- Install a New Windows Server 2008 Forest
- Install a New Windows Server 2008 Child Domain
- Install a New Windows Server 2008 Domain Tree
- Install an Additional Windows Server 2008 Domain Controller
- Perform a Staged Installation of a Read-Only Domain Controller
- Install AD DS from Restored Backup Media
- Remove a Domain Controller from a Domain
- Forcing the Removal of a Windows Server 2008 Domain Controller
- Performing Metadata Cleanup
- Rename a Domain Controller
This chapter is from the book
This chapter is from the book
This chapter is from the book
Install a New Windows Server 2008 Child Domain
Solution: Installing a new Windows Server 2008 child domain consists of selecting the option to create a new child domain during the promotion of a domain controller. The installation of a new Windows Server 2008 child domain can be performed using the Windows interface, the command line, and an answer file.
Install a Child Domain by Using the Windows Interface
To install a child domain by using the Windows interface, perform the following steps using an AD DS account that has membership in the following AD DS group:
- Enterprise Administrators
- Log on to the server you want to promote to a domain controller.
- Click Start and then click Server Manager.
- In Roles Summary, click Add Roles.
- On the Before You Begin page, click Next.
- On the Select Server Roles page, click the Active Directory Domain Services check box; then click Next.
- On the Active Directory Domain Services page, click Next.
On the Confirm Installation Selections page, shown in Figure 3.20, click Install.
Figure 3.20 The Confirm Installation Selections page.
On the Installation Results page, shown in Figure 3.21, verify that the installation succeeded and then click Close this wizard and launch the Active Directory Domain Services Installation Wizard (dcpromo.exe).
Figure 3.21 The Installation Results page.
On the Welcome to the Active Directory Domain Services Installation Wizard page, shown in Figure 3.22, click Next.
Figure 3.22 The Welcome to the Active Directory Domain Services Installation Wizard page.
On the Operating System Compatibility page, shown in Figure 3.23, click Next.
Figure 3.23 The Operating System Compatibility page.
- On the Choose a Deployment Configuration page, select Existing forest, select Create a new domain in an existing forest, and click Next.
On the Network Credentials page, shown in Figure 3.24, type the DNS name of the domain you want to join. Under Specify the account credentials to use to perform the installation, click Alternate Credentials; then click Set. On the Windows Security dialog box, enter the username and password for an account that has the permission to add the domain to the forest, and then click OK. Click Next to proceed.
Figure 3.24 The Network Credentials page.
On the Name the New Domain page, shown in Figure 3.25, type the FQDN of the parent domain and the Single-label DNS name of the child domain. Then click Next.
Figure 3.25 The Name the New Domain page.
- On the Set Domain Functional Level page, Select the domain functional level that meets your requirements and click Next.
On the Select a Site page, shown in Figure 3.26, select the site to which you want the domain controller to belong and click Next.
Figure 3.26 The Select a Site page.
- On the Additional Domain Controller Options page, select the desired additional options for the domain controller and click Next.
- On the Location for Database, Log Files, and SYSVOL page, type the volume and folder locations for the database file, the directory service log files, and the SYSVOL files; then click Next.
- On the Directory Services Restore Mode Administrator Password page, type and confirm the restore mode password and then click Next.
On the Summary page, click Next after you review your selections.
The Active Directory Domain Services installation process starts, as shown in Figure 3.27.
Figure 3.27 The Active Directory Domain Services Installation Wizard screen.
- After the installation is complete, the Completing the Active Directory Domain Services Installation Wizard page appears. Ensure the installation was successful and click Finish.
- When prompted to restart, click Restart Now.
- To validate the installation process, click Start, click Run, type C:\Windows\Debug, and click OK.
- Open the DCPROMO.log file and analyze the results in the file.
)
)
)
)
)
)
)
)
Install a Child Domain by Using the Command Line
Table 3.3 lists the installation parameters used in the steps that follow and the corresponding action of each parameter.
Table 3.3. Installing a Child Domain by the Command Line Installation Parameters
|
Installation Parameter |
Corresponding Action |
|
/InstallDns:yes |
DNS server will be installed. |
|
/ParentDomainDNSName:WS03Domain.local |
Name of the parent domain to which this domain will be added. |
|
/replicaOrNewDomain:domain |
A new domain will be created. |
|
/newDomain:child |
The new domain will be a child domain. |
|
/newDomainDnsName:child02.WS03Domain.local |
FQDN of the new child domain. |
|
/childName:child02 |
Name of the new child domain. |
|
/DomainNetbiosName:child02 |
NetBIOS name of the new child domain. |
|
/databasePath:"c:\Windows\ntds" |
Database path. |
|
/logPath:"c:\Windows\ntds" |
Log file path. |
|
/sysvolpath:"c:\Windows\sysvol" |
SYSVOL path. |
|
/safeModeAdminPassword:Today01! |
DSRM Administrator password. |
|
/forestLevel:2 |
Forest functional level will be set to Windows Server 2003. |
|
/domainLevel:2 |
Domain functional level will be set to Windows Server 2003. |
|
/rebootOnCompletion:no |
Server will not be rebooted after completion. |
|
/userName:WS03Domain\Administrator |
The username that will be used to promote the server to a domain controller. |
|
/userDomain:WS03Domain |
The domain of the user account that will be used to promote the server to a domain controller. |
|
/password:Today01! |
The password of the user that will be used to promote the server to a domain controller. |
To install a child domain by using the command line, perform the following steps using an AD DS account that has membership in the following AD DS group:
- Enterprise Administrators
- Log on to the server you want to promote to a domain controller.
- Click Start and then click Command Prompt.
Type the following into the command prompt window and then press Enter:
dcpromo /unattend /InstallDns:yes /ParentDomainDNSName:WS03Domain.local /replicaOrNewDomain:domain /newDomain:child /newDomainDnsName:child02.WS03Domain.local /childName:child02 /DomainNetbiosName:child02 /databasePath:"c:\Windows\ntds" /logPath:"c:\Windows\ntds" /sysvolpath:"c:\Windows\sysvol" /safeModeAdminPassword:Today01! /forestLevel:2 /domainLevel:2 /rebootOnCompletion:no /userName:WS03Domain\Administrator /userDomain:WS03Domain /password:Today01!
The dcpromo process begins by determining whether the AD DS binaries are installed. If the binaries are not installed, dcpromo installs them.
- After the AD DS binaries have been installed, a summary of the installation options is presented in the command prompt window; then the AD DS installation process begins.
- The status of the AD DS installing is updated in the command prompt window.
When the installation process is complete, the server reboots automatically if the /rebootOnCompletion option was used in the command line. If the /rebootOnCompletion was not used in the command line, you are prompted to restart the server, as shown in Figure 3.28.
Figure 3.28 Installation complete.
The installation is complete.
- To validate the installation process, click Start, click Run, type C:\Windows\Debug, and click OK.
- Open the DCPROMO.log file and analyze the results in the file.
)
Install a Child Domain by Using an Answer File
Table 3.4 lists the installation parameters used in the steps that follow and the corresponding action of each parameter.
Table 3.4. Installing a Child Domain by Using Answer File Installation Parameters
|
Installation Parameter |
Corresponding Action |
|
ParentDomainDNSName=WS03Domain.local |
Name of parent domain to which this domain will be added. |
|
UserName=WS03Domain\Administrator |
The username that will be used to promote the server to a domain controller. |
|
UserDomain:WS03Domain |
The domain of the user account that will be used to promote the server to a domain controller. |
|
Password=Today01! |
The password of the user that will be used to promote the server to a domain controller. |
|
NewDomain=child |
The new domain will be a child domain. |
|
ChildName=Child03 |
The new domain will be a child domain. |
|
DomainNetBiosName=Child03 |
NetBIOS name of the new child domain. |
|
ReplicaOrNewDomain=domain |
Forest functional level will be set to Windows Server 2003. |
|
DomainLevel=2 |
Domain functional level will be set to Windows Server 2003. |
|
DatabasePath="c:\Windows\ntds" |
Database path. |
|
LogPath="c:\Windows\ntds" |
Log file path. |
|
SYSVOLPath="c:\Windows\sysvol" |
SYSVOL path. |
|
InstallDNS=yes |
DNS server will be installed. |
|
SafeModeAdminPassword=Today01! |
DSRM Administrator password. |
|
RebootOnCompletion=no |
Server will not be rebooted after completion. |
To install a child domain by using an answer file, perform the following steps using an AD DS account that has membership in the following AD DS group:
- Enterprise Administrators
- Log on to the server you want to promote to a domain controller.
- Click Start, click Run, type notepad, and click OK.
- On the first line, type [DCINSTALL]; then press ENTER.
Type the following entries, one entry on each line, as shown in Figure 3.29:
ParentDomainDNSName=WS03Domain.local UserName=WS03Domain\Administrator UserDomain=WS03Domain Password=Today01! NewDomain=child ChildName=Child03 DomainNetBiosName=Child03 ReplicaOrNewDomain=domain DomainLevel=2 DatabasePath="c:\Windows\ntds" LogPath="c:\Windows\ntds" SYSVOLPath="c:\Windows\sysvol" InstallDNS=yes SafeModeAdminPassword=Today01! RebootOnCompletion=no
Figure 3.29 The answer file.
- Save the answer file as C:\DCAnswer.txt.
- Click Start and then click Command Prompt.
Type the following into the command prompt window, as shown in Figure 3.30, and then press Enter:
dcpromo /unattend:"C:\DCAnswer.txt"
Figure 3.30 Installing a new child domain using an answer file.
The dcpromo process begins by determining whether the AD DS binaries are installed. If the binaries are not installed, dcpromo installs them.
After the AD DS binaries have been installed, a summary of the installation options is presented in the command prompt window; then the AD DS installation process begins. The status of the AD DS installing is updated in the command prompt window, as shown in Figure 3.31.
Figure 3.31 The status of installing AD DS.
- When the installation process is complete, the server reboots automatically if the /rebootOnCompletion option was used in the answer file. If the /rebootOnCompletion was not used in the answer file, you are prompted to restart the server.
- To validate the installation process, click Start, click Run, type in C:\Windows\Debug, and click OK.
- Open the DCPROMO.log file and analyze the results in the file.
)
)
)