#Install AD-Domain-Services And Configure A New Domain On Windows Server 2016
#This is to install and configure a new Active Directory domain called domain.winrollup.int with a short name of domain. You will be disconnected from Microsoft PowerShell at the end of the procedure if you are connected via WinRM or PowerShell Direct. You’ll need to restart the server and login with domain\username credentials when you reconnect.
#Just the code:
|
1 2 3 |
Get-WindowsFeature -Name AD-Domain-Services|Install-WindowsFeature -Verbose|fl Import-Module ADDSDeployment -PassThru|fl Install-ADDSForest -DomainName domain.winrollup.int -DomainNetbiosName DOMAIN -DomainMode 7 -ForestMode 7 -InstallDNS -Verbose|fl |
#The Longer Story…
#This is just to install a single domain on Windows Server 2016 using PowerShell commands.
#Install AD-Domain-Services feature in Windows Server 2016 using PowerShell Direct
|
1 |
Get-WindowsFeature -Name AD-Domain-Services|Install-WindowsFeature -Verbose|fl |
#Import the ADDSDeployment module that contains Install-ADDSForest
|
1 |
Import-Module -Name ADDSDeployment -PassThru|fl |
#Create domain and forest
#-DomainMode 7 and -ForestMode 7 are for Server 2016 domain and forest mode. These settings should be modified if compatibility for previous Active Directory domain and forest mode support is needed. I do not see these settings on the Microsoft help page for Install-ADDSDeployment but if you use the GUI wizard method then Server 2016 mode is the default used there and this will be added when they update the Install-ADDSDeployment TechNet page past Server 2012 R2.
#The -DomainNetbiosName is different from a Netbios Computer Name and is what is used when logging in so domain\administrator is as valid as logging into domain.winrollup.int\administrator.
|
1 |
Install-ADDSForest -DomainName domain.winrollup.int -DomainNetbiosName DOMAIN -DomainMode 7 -ForestMode 7 -InstallDNS -Verbose -NoRebootOnCompletion|fl |
#Full Output of Install-ADDSForest:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 |
The target server will be configured as a domain controller. The server needs to be restarted manually when this operation is complete. Do you want to continue with this operation? [Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): y VERBOSE: Active Directory Domain Services Setup VERBOSE: Validating environment and parameters... WARNING: Windows Server 2016 domain controllers have a default for the security setting named "Allow cryptography algorithms compatible with Windows NT 4.0" that prevents weaker cryptography algorithms when establishing security channel sessions. For more information about this setting, see Knowledge Base article 942564 (http://go.microsoft.com/fwlink/?LinkId=104751). WARNING: A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server. If you are integrating with an existing DNS infrastructure, you should manually create a delegation to this DNS server in the parent zone to ensure reliable name resolution from outside the domain "domain.win10server2016.lan". Otherwise, no action is required. VERBOSE: ---------------------------------------- VERBOSE: The following actions will be performed: VERBOSE: Configure this server as the first Active Directory domain controller in a new forest. The new domain name is "domain.win10server2016.lan". This is also the name of the new forest. The NetBIOS name of the domain is "DOMAIN". Forest Functional Level: Windows Server 2016 Domain Functional Level: Windows Server 2016 Site: Default-First-Site-Name Additional Options: Read-only domain controller: "No" Global catalog: Yes DNS Server: Yes Create DNS Delegation: No Database folder: C:\Windows\NTDS Log file folder: C:\Windows\NTDS SYSVOL folder: C:\Windows\SYSVOL The DNS Server service will be installed on this computer. The DNS Server service will be configured on this computer. This computer will be configured to use this DNS server as its preferred DNS server. The password of the new domain Administrator will be the same as the password of the local Administrator of this computer. VERBOSE: ---------------------------------------- VERBOSE: Active Directory Domain Services Setup VERBOSE: Validating environment and parameters... WARNING: Windows Server 2016 domain controllers have a default for the security setting named "Allow cryptography algorithms compatible with Windows NT 4.0" that prevents weaker cryptography algorithms when establishing security channel sessions. For more information about this setting, see Knowledge Base article 942564 (http://go.microsoft.com/fwlink/?LinkId=104751). WARNING: A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server. If you are integrating with an existing DNS infrastructure, you should manually create a delegation to this DNS server in the parent zone to ensure reliable name resolution from outside the domain "domain.win10server2016.lan". Otherwise, no action is required. VERBOSE: ---------------------------------------- VERBOSE: The following actions will be performed: VERBOSE: Configure this server as the first Active Directory domain controller in a new forest. The new domain name is "domain.win10server2016.lan". This is also the name of the new forest. The NetBIOS name of the domain is "DOMAIN". Forest Functional Level: Windows Server 2016 Domain Functional Level: Windows Server 2016 Site: Default-First-Site-Name Additional Options: Read-only domain controller: "No" Global catalog: Yes DNS Server: Yes Create DNS Delegation: No Database folder: C:\Windows\NTDS Log file folder: C:\Windows\NTDS SYSVOL folder: C:\Windows\SYSVOL The DNS Server service will be installed on this computer. The DNS Server service will be configured on this computer. This computer will be configured to use this DNS server as its preferred DNS server. The password of the new domain Administrator will be the same as the password of the local Administrator of this computer. VERBOSE: ---------------------------------------- VERBOSE: Press CTRL-C to: Cancel VERBOSE: Active Directory Domain Services is now installed on this computer for the domain "domain.win10server2016.lan". This Active Directory domain controller is assigned to the site "Default-First-Site-Name". You can manage sites with the Active Directory Sites and Services administrative tool. Message : You must restart this computer to complete the operation. Context : DCPromo.General.4 RebootRequired : True Status : Success |
#Restart the server.
|
1 |
Restart-Computer |
#Reconnect to PowerShell Direct using the DOMAIN\administrator account after reboot from Install-ADDSForest is complete.
|
1 |
Enter-PSSession -VMName Server2016 -Credential domain\administrator |