Using eBox As Windows Primary Domain Controller - Page 2

2. Login to the web interface

Now you are ready to login for first time to the eBox web interface. With your browser, go to https://address/ where the address is the one given to you by the installer in the previous step.

Because the eBox server has a new self-signed certificate your browser likely will ask you whether it should trust it. Make your browser trust it to be able to continue.

Then you will be show the login screen, to login enter here the eBox administration password that you set in the installation process.

login screen

After the login you will be show the summary page.

summary page


3. Enabling and disabling modules

Next step is to disable the modules that are not needed for the PDC server. To do so in the left menu select Module Status. In this page you will be shown the list of installed eBox modules and a checkbox to enable or disable them.

module status page

By default all installed modules are enabled but to make better use of your resources you might want to disable modules not related with the PDC server.

The modules needed for the PDC server are:

  • Network
  • Logs
  • Users and Groups
  • File Sharing
  • Printers
  • Antivirus

You can disable any other module to save resources on your system.


4. Creating groups

You may need user groups in your domain. To create a group, in the left menu select Groups -> Add group. You will be asked for a group name and an optional commentary.

add group form

After a group creation you will be forwarded to the Edit group page. We are not interested in any setting here right now, but remember you can come back to this page selecting in left menu Groups -> Edit group.

We will create the group IT for this tutorial. You can also create any other necessary groups for your domain.


5. Creating users

To create your domain users, in the left menu select Users -> Add user. You will be show a form for adding the new user. This form has the following fields:

  • User name: user name for the user.
  • First name: first name of the user.
  • Last name: last name of the user.
  • Comment: optional commentary.
  • Password and Retype password: first user password, he can change his password when he connects to the domain. We will see later how to establish password policies for the domain users.
  • Group: user primary group. After its creation the user can be added to more aditional groups.

Add user form

For this tutorial we will create a user with pdcadmin as user name. Other fields will be filled in with the appropiate vaules.

After a user creation you will be forwarded to the Edit user page. Remember that you can come back to this page selecting in the left menu Users -> Edit user.

There are some PDC user settings on this page, under the PDC/File sharing account heading.

You can enable or disable the user account, a disabled account cannot login or be used in the domain. We will leave our new user account enabled. Also you can give administration rights to the user. An user with administration rights can add computers to the domain so you will need at least one user with administration rights. For this reason, we will enable this option for the pdcadmin user.

There is another field to change the disk quota for the user. We do not need to touch this setting now.

pdc-related user settings

Now you can create some other user accounts for your regular users. They only need to have an enabled account without administration rights. If you feel that their disk quota is too big or too small you can edit it as well.

Share this page:

14 Comment(s)

Add comment


From: Brian C at: 2010-09-05 06:59:52

In windows in order to be a domain controller you have to enable DNS, why would that not be true with ebox, just a thought? I will try this the way you have written it I am sure it was working for you before you wrote this, I was just wondering. Maybe this was just for a one server application with some sort of router for DHCP also. Dunno, any way thanks for the tutorial not trying to nit pick just trying to figure out the network environment for this setup is all.

From: Anonymous at: 2011-10-20 02:35:55

DNS is required for Active Directory. ebox sets up an NT style domain controller which did not require the DNS setup.

From: Emanuele at: 2009-11-27 00:25:52

Hello folks,

 I saw this good tutorial, but I still don't find a guide which can explain how to manage computer account.

 Simply, when you join a computer to the domain, you are able to login on the domain and use all the features and advantages dues to a centralized authentication and authorization system. But on ebox, there is no management interface section for domain users & computers, like "Users and computers" on m$ windows . Or, if exist, I still haven't found it.

 Please, anybody can explain to me how to manage computer accounts on Ebox ?


Best regards


PS : I apologize, I know this is very bad english, I hope you can understand what I'm searching for :-)

From: Josh at: 2010-06-24 20:09:57

I have the same question.  How are we to admin the users within the domain?

From: Camilo at: 2010-04-14 10:09:15

Hi guys, I have a little problem.... I erased domain admins and administrators groups and now I can't add computers to the domain. I created them again but it still won't work. Any idea?? Thank you a lot.

From: at: 2009-11-27 07:07:39

1) When Windows Server (2003 or 2008) is used as a PDC it isn't necessary to use an administrator account to add a PC to the domain. Can this be done with Linux+eBox?

2) Is there any way to have group policies for the domain just like when Windows Server is the PDC?



From: Don at: 2010-01-05 02:25:42


 in the screenshots of the ebox File Sharing Options, the domain name is set to ebox-server. In the Windows XP Compute Change Name dialog box, 'EBOX' is used for the domain.

 Shouldn't these be the same?

 Also, after joining the domain, the windows machine wants to reboot!?

From: Op3rat0r at: 2011-10-23 17:30:28


as you can read in the text, it says "We will use ebox as domain name". You are right that the picture is wrong. In the picture the domina name should also be ebox.

It is normal that when you join a computer to a domain, that the computer has to reboot. Their are several adjustments that will be done with the computer....

Sry for my bad english!


Greetings from germany



From: Anonymous at: 2009-12-03 15:25:26

I just wanted to thank you for your very informative tutorial. I have been looking for something like it for quite some time. I was wondering though what packages actually take care of the controller? OpenLDAP?

From: javivazquez at: 2009-12-05 16:09:33

Yes, it uses OpenLDAP.

You can check a full list of the software used by eBox in its trac:

From: at: 2009-12-10 02:30:51

Great Work, Jav.

Can't wait to try this out on a server I am building.


From: xrisse at: 2010-01-26 07:33:46

Great stuff - but what about windows 7 and joining ebox' domain? Can I manualy upgrade Samba? I've already backported Samba 3.3.4-2 on hardy (8.04). Any idears?

From: Op3rat0r at: 2011-10-23 17:37:25


yes you can join Win7 Clients to an eBox PDC.

Sometimes just check the Zentyal Community....


greetz from germany


From: philmills at: 2010-01-26 07:37:45

There's a great thread here which also explains how to map different shares to different user groups using a little vbs. Script is provided, and its really easy to use. Awesome!