Setup Active Directory (Server 2008)
This tutorial will walk you through configuring your new Windows Server 2008 system as an Active Directory Domain Controller. Before beginning, there are some things you need to consider.
If you are adding this server to an existing domain (in which case it’s most likely a mixed 2000-2003-2008 environment), you must prep the Active Directory environment for use with 2008 servers. You can do this by performing the following steps:
- Insert the Server 2008 DVD into your existing primary domain controller (or at least provide access to the DVD over the network and use Remote Desktop to access the server).
- Open a Command Prompt window (Start > Run > cmd > OK) and switch drives to your DVD. Then use the command cd Source\ADPREP to switch to the ADPREP folder.
- Run the following commands to prepare your Active Directory environment…
- adprep /forestprep
- adprep /domainprep
- adprep /gpprep
- adprep /rodcprep
If you don’t do this before you begin configuring your Windows Server 2008 system for the domain, the process will fail, and you could jeopardize operations of your network.
Once the AD upgrade has been performed, you are ready to go!
1. From the Initial Configuration Tasks screen choose Add Roles option, or from the Server Manager console, choose Roles on the left-hand menu, and then choose Add Roles on the right side (click screenshots below for larger view)…
2. You’ll see the following screen. Just click Next.
3. Select Active Directory Domain Services from the list, and click Next.
4. On the screen that follows, read over this information carefully if it’s your first domain configuration. Then click Next.
5. Setup will automatically install all the features required for the server to act as an Active Directory Domain Controller; however, it will not configure it as a domain controller. For now, click Install and the process will begin. When it finishes, it displays a confirmation prompt. DO NOT click Close. Instead, click the blue link labeled, "Close this wizard and launch the Active Directory Domain Services Installation Wizard (dcpromo.exe)".
6. The DCPROMO wizard will begin at this point. Select the option to Use advanced mode installation and click Next.
7. Read the following information carefully and if necessary, and follow the advice if needed. When you’re ready, click Next.
8. Setup branches slightly at this point depending on whether you’re doing an upgrade, addition, or new server install. In this case, I am doing a new forest with a new domain and a new domain controller. In other words, I’m starting from scratch. You should choose the option most appropriate for your environment, but if you’re reading this, chances are you’ll want to do a new environment along with me.
Select the second option for Create a new domain in a new forest and click Next.
9. The Forest Root Domain is always the absolute top-level for your domain. If you’re setting this domain up for use on the Internet (a web or email server, for example), then you should use your registered domain name as shown below. In my case, I’m using aaronhall.net because that is my domain name on the Internet. It does NOT have to be an Internet-accessible domain, however. You can use something like aaronhall.local or just plain aaronhall depending on your needs. Fill this in based on your needs and click Next.
10. The Domain NetBIOS Name is the Windows version of your domain name. It should be just the primary part of your domain name without extensi
ons, so in my case– AARONHALL. Fill this in based on your needs and click Next.
11. Be careful when setting the Forest function level for your domain. If you already have a mixed environment with Server 2000 or 2003, it won’t let you promote it to 2008, but if you are starting from scratch with 2008 and plan to later add a 2003 server for compatibility, you cannot set it as Windows Server 2008 now. Choose this in based on your needs and click Next.
12. You must choose to install the DNS server role on this server if it is your only server or if you have no other DNS servers in your network. I strongly recommend that ALL domain controllers be configured as a DNS server.
NOTE: If this is your first DNS server, you will receive the following warning. Click YES.
13. At this point, setup prompts you for the database, log files, and SYSVOL folder. I generally just accept the defaults and click Next. But many administrators prefer to move these files to a dedicated drive, especially for exceptionally large domains.
14. You will then be prompted for an administrative password for Directory Services Restore Mode. Fill this in based on your needs and click Next.
15. Setup will allow you to review your choices before continuing. Make sure this information is correct, because it cannot be changed later without a LOT of headaches and hassle. When ready to continue, click Next.
16. Setup takes over from here. I recommend choosing the Reboot on completion option and taking a break, because this takes a while, especially for a domain upgrade situation. Setup will reboot automatically when it finishes and when you come back, you’ll be ready to go with your new Active Directory Domain.
