information, see Installing the Web Application on a Dedicated Web Server.

  • (Optional) Ensure the computer where the IIS Admin service runs has the Trusted for delegation flag set in the computer account properties. For more information, refer to the NetIQ Knowledge Base article NETIQKB14935, available at www.netiq.com/support/dra/knowledgebase.asp.