installation of active directory role - Technet Gallery

advertisement

 INSTALLATION AND CONFIGURATION OF ACTIVE DIRECTORY DOMAİN SERVİCES

 First of all , we’ll need to change the computer/server name to something like (dc1 or Nydc1 or anything you wish etc. Something easy to remember rather then having WIN521HGNBYNBJKK . and restart the Server.

 Another important step to remeber that, we’ll have to give a Static IP address for our DC to be found by clients on our network.IP range is depends on your environment, Because this is a LAB scenerio , I am going to use a C Class IP 192.168.1.0/24.

Domain Controllers is an important Machines , stores very important and critical data on them, therefore, we will have to download and install latest security updates from Microsoft.

Now we ready to install our very first DC by installing Active Directory Domain services Role.

On server manager Click Manage and select Add Roles and Features.

Once the wizard has open, its a recommened to read discreption on each steps what you are actually doing, rather then doing old classic way next next next.

As it mentions on below image, its asking us to complete the first 2 of 3 steps which we did earlier.

Network Setting and Security updates (You have to complete these steps before installing ADDS) and

Click on Next >

Because we are going to install ADDS role therefore we have to choose Role based installation and Next>

As you see on below screenshot, This is the machine that ADDS going to be installed on, and click on

Next>

Now we’ll need to choose the second option from the Top ( Active Directory Domain Services )

Once you check it, its going to bring below wizard and telling us that required features going to be installed with this installation, and click on Add Features

Then click on Next >

You can leave everything as its on below page.the click on Next >

In here its actually telling us whats ADDS is, and what it does . for a Domain Minimum 2 DCs required, in case of failover and second DC will then countinue serving your clients. Click Next > and now we are on summary page. İts confirming that whats going to be installed on our server, this is the last option where you can go back and make changes on our installation. Click on İnstall

And now we will have to wait until its completed.( you can go and grab a quick coffee while its performing the installation.  )

Great, we have now installed our ADDS role on our server.

Installing ADDS role doesnt mean we have created our forest Root Domain , now its just a Empty machine. İn order to become Domain controller, we have to promote this Machine as our first domain controller, in the mean time ,we are going to create our first forest Root Domain.(in my case).Click on

Promote this server to Domain controller.

Once the Deployment configuration page opens, Domain naming master role makes a quick check ,if any other domain(s) exists on the network.(in my case, I am creating my very first Forest) , so I select Add a new forest.

Then I have to give a Root Domain name for my forest ( I am going to give sahinbulent.com) for my scenerio. And click on Next>

On Domian controller option, its a very important information there which you’ll need to make a decison.

In Active Directory Domain Services (AD DS), domain controllers can run different versions of

Windows Server operating systems. The functional level of a domain or forest depends on which versions of Windows Server operating systems are running on the domain controllers in the domain or forest. The functional level of a domain or forest controls which advanced features are available in the domain or forest.

All servers in an organization could run the latest version of Windows and take advantage of all the advanced features that are available with the newest software. But organizations often have a mixture of systems, generally running different versions of operating systems, which are migrated to the latest version only as organizational requirements demand additional functionality, either for the entire organization or for a specific area of the organization.

After you set the domain functional level to a certain value in Windows Server 2008 R2, you cannot roll back or lower the domain functional level, with one exception: when you raise the domain functional level to Windows Server 2008 R2 and if the forest functional level is Windows Server 2008 or lower, you have the option of rolling the domain functional level back to Windows Server 2008. You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows

Server 2003.

İt will also install DNS and Global Catalog

Then Create DSRM password(this is to password when restroring your ADDS database or in a migration

Stage.) Click on next>

On DNS option , its telling us that no DNS zone has been found and its going to create one. And click next>

And now Netbios name Verifiying, if sahinbulent.com

already exist on the network.if it did then it wont allow us to create forest name called sahinbulent.com, if it doesnt exist , it will create as shown on below.Click on Next>

İts now confirming where the ADDS Database and Sysvol folder going to be in.These are the database that all of the object,users,computers, GC will be stored on.( Never Delete it ) You can choose the directory you wish( you can even put in your D drive(if any)) Make you sure they are cretated and exist after the installation. For Best practise double check your database folders make sure they are there.Click on Next>

Summary Page , just do a quick review that nothing forgetten , if any changes required , go back and amend your settings. And click Next>

Now system will check all the prerequisites that everyhting in good place,

İts succesfully passed the prerequisites , that mean, we can now go ahead and install our forest root domain.and click on İnstall>

İts now instaling our Forest Root Domain, Creating DNS, GC,OU etc. İt will restarts the server after installation

Now we have the login screen back after restart. We must login as Enterprise Admin sahinbulent\administrator not the local machine administrator.

Guest What , We have now successfully installed our ADDS and forest Root Domain as sahinbulent.com.

Thank you for reading.

Download