Generate plain HTML

Active Directory

Intro

  1. Pin the app Acitve Directory User and ... to the Start menu

Create the role

  1. Open Server Manager and navigate to the Dashboard panel
  2. Under the Quick Start => Configure this local server click Add roles and features
  3. The wizard dialog will pop up ensuring that you have first done the following:
    1. The Administrator account has a strong password
    2. Network settings, such as static IP addresses, are configured
    3. The most current security updates from Windows Update are installed
    If they are, click Next >
  4. For the Installation Type leave the selection on Role-based or feature-based installation and click Next >
  5. For the Server Selection ensure this server is selected and click Next >
  6. For the Server Roles select Active Directory Domain Services
    • A dialog will pop up to confirm whether you want to add the additional features that are required - click Add Features
    Click Next >
  7. For the Features click Next >
  8. For the AD DS click Next >
  9. For the Confirmation click Install and close the dialog when it is done

Promote the server to a Domain Controller

  1. Once the installation is finished navigate to the flag icon in the top-right corner of the screen. It should have an alert icon next to it indicating that some action is required. Click it and the link that says Promote this server to a domain controller
  2. For the Deployment Configuration select Add a new forest from the radio buttons
  3. Enter a Root domain name - in our case Test.Tek and click Next >
  4. For the Domain Controller Options enter and confirm a password and click Next >
  5. For the DNS Options click Next >
  6. For the Additional Options wait until the system displays a NetBIOS domain name, confirm that it is to your liking, and click Next >
  7. For the Paths set the server folders to their appropriate folders/partitions:
    FOLDER PATH
    Database folder::/ActiveDirectory/ADDB
    Log files folder::/ActiveDirectory/Logs
    SYSVOL folder::/ActiveDirectory/Sysvol
    Click Next >
  8. For the Review Options confirm your selections, click View Script, save the file as DCPROMO.txt in the ActiveDirectory/Logs folder and click Next >
  9. For the Prerequisites Check wait until the system has determined if you meet all the requirements. If you have, click Install
  10. Restart you computer

Create a Reverse Lookup zone on the DNS

  1. Open the DNS Manager as Administrator
  2. In the left-hand panel right-click Reverse Lookup Zones and click New Zone...
  3. This will open the New Zone Wizard - click Next >
  4. Select the Zone Type (in our case Primary), make sure the Store the zone in the Acitve Directory is checked and click Next >
  5. Leave the Zone Replication Scope as is:
    To all DNS servers running on domain controllers in this domain
    Click Next >
  6. Select IPv4 Reverse Lookup Zone and click Next >
  7. Type in the IP we used for the static IP (192.168.1.) into the Network ID: and click Next >
  8. For ease of use - NOT FOR PRODUCTION - select Allow both nonsecure and secure dynamic updates and click Next >
  9. Click Finish

Add a host

  1. In the DNS Manager right-click the Forward Lookup Zones => [domain_name] and choose New Host (A or AAAA)... from the context menu
  2. Enter the Name of the server and it's IP address in the fields and check the Create associated pointer (PTR) record checkbox
  3. Verify that the A record was created in the Forward Lookup Zone and that the PTR record was created in the Revese Lookup Zone - right-click and choose Refresh. Both IPs should match

Add an alias

  1. In the DNS Manager right-click the Forward Lookup Zones => [domain_name] and choose New Alias (CNAME)... from the context menu
  2. Enter a Name for the alias
  3. Enter the Fully qualified domain name (FQDN) for target host: in the field and click OK
  4. Right-click the Reverse Lookup Zones => [our_zone] anc select New Pointer (PTR)... from the context menu
  5. Complete the Host IP Address: and enter a Host name: anc click OK
  6. Confirm that the A record in the Forward Lookup Zone matches the PTR record in the Reverse Lookup Zone