Initial Setup
- Install Active Directory Domain Services (AD DS)
- Open Server Manager.
- Click Manage, then select Add Roles and Features.
- Follow the wizard, selecting Role-based or feature-based installation.
- Select your server, then check Active Directory Domain Services in the roles list.
- Click Next until completion, then click Install.
2. Configure Active Directory
- After installation, open Server Manager, click the yellow warning sign at the top, and choose Promote this server to a domain controller.
- Select Add a new forest and input your domain name, e.g.,
xxx.local. - Set the DSRM (Directory Services Restore Mode) password.
- Follow the wizard to complete the setup and click Install.
3. Verify Installation
- The server will restart automatically after installation. Post-restart, check the domain services’ status in Server Manager to ensure everything is running smoothly.
Additional Configuration
- DNS Configuration
- DNS is usually auto-configured with Active Directory. Ensure it correctly resolves names within the domain.
2. Creating User and Computer Accounts
- Open Active Directory Users and Computers.
- For users: Right-click your domain (e.g.,
xxx.local) and select New > User. - For computers: Find or create an Organizational Unit (OU), right-click, and select New > Computer.
3. Configuring Group Policy
- Open Group Policy Management.
- Right-click on your domain or specific OU, and select Create a GPO in this domain, and Link it here.
- Name the new GPO and click OK.
- Right-click the new GPO and select Edit to open the Group Policy Editor.
- Configure settings under Computer Configuration and User Configuration as needed.
- Close the editor when done. Apply the new policy during the next refresh cycle or use
gpupdate /force.
4. Joining Computers to the Domain
- On each computer, open System Properties, click Change settings and join the domain under the Computer Name tab.
5. Setting Up Shares and Permissions
- Set up file shares on the server and configure appropriate access permissions.
6. Security Configuration and Monitoring
- Regularly update and maintain the server for security.
- Monitor network activity and logs for system stability.
KAGAYA's Blog 