Active Directory Domain Services (AD DS) is a core component of Windows Server that provides directory services for network administration. It enables centralized management of users, computers, and resources across an enterprise network. This article provides a detailed, step-by-step guide for installing AD DS, based on official Microsoft documentation and technical manuals. The instructions apply to both local and remote server deployments, with support for both graphical user interface (GUI) and command-line (PowerShell) methods.
Installation Overview and Prerequisites
Before beginning the installation process, certain prerequisites must be met to ensure a successful deployment of AD DS. These include:
- Operating System: A Windows Server OS (2012, 2016, 2019, or later).
- Static IP Address: The server must have a static IP address assigned.
- Hostname Configuration: The hostname should be set to the desired name for the domain controller. Changing the hostname after installation can cause temporary service disruptions.
- Administrative Permissions: The user must have sufficient credentials to run commands such as
adprep.exe, which is required in specific scenarios (e.g., when adding the first domain controller to an existing forest or domain).
The installation can be performed using Server Manager, a GUI-based tool, or through PowerShell, a command-line interface that allows for scripting and automation.
Installation via Server Manager
The Server Manager is the primary tool used for installing roles and features on Windows Server. AD DS is installed through a series of wizard steps, which are described below.
Step 1: Launch Server Manager
Open Server Manager from the Start menu or the taskbar. Server Manager allows for the management of roles and features on both local and remote servers, provided they are added to a server pool.
Step 2: Add Roles and Features
From the Server Manager dashboard, select Manage and then Add Roles and Features. This launches the Add Roles and Features Wizard.
Step 3: Select Installation Type
Choose Role-based or feature-based installation and click Next.
Step 4: Select Destination Server
Select a server from the server pool. If the target server is not already in the pool, it must be added first. A server pool is a collection of servers that can be managed remotely through Server Manager.
Step 5: Select Server Role
From the list of available roles, select Active Directory Domain Services. Upon selection, a confirmation prompt will appear. Click Add Features to continue.
Step 6: Review Features
On the Select features page, no additional features are required for a basic AD DS installation, so click Next.
Step 7: Review AD DS Installation
On the Active Directory Domain Services overview page, review the installation details and click Next.
Step 8: Confirm Installation
On the Confirm installation selections page, click Install to begin the installation process. The progress is displayed in the Server Manager dashboard.
Step 9: Promote Server to Domain Controller
After the installation is complete, the Results page will show the success of the installation. From there, select Promote this server to a domain controller to launch the Active Directory Domain Services Configuration Wizard.
Deployment Configuration
In the Deployment Configuration page of the wizard, users must choose one of the following options:
- Add a new forest: This option is used when setting up the first domain controller in a new environment.
- Add a domain controller to an existing domain: This option is used when extending an existing domain with a new domain controller.
- Add a child domain to an existing domain: This option is used to create a new domain under an existing parent domain.
- Add a new domain in an existing forest: This is used for creating a new domain within a multi-domain forest.
Each configuration requires specific credentials and settings to ensure proper integration with existing infrastructure.
Installation via PowerShell
For users preferring a script-based approach, AD DS can also be installed using PowerShell. This method is particularly useful for automation and remote deployments.
Step 1: Install the AD DS Role
Run the following command in PowerShell to install the AD DS role and its management tools:
powershell
Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools
This command installs both the AD DS server role and the management tools required to administer it locally or remotely.
Step 2: Review Available Cmdlets
After installation, users can view the available cmdlets in the ADDSDeployment module by running:
powershell
Get-Command -Module ADDSDeployment
To view the parameters and syntax for a specific cmdlet, use:
powershell
Get-Help <cmdlet name>
For example, to view help for the command to create a read-only domain controller (RODC), use:
powershell
Get-Help Add-ADDSReadOnlyDomainControllerAccount
Step 3: Execute Remote Installation
PowerShell allows for remote execution of AD DS installation commands using the Invoke-Command cmdlet. For example, to install AD DS on a remote server named ConDC3 in the contoso.com domain, run:
powershell
Invoke-Command -ComputerName ConDC3 -ScriptBlock { Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools }
This enables centralized management of AD DS across multiple servers without requiring physical access to each machine.
Server Pools and Remote Management
Server pools are an essential concept when managing multiple servers through Server Manager. They allow administrators to group servers for centralized configuration and deployment tasks. To add a remote server to a server pool:
- Open Server Manager.
- Select Manage and then Add Servers.
- Use the search or browse options to locate the target server.
- Add the server to the pool and verify connectivity.
Servers in a workgroup can also be added to a domain-joined Server Manager, but additional configuration steps are required. These are detailed in the "Add and manage servers in workgroups" section of the Server Manager documentation.
Post-Installation Considerations
After installation, it is important to verify that the domain controller is functioning correctly and that all required services are running. This includes:
- DNS Services: AD DS relies on DNS for name resolution. Ensure that the server is configured with the correct DNS settings.
- Replication: If adding to an existing domain, verify that replication is functioning between domain controllers.
- Permissions and Groups: Confirm that the correct administrative groups (e.g., Domain Admins, Enterprise Admins) have been assigned proper permissions.
- Schema and Domain Preparation: In certain upgrade scenarios, additional preparation using the
adprep.exetool is required. This includes runningadprep /forestprepandadprep /domainprepto update the schema and domain functional levels.
Conclusion
Installing Active Directory Domain Services is a critical task for managing enterprise environments. This article has outlined the detailed steps required to perform the installation using both the Server Manager GUI and PowerShell. It also covered important post-installation considerations such as DNS configuration, replication, and schema preparation. By following these procedures, IT professionals can ensure a robust and secure deployment of AD DS, tailored to the needs of their organization.