Step
Step
Step
After installing the AD DS role, you need to promote the server to a Domain Controller.
1. Notification Flag:
o After installation, in Server Manager, click the Notifications flag (the
exclamation mark at the top).
o Click Promote this server to a domain controller.
2. Deployment Configuration:
o Choose one of the following depending on your environment:
Add a new forest: Use this if you're setting up Active Directory for the
first time. You’ll need to specify a root domain name (e.g.,
example.com).
Add a domain controller to an existing domain: If you already have
a domain and are adding an additional domain controller.
o For new installations, select Add a new forest, then enter your Root domain
name (e.g., mycompany.com). Click Next.
3. Domain Controller Options:
o Choose the Functional Level for your domain and forest. (By default, choose
the latest Windows Server version, unless compatibility is required).
o Check DNS Server and Global Catalog (GC).
o Set a Directory Services Restore Mode (DSRM) password (this is used to
recover AD if needed).
o Click Next.
4. DNS Options:
o Ignore any DNS delegation warnings if you’re setting up a new DNS server.
Click Next.
5. Additional Options:
o Verify the NetBIOS domain name (this is automatically populated). Click
Next.
6. Paths:
o Accept the default locations for the database, log files, and SYSVOL folders,
unless you have specific needs. Click Next.
7. Review Options:
o Review your selections and click Next.
8. Prerequisites Check:
o Wait for the Prerequisites Check to complete. If no errors occur, click Install.
9. Restart:
o After installation, the server will reboot.
3. Post-Installation Tasks
After rebooting, your server is now an Active Directory Domain Controller. You can begin
managing your AD domain.
1. Log in:
o After the reboot, log in using the Domain Administrator account. Use the
credentials you set during the AD installation.
2. Configure DNS:
o If the DNS role was installed, ensure it’s functioning properly.
o You can manage DNS settings in Server Manager > Tools > DNS.
3. Verify Active Directory Installation:
o Open Active Directory Users and Computers (ADUC) from Server
Manager > Tools > Active Directory Users and Computers.
o You should see your domain listed under ADUC. You can start creating
Organizational Units (OUs), Users, Groups, and more.
Group Policy allows you to manage settings for users and computers in your domain.
Open Group Policy Management from Server Manager > Tools > Group Policy
Management.
Right-click the domain or OU where you want to apply policies and create or modify
policies.
On the client machine, go to Control Panel > System > Change Settings > Change
to join the computer to the domain.
Enter the Domain Name and provide domain admin credentials when prompted.
This setup will create a functioning Active Directory environment for centralized
management of users, groups, and resources across your network.