diff --git a/en_US/cloud/0-cloud-create.ad.account.md b/en_US/cloud/0-cloud-create.ad.account.md new file mode 100644 index 00000000..1a0f7291 --- /dev/null +++ b/en_US/cloud/0-cloud-create.ad.account.md @@ -0,0 +1,149 @@ +# Create AD account for iRedMail +[TOC] + +## Summary +With iRedMail (ad backend), we need two accounts, admin account with all privileges, low-privileged account with read-only privilege. +In this tutorial, we will show you how to create account in AD, with strong and complex password. + +- low-privileged account `vmail`. +- admin account `vmailadmin`. + +This tutorial has been tested on: + +- Windows Server 2012 + +If it works for you on different Windows Server version, please let us know. + +## Create low-privileged account. + +- Click `Start` on bottom-left corner of your Windows OS, click `Server Manager`. + +![](./images/create.ad.account/start-server-manager.png) + +- Click `Tools` on top-right corner, click `Active Directory Domains and Trusts`. + +![](./images/create.ad.account/create_ad_account_1.png) + +- Right click your AD domain, here is `iredmail.org`, then click `Manage`. + +![](./images/create.ad.account/create_ad_account_2.png) + +- At the new windows, right click `Users` --> `New` --> `User`. + +![](./images/create.ad.account/create_ad_account_3.png) + +- Input `vmail` account info, click `Next`. + +![](./images/create.ad.account/read_only_account_1.png) + +- Input `vmail` account passowrd, and select `Password never expires`, click `Next`. + +![](./images/create.ad.account/read_only_account_2.png) + + +- Click `Finish` to confirm. + +![](./images/create.ad.account/read_only_account_3.png) + + +- Now account `vmail` has created, we will set read-only permission for `vmail`, right click your AD domian here is `iredmail.org`, and select `Delegate Control...`. + +![](./images/create.ad.account/create_ad_account_4.png) + + +- Click `Next`. + +![](./images/create.ad.account/create_ad_account_5.png) + + +- Click `Add`. + +![](./images/create.ad.account/create_ad_account_6.png) + + +- Input read-only account `vmail`, and click `Ok`. + +![](./images/create.ad.account/read_only_account_4.png) + + +- Click `Next`. + +![](./images/create.ad.account/read_only_account_5.png) + +- Select `"Read all user information"`, click `Next`. + +![](./images/create.ad.account/read_only_account_6.png) + + +- Click `Finish` to confirm. + +![](./images/create.ad.account/read_only_account_7.png) + +- Low-privileged account `vmail` created. + + +## Create admin account. + +- Click `Start` on bottom-left corner of your Windows OS, click `Server Manager`. + +![](./images/create.ad.account/start-server-manager.png) + +- Click `Tools` on top-right corner, click `Active Directory Domains and Trusts`. +![](./images/create.ad.account/create_ad_account_1.png) + +- Right click your AD domain, here is `iredmail.org`, then click `Manage`. + +![](./images/create.ad.account/create_ad_account_2.png) + +- At the new windows, right click `Users` --> `New` --> `User`. + +![](./images/create.ad.account/create_ad_account_3.png) + +- Input `vmailadmin` account info, click `Next`. + +![](./images/create.ad.account/admin_account_1.png) + +- Input `vmailadmin` account passowrd, and select `Password never expires`, click `Next`. + +![](./images/create.ad.account/admin_account_2.png) + + +- Click `Finish` to confirm. + +![](./images/create.ad.account/admin_account_3.png) + + +- Now account `vmailadmin` has created, we will set read-only permission for `vmail`, right click your AD domian here is `iredmail.org`, and select `Delegate Control...`. + +![](./images/create.ad.account/create_ad_account_4.png) + + +- Click `Next`. + +![](./images/create.ad.account/create_ad_account_5.png) + + +- Click `Add`. + +![](./images/create.ad.account/create_ad_account_6.png) + + +- Input admin account `vmailadmin`, and click `Ok`. + +![](./images/create.ad.account/admin_account_4.png) + + +- Click `Next`. + +![](./images/create.ad.account/admin_account_5.png) + +- Select `"Create,delete, and manage user accounts"`, `"Reset user passowords and force password change at next logon"`, `"Read all user information"`, click `Next`. + +![](./images/create.ad.account/admin_account_6.png) + + +- Click `Finish` to confirm. + +![](./images/create.ad.account/admin_account_7.png) + +- Low-privileged account `vmailadmin` created. diff --git a/html/images/create.ad.account/admin_account_1.png b/html/images/create.ad.account/admin_account_1.png new file mode 100644 index 00000000..295a8c12 Binary files /dev/null and b/html/images/create.ad.account/admin_account_1.png differ diff --git a/html/images/create.ad.account/admin_account_2.png b/html/images/create.ad.account/admin_account_2.png new file mode 100644 index 00000000..5f579f1a Binary files /dev/null and b/html/images/create.ad.account/admin_account_2.png differ diff --git a/html/images/create.ad.account/admin_account_3.png b/html/images/create.ad.account/admin_account_3.png new file mode 100644 index 00000000..3c914aca Binary files /dev/null and b/html/images/create.ad.account/admin_account_3.png differ diff --git a/html/images/create.ad.account/admin_account_4.png b/html/images/create.ad.account/admin_account_4.png new file mode 100644 index 00000000..2233b0b0 Binary files /dev/null and b/html/images/create.ad.account/admin_account_4.png differ diff --git a/html/images/create.ad.account/admin_account_5.png b/html/images/create.ad.account/admin_account_5.png new file mode 100644 index 00000000..02db8b37 Binary files /dev/null and b/html/images/create.ad.account/admin_account_5.png differ diff --git a/html/images/create.ad.account/admin_account_6.png b/html/images/create.ad.account/admin_account_6.png new file mode 100644 index 00000000..1d9a550b Binary files /dev/null and b/html/images/create.ad.account/admin_account_6.png differ diff --git a/html/images/create.ad.account/admin_account_7.png b/html/images/create.ad.account/admin_account_7.png new file mode 100644 index 00000000..c449e7fb Binary files /dev/null and b/html/images/create.ad.account/admin_account_7.png differ diff --git a/html/images/create.ad.account/create_ad_account_1.png b/html/images/create.ad.account/create_ad_account_1.png new file mode 100644 index 00000000..c717f7fe Binary files /dev/null and b/html/images/create.ad.account/create_ad_account_1.png differ diff --git a/html/images/create.ad.account/create_ad_account_2.png b/html/images/create.ad.account/create_ad_account_2.png new file mode 100644 index 00000000..d275df19 Binary files /dev/null and b/html/images/create.ad.account/create_ad_account_2.png differ diff --git a/html/images/create.ad.account/create_ad_account_3.png b/html/images/create.ad.account/create_ad_account_3.png new file mode 100644 index 00000000..32354a23 Binary files /dev/null and b/html/images/create.ad.account/create_ad_account_3.png differ diff --git a/html/images/create.ad.account/create_ad_account_4.png b/html/images/create.ad.account/create_ad_account_4.png new file mode 100644 index 00000000..570dd03e Binary files /dev/null and b/html/images/create.ad.account/create_ad_account_4.png differ diff --git a/html/images/create.ad.account/create_ad_account_5.png b/html/images/create.ad.account/create_ad_account_5.png new file mode 100644 index 00000000..99387cbe Binary files /dev/null and b/html/images/create.ad.account/create_ad_account_5.png differ diff --git a/html/images/create.ad.account/create_ad_account_6.png b/html/images/create.ad.account/create_ad_account_6.png new file mode 100644 index 00000000..950f7f44 Binary files /dev/null and b/html/images/create.ad.account/create_ad_account_6.png differ diff --git a/html/images/create.ad.account/read_only_account_1.png b/html/images/create.ad.account/read_only_account_1.png new file mode 100644 index 00000000..cded969b Binary files /dev/null and b/html/images/create.ad.account/read_only_account_1.png differ diff --git a/html/images/create.ad.account/read_only_account_2.png b/html/images/create.ad.account/read_only_account_2.png new file mode 100644 index 00000000..5f579f1a Binary files /dev/null and b/html/images/create.ad.account/read_only_account_2.png differ diff --git a/html/images/create.ad.account/read_only_account_3.png b/html/images/create.ad.account/read_only_account_3.png new file mode 100644 index 00000000..e39a790f Binary files /dev/null and b/html/images/create.ad.account/read_only_account_3.png differ diff --git a/html/images/create.ad.account/read_only_account_4.png b/html/images/create.ad.account/read_only_account_4.png new file mode 100644 index 00000000..c52b37e5 Binary files /dev/null and b/html/images/create.ad.account/read_only_account_4.png differ diff --git a/html/images/create.ad.account/read_only_account_5.png b/html/images/create.ad.account/read_only_account_5.png new file mode 100644 index 00000000..c91dd48c Binary files /dev/null and b/html/images/create.ad.account/read_only_account_5.png differ diff --git a/html/images/create.ad.account/read_only_account_6.png b/html/images/create.ad.account/read_only_account_6.png new file mode 100644 index 00000000..737c1c9c Binary files /dev/null and b/html/images/create.ad.account/read_only_account_6.png differ diff --git a/html/images/create.ad.account/read_only_account_7.png b/html/images/create.ad.account/read_only_account_7.png new file mode 100644 index 00000000..fb08ffed Binary files /dev/null and b/html/images/create.ad.account/read_only_account_7.png differ diff --git a/html/images/create.ad.account/start-server-manager.png b/html/images/create.ad.account/start-server-manager.png new file mode 100644 index 00000000..22027b80 Binary files /dev/null and b/html/images/create.ad.account/start-server-manager.png differ