Share via

INSTALLATION AND CONFIGURATION OF ADDS

  • Article
  • First of all , we’ll need to change the computer/server  name to something like (dc1 or Nydc1 or anything you wish etc. Something easy to remember rather then having  WIN521HGNBYNBJKK .  and restart the Server.

 
Another important  step  to remeber that, we’ll have to give a Static IP address ,for our DC to be found by  clients on our network.IP range is depends on your environment, Because this is a LAB scenerio , I am going to use a C Class IP 192.168.1.0/24.

https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-xtf1/v/t1.0-9/11069358_10206036250525324_3039471822298308020_n.jpg?oh=efe4af4b62d0192ebf5c79e0b80a31e7&oe=55B28A50&__gda__=1437228916_b672a02c32b161a0abc011e50c53c61d

Domain Controllers is an  important Machines , stores very important and critical data on them, therefore, we will have to download and install latest security updates from Microsoft.

https://scontent-cdg.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/10606538_10206036260485573_6459414170497028832_n.jpg?oh=05e2195f7d9a912299519ee04acb1a61&oe=55AD1A46

Now we ready to install our very first DC by installing Active Directory Domain services Role. On server manager Click Manage and  select  Add Roles and Features.

https://scontent-cdg.xx.fbcdn.net/hphotos-xfp1/v/t1.0-9/10981204_10206036275045937_5526166326276591537_n.jpg?oh=2c8832c6597cc0f33a6650a57043c98a&oe=55700E8E

Once the wizard has open, its a recommended practice  to read  description on each steps, what you are actually doing, rather then doing old classic way of next next next.  As it mentions on below image, its asking us to complete the first 2 of 3 steps which we did earlier.

**Network Setting and Security updates  (You have to complete these steps before installing  ADDS) **and  click on Next>
https://scontent-cdg.xx.fbcdn.net/hphotos-xfp1/v/t1.0-9/19320_10206036293046387_7157067142686955040_n.jpg?oh=cc3b1565bfed974b060db73aa968c6c2&oe=55ADCE38

Because we are going to install ADDS role therefore we have to choose Role based installation and Next>

https://scontent-cdg.xx.fbcdn.net/hphotos-xpa1/v/t1.0-9/10561703_10206036315046937_8144132457402183371_n.jpg?oh=0456e27d082fb0059b35d8a1ba432d4d&oe=55BE140B

As you see on below screenshot, This is the machine that ADDS going to be installed on, and click on Next>

https://fbcdn-sphotos-g-a.akamaihd.net/hphotos-ak-xta1/v/t1.0-9/11054273_10206036338367520_4098851579022801794_n.jpg?oh=35c8e6bf40452653ca11274279478c0a&oe=557B7164&__gda__=1433539625_7b9a8c2eb4345e62bf9c7860fc90b433

Now we’ll need to choose the second option from the Top ( Active Directory Domain Services)

https://scontent-cdg.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/11024613_10206036350567825_2058518552543488469_n.jpg?oh=32a6d2b9bfd9e1042106cf85f7554fbf&oe=55B7F7C1

Once you check it, its going to bring below wizard and telling us  that required features going to be installed with this installation, and click on Add Features

https://scontent-cdg.xx.fbcdn.net/hphotos-xpa1/v/t1.0-9/11081359_10206036359128039_6619950933419575880_n.jpg?oh=6eb6babbc1473d7c5e2d7ad917a2e65b&oe=55B41CEF

Then Click on Next>

https://scontent-cdg.xx.fbcdn.net/hphotos-xfp1/v/t1.0-9/13046_10206036367768255_796177271092115730_n.jpg?oh=849c698b98988f358e84c7dfc8240070&oe=557949EC

You can leave everything  as its like below page, then click on Next>

https://fbcdn-sphotos-h-a.akamaihd.net/hphotos-ak-xap1/v/t1.0-9/10363829_10206036374928434_6097766155643278432_n.jpg?oh=b4be04d0f60d744e83b0cb2ae5243484&oe=55B2BEAD&__gda__=1438117112_54ffa995ffd2f3d50490b5e7f7f687f1

In here, it gives brief information about, whats ADDS is, and what it does . for a Domain Minimum 2 DCs required, in case of failover and second DC will then countinue serving your clients. Click Next>

https://fbcdn-sphotos-f-a.akamaihd.net/hphotos-ak-xpf1/v/t1.0-9/10419061_10206036392648877_5784422414162598811_n.jpg?oh=03a6a5a7ea8f7fb4da280188f134186c&oe=55B30A88&__gda__=1437061111_1d9637a3b412761824a71b70516cdb5e

and now on summary page. İts confirming that whats going to be installed on our server, this is the last option where you can go back and  make changes on our installation. Click on İnstall

https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-xfp1/v/t1.0-9/10922596_10206036569413296_3512861051285062913_n.jpg?oh=97cc4ddb6da5da163ad17e8994df3a69&oe=55B16F00&__gda__=1437296485_80ea155d67cd931d8d9380a7077b934f

And now we will have to wait until its completed.(you can go and grab a quick coffee while its performing the installation. J)

https://scontent-cdg.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/10614204_10206036604734179_6959747861816264682_n.jpg?oh=94fc1b2f7de9648f3580050c08e00f67&oe=55BE2695

Great, we have now  installed our ADDS role on our server.
https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-xfa1/v/t1.0-9/15487_10206036623334644_6937060243601905584_n.jpg?oh=a166f7778f8d48d25431ab65ba2ea01a&oe=557222BF&__gda__=1437139695_ef16acdf160992c6c040e88edc793195

Installing ADDS role doesnt mean anything , now its just a Empty machine. İn order to become Domain controller, we have to promote this Machine as our first domain controller, in the mean time ,we are going to create our first forest Root Domain.(in my case).Click on Promote this server to Domain Controller link on wizard.

https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-xfp1/v/t1.0-9/11053625_10206036640255067_1147480492490179721_n.jpg?oh=ab2b553ba4e894b7bfc158f3d06f0a4b&oe=55B71E3D&__gda__=1436879704_3ecc40b5e975a92dbe06433b02749359

Once the Deployment configuration page opens, The system  makes a quick check ,if any other domain(s) already  exists  on the network.(in my case, I am creating my very first Forest) , so I select Add a new forest

https://fbcdn-sphotos-f-a.akamaihd.net/hphotos-ak-xfp1/v/t1.0-9/1510977_10206036669615801_6974883616868505430_n.jpg?oh=29901e54d393bc0f2b919072724c8bdf&oe=557C5B1E&__gda__=1437465166_adcabb65535fbf9e76a0bbdaf15a13c2

Then I have to give a Root Domain name for my forest ( I am going to give sahinbulent.com) for my scenerio. and click on Next>

https://scontent-cdg.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/11091483_10206036680576075_7529298717851636448_n.jpg?oh=21dca32a33f6739fa26f0c90f548bbd6&oe=55A604E0

On Domian controller option, its a very important information there which you’ll need to make a decison.

In Active Directory Domain Services (AD DS), domain controllers can run different versions of Windows Server operating systems. The functional level of a domain or forest depends on which versions of Windows Server operating systems are running on the domain controllers in the domain or forest. The functional level of a domain or forest controls which advanced features are available in the domain or forest.

All servers in an organization could run the latest version of Windows and take advantage of all the advanced features that are available with the newest software. But organizations often have a mixture of systems, generally running different versions of operating systems, which are migrated to the latest version only as organizational requirements demand additional functionality, either for the entire organization or for a specific area of the organization.

After you set the domain functional level to a certain value in Windows Server 2008 R2, you cannot roll back or lower the domain functional level, with one exception: when you raise the domain functional level to Windows Server 2008 R2 and if the forest functional level is Windows Server 2008 or lower, you have the option of rolling the domain functional level back to Windows Server 2008. You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.

İt will also install DNS and Global Catalog and Then Create DSRM password(this is to password when restroring your ADDS database or in a migration state).

https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-xfp1/v/t1.0-9/988907_10206036723817156_415534066125654335_n.jpg?oh=a682b149d1d1c0c7796f180792b530f2&oe=55739137&__gda__=1433812908_659619733cfdde3cfaee3b6ad4beef60

On DNS option , its telling us that no DNS zone has been found and its going to create one. And click next>

https://fbcdn-sphotos-c-a.akamaihd.net/hphotos-ak-xpa1/v/t1.0-9/10394490_10206036731377345_1435110855640741211_n.jpg?oh=b06fcc227927e05dead4b50f8c2644bd&oe=5576470C&__gda__=1434188314_9ac206598a0b1830358907c09caa13f7

And now its Verifiying, if  sahinbulent already exist on the network.if it did then it wont allow us to create forest name called sahinbulent, if it doesnt exist , it will create as shown on below.Click on Next>

https://scontent-cdg.xx.fbcdn.net/hphotos-xpa1/v/t1.0-9/10468206_10206036744697678_4548980106400154421_n.jpg?oh=8accf0af243522a23ee30d35c24c3b0a&oe=557666F4

İts now confirming  where the ADDS Database and Sysvol folder going to be created in.These are the database that all of the object,users,computers, GC etc. will be stored on.(**Never Delete it :) **) You can choose the directory you wish( you can even put in your D drive(if any)) Make you sure they are cretated and exist after the installation. For Best practise double check your database folders make sure they are there.Click on Next>

https://scontent-cdg.xx.fbcdn.net/hphotos-xap1/v/t1.0-9/10892001_10206036766218216_7236438566531928044_n.jpg?oh=cbf4c07d5b19464aa250a4cf79ca0198&oe=5579B4AD

Summary Page , just do a quick review that nothing  forgetten , if any changes required , go back and amend your settings. And click Next>

https://scontent-cdg.xx.fbcdn.net/hphotos-xfp1/v/t1.0-9/11094200_10206036776898483_6363360387755780041_n.jpg?oh=85e80d84df86b8723468768b85a0d4ca&oe=55B0AC7F

Now system will check all the prerequisites that all of the information we have provided is correct and in a good place,

https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-xpt1/v/t1.0-9/10340157_10206036790338819_333785990797501769_n.jpg?oh=6bcf7ca4ced12c3f46b381e09874852c&oe=55B86782&__gda__=1437791490_bdc6fe818b69a01d4913ae4d586d86ca

Its succesfully passed the prerequisites , that mean, we can now go ahead and install our forest root domain.and click on Install>

https://scontent-cdg.xx.fbcdn.net/hphotos-xfp1/v/t1.0-9/11059676_10206036797218991_9142488319570374632_n.jpg?oh=40282f624c3f3cab61d64dd0ce6f46ae&oe=55B40604

Its now instaling our Forest Root Domain, Creating DNS, GC,OU etc. It will restarts the server after installation.

https://fbcdn-sphotos-c-a.akamaihd.net/hphotos-ak-xpa1/v/t1.0-9/17637_10206036806219216_3203185532429360113_n.jpg?oh=bee96796c1865725c704bdc4b1ada714&oe=557A0261&__gda__=1434048860_cd4a4c8736e2d9d57b68354f4cc23d9b

As we seen below, it has finished Promoting the server for become a DC and restarting......

https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-xpa1/v/t1.0-9/11081313_10206036812579375_3565502686136086936_n.jpg?oh=5f24eda9d5fc48850d404be1766e6195&oe=55BD4429&__gda__=1437190207_c856a8eb630e8dd0d462676e06adeeef

https://scontent-cdg.xx.fbcdn.net/hphotos-xpa1/v/t1.0-9/10985370_10206036836699978_5438875525525632408_n.jpg?oh=b684955326c2fd4efd96574f040984b6&oe=55BA9136

https://scontent-cdg.xx.fbcdn.net/hphotos-xpa1/v/t1.0-9/11081191_10206036836779980_927047867282884972_n.jpg?oh=c6c51d016ec3488645cd571281b18faf&oe=55B08EF4

Now we have the login screen back after restart. We must login as Enterprise Admin **sahinbulent\administrator ** not with  the local administrator account.

https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-xpf1/v/t1.0-9/11081147_10206036836939984_2310085829934417543_n.jpg?oh=1d3e440d1b431bded30e3530aebef752&oe=55A95BA0&__gda__=1436885727_8c421d30fa167ecde66f4c03c9bed004

https://scontent-cdg.xx.fbcdn.net/hphotos-xpa1/v/t1.0-9/11073564_10206036837299993_3663610726719221320_n.jpg?oh=295f3b899f3c4acce2e6390ad82df47a&oe=5570A7E0

https://fbcdn-sphotos-h-a.akamaihd.net/hphotos-ak-xap1/v/t1.0-9/14702_10206036837379995_4594151428478421480_n.jpg?oh=296a36d8fc481f05f760bb08cf085eef&oe=55BD6FE4&__gda__=1433911981_123b3d262455e64c09ce0a35015ef518

https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-xpf1/v/t1.0-9/1507189_10206036837740004_7168789809023161555_n.jpg?oh=188b22632b8c7df411f4efa29694d82c&oe=55B59492&__gda__=1433384365_31860be2c3394aef270eeeb1e9c352ea

https://scontent-cdg.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/11073504_10206036837860007_8677753739363492146_n.jpg?oh=61f1212157066c09ae8c5bde8838e710&oe=55797134

Guest What guys , We have now successfully installed our ADDS and forest Root  Domain as sahinbulent.com.

https://scontent-cdg.xx.fbcdn.net/hphotos-xat1/v/t1.0-9/13267_10206036838060012_3973081867331490761_n.jpg?oh=6f36032a208e293f2ec9d968072cddbe&oe=55AFDF12