Install an Active Directory Domain Services before you can promote the server to be a domain controller.
Need to install the Active Directory Domain Services roll on the server install a roll or feature user
the install does Windows feature command cloud.
This common left replaces the at the windows feature command led which was used in Windows Server 2008
R2 for capability at windows feature is an alias to install those windows feature like command to install
a HDD including the management tools required is as follows You have to type install the windows feature
their name HDD domain their services that include management tools.
This installs HDD as on the server and includes both the graphical and Windows powerful tools that are
used to manage and deploy active director for the purpose of this course.
This includes two power shell modules Active Directory and HDD deployment some words about creating
the forest or DC promo.
Beginning with windows to solve and turn right up to Windows Server to 2012.
The command line way to create a new domain controller was to use the GC promo command.
But beginning with Windows Server 2012 GC promo has been replaced with the HDD deployment module.
This module supports remote and so that you can promote a server to the controller.
Create a new domain or even create a new forest without logging onto the server that is being promoted
to view the command LEDs in this module you can use the following syntax get command this module HDD
deployment and pipe it to a format table name and form a table by name so let's run this command to
see the commands in this module.
As you can see we have quite a few commands which are related to this module install a tedious domain
and so on.
Test ADT as the main control installation.
As you can tell almost all the various promote demoed test possibilities are included in this module.
The five test common LEDs need a bit of explanation.
Each of these common LEDs allows you to actually test whether all prerequisites are met before you run
the install or outcome and let in the same.
Now this way you can fully test your environment before committing the install and add nouns actually
perform this same test and will error out if any of them fail.
Some words about update in Windows power shall help.
Before you go any further it's good idea to update your post shell help files.
Unfortunately there are only stop files man pages included with Windows power show.
This allows windows to update their help files on a regular basis but it isn't terribly helpful if you
are using an unfamiliar command.
The only full help file included with Windows power Shell is left for the update.
Help.
Common blood.
You need to be run in with administrative privileges to update the help files.
You can update directly from Microsoft or update from a network share the basic command is the following
update desk help.
Yes it's just very simple like this.
And if you want to update files from some local source you can run update this help.
Then Dash.
Source POS and to specify the POS where the update files are located but if it is just fresh environment
you are following along with me.
You don't have such a POS but it's a good idea to get in the habit of updating help files whenever you
add new modules to us or if you have servers that don't have Internet access or if you just want to
control your Internet bandwidth you can use this safe help.
Come on.
Glad to download and save the newest help files to network share the command to force an update to the
car and help files and then save them to the to some network share like.
Double backslash.
As there we 1 help files back slash help files director so you can upload download to the files later
on from this destination.
So let's take a look at this example save this help Dash.
Destination Perth and then specify the path to the files and then you can add force parameter before
you start.
You can test the creation process of your forest with the following command test.
There's a tedious forest installation matter.
Please remember that you have to import module HDD deployment first.
So let's run again this command to make sure that it is imported and then we will test the creation
process.
So let's run.
Import this module HDD deployment when it is done and we can run the following command test thus HDD
forest installation.
This domain name then we have to specify that the domain name in quotes.
Let's type some domain name here.
In my case it's the controller so dot com in quotes.
Then the next parameter is this domain net buyers name and includes we again have to specify the name.
I'll type comments also here in quotes then domain there's domain mode seeks a forest mode 6 and no
DNS on network parameter and no reboot on completion parameter and if everything goes fine it will return
two warnings.
One is about the security settings.
It warns about compatibility with some older versions of Windows and due to a change in the cryptography.
This is normal and expected and it can be ignored unless you have computers or devices on your network
that require surgeons that are compatible with Windows anti version 4.
The second is a delegation warning for DNS.
This is also expected in most cases.
Neither warnings is sufficient to stop the installation to create problems problems.
So you are ready to proceed
at this point.
You've configured your server added the necessary windows power show modules and the windows server
rolls and tested your environment all as the ready to do the actual initial deployment of your first
domain controller and route HDD forest.
The actual command to install the new forest and domain is nearly identical to test thus HDD forest
installation.
The main difference is that this time you do want to reboot the server when the installation is finished
and because you just run the tests you can skip them.
So lets type the following command install dash HDD forest there the my name the name you want to use
for your forest in my case it's control so dot com.
Then there's the main net bias name parameter and the name you want to use in my case it's control and
parameter domain mode.
6 forest mode 6 and no DNS on network parameter.
Skip regex parameter and force parameter.
The other things added is this fourth parameter to suppress any confirmation prompts you'll still be
prompted for the value of the directory service restore mode.
Or D I S our Ram pass.
You can avoid even that by using the dash safe mode administrator password parameter with a secure string.
Well the equivalent to your password if you are automating a lot of forest or domain creation such as
in lab environment or some others you can use this technique to keep this password parameter.
But in this case we will we won't keep it and we will have to type in this password.
But if you want to automate you could use the following command.
You have to add variable for your password and to you it will be equal to convert to secure a 3 in the
string and then specify the password you want to use and the parameter as plaintext and forest parameter.
So you can.
You could use this before creating your forest and then when you create your forest.
Use the dash as safe mode administrative administrator password parameter now some words about functional
levels which we've specified in this command we've specified two parameters.
Domain mode 6 and forest mode 6.
So here is the table of functional level of Windows operating systems.
As you can see Windows Server 2012 are two has got the default numeric level of 6 the default forest
functional level for Windows Server is typically the same as a Windows server version with the exception
that the default for Windows Server two thousand eight are two is a forest functional level of Windows
Server 2003 the domain functional level can never be less than the forest functional level but it can
be higher if the domain mode isn't specified it is computed from the environment install HDD as forest
has some additional options that might be useful in your environment and that allow you to tweak the
initial configuration we have some parameters and I'll list them domain name it the fully qualified
domain name of the new domain create DNS delegation attempts to create it in the DNS delegation to New
DNS server database pass with this parameter we can specify the location to store the domain database
must be a local fixed DESC DNS delegation credential parameter this parameter is for a credential object
with permission to create the DNS delegation DNS mode parameter to the HDD domain functional level of
the new domain domain.
Net biased.
Name the net biased name of the new domain.
Forest mode.
Functional forest functional level of the new forest for parameter suppresses confirmation prompts installed
DNS install installs active directory integrated DNS server log.
Pass this parameter to specify pass to the lock of then store no DNS on network.
This specifies that there are no DNS servers present on the network no reboot on completion.
This prevents the server from rebooting after the installation completes safe mode administrator password.
This sets the DRM password and you don't have to specify it when installed this forest and you don't
have to confirm it.
Skip auto configure DNS parameter.
This keeps automatic configuration of general surgeons skip breech checks doesn't check the environment
to find out whether the installation will succeed and CIS will pass this parameter is to specify the
fully qualified log local pass to the fixed disk where the CIS vol file will be written.
So Hugh this we are the main parameters which you can use when install the new forest and knew the man
in your environment.