CN Lab-4
CN Lab-4
Lab Manual: 4
34
CN LAB-4:
Install and configure Active Directory Domain Service on Windows Server 2016 with a client
Windows 10. After configuring domain controller, then configure windows 10 (client) as a
domain member. Then create a domain user on Windows Server and login for testing on
Windows 10 (client).
There are interesting new features now made available in Windows Server 2016 such as time
based group membership, privileged access management, and others. In this lab covered, how
to install active directory on Windows Server 2016.
In order to setup active directory we need to log in as local administrator. First thing to check
hostname (Server-1) and IP address configuration.
1) Once Active directory setup on the server, it also going to act as DNS server. There for
change the DNS settings in network interface and set the server IP address as the primary DNS
server.
35
2) Then open the server manager. Go to PowerShell (as administrator) and
type ServerManager.exe and press enter.
3) Then on server manager click on add roles and features
4) Then it opens the add roles and features wizard. Click on next to proceed.
36
37
5) Then in next window keep the default and click next
6) Since its going to be local server, in next window keep the default selection.
38
7) In next window from the roles put tick box for active directory domain services. Then it will
prompt to show you what the associated features for the role are. Click on add features to add
those. Then click next to continue.
39
40
41
8) The features page, keep it default and click on next to proceed.
42
9) In next windows it gives brief description about AD DS service. Click next to proceed.
43
10) Then it will give the confirmation about install, click on install to start the role installation
process.
44
11) Once done, it will start the installation process
45
12) Once installation completes, click on option promote this server to a domain controller.
46
13) Then it will open the active directory configuration wizard. In my demo I am going to setup
new forest. But if you adding this to existing domain you can choose relevant option. (I am
going to write separate article to cover how you can upgrade from older version of Active
Directory). Select the option to add new forest and type FQDN for the domain. Then click next.
47
14) In next page you can select the domain and forest functional levels. I am going to set it up
with latest. Then type a password for DSRM. Then click next
48
15) For the DNS options, this going to be the first DNS server in new forest. So no need any
modifications. Click next to proceed.
49
16) For the NETBIOS name keep the default and click next
50
17) Next page is to define the NTDS, SYSVOL and LOG file folders. You can keep default or
define different path for these. In demo I will be keeping default. Once changes are done,
click next to continue
51
18) Next page will give option to review the configuration changes. If everything okay you can
click next to proceed or otherwise can go back and change the settings.
52
19) In next windows it will do prerequisite check. If it’s all good it will enable option to install.
Click on install to begin installation process.
53
20) Then it will start the installation process.
54
21) After the installation system will restart automatically. Once it comes back log in to the
server as domain admin.
22) Once log in open the powershell (as administrator) and type dsac.exe and press enter. It
will open up the active directory administrative center. There you can start managing the
resources.
23) Now login at Windows 10 (client) and joining it as domain member with the Server 2016.
Then create a domain user on Server 2016 and login it on Windows 10 (client) for testing.
55