- Install a New Windows Server 2008 Forest
- Install a New Windows Server 2008 Child Domain
- Install a New Windows Server 2008 Domain Tree
- Install an Additional Windows Server 2008 Domain Controller
- Perform a Staged Installation of a Read-Only Domain Controller
- Install AD DS from Restored Backup Media
- Remove a Domain Controller from a Domain
- Forcing the Removal of a Windows Server 2008 Domain Controller
- Performing Metadata Cleanup
- Rename a Domain Controller
Install a New Windows Server 2008 Domain Tree
Solution: Installing a new Windows Server 2008 domain tree consists of selecting the option to create a new domain tree during the promotion of a DC. The installation of a new Windows Server 2008 domain tree can be performed using the Windows interface, the command line, and an answer file.
Install a Domain Tree by Using the Windows Interface
To install a domain tree by using the Windows interface, perform the following steps using an AD DS account that has membership in the following AD DS group:
- Enterprise Administrators
- Log on to the server you want to promote to a domain controller.
- Click Start, click Run, type dcpromo, and click OK.
The AD DS server role is installed, as shown in Figure 3.32.
Figure 3.32 Installing AD DS server role using dcpromo.
- On the Welcome to the Active Directory Domain Services Installation Wizard page, select the Use Advanced Mode Installation option and click Next.
- On the Operating System Compatibility page, click Next.
- On the Choose a Deployment Configuration page, select Existing forest, select Create a new domain in an existing forest, select the Create a new domain tree root instead of a new child domain check box, and then click Next.
- On the Network Credentials page, type the DNS name of the domain you want to join. Under Specify the account credentials to use to perform the installation, click Alternate credentials, and then click Set. On the Windows Security dialog box, enter the username and password for an account that has the permission to add the domain to the forest; then click OK. Click Next to proceed.
On the Name the New Domain Tree Root page, shown in Figure 3.33, type the FQDN of the new domain tree and click Next.
Figure 3.33 The Name the New Domain Tree Root page.
On the Domain NetBIOS Name page, shown in Figure 3.34, enter the NetBIOS name for the new domain tree and click Next.
Figure 3.34 The Domain NetBIOS Name page.
- On the Set Domain Functional Level page, select the domain functional level that meets your requirements and click Next.
- On the Select a Site page, select the site to which you want the domain controller to belong and click Next.
- On the Additional Domain Controller Options page, select the desired additional options, such as DNS server and/or Global catalog, for the domain controller and click Next.
- On the Location for Database, Log Files, and SYSVOL page, type the volume and folder locations for the database file, the directory service log files, and the SYSVOL files; then click Next.
- On the Directory Services Restore Mode Administrator Password page, type and confirm the restore mode password. Then click Next.
On the Summary page, click Next after you review your selections.
The Active Directory Domain Services installation process starts, as shown in Figure 3.35.
Figure 3.35 The Active Directory Domain Services Installation Wizard page.
- After the installation is complete, the Completing the Active Directory Domain Services Installation Wizard page appears. Ensure the installation was successful and click Finish.
- When prompted to restart, click Restart Now.
- To validate the installation process, click Start, click Run, type C:\Windows\Debug, and click OK.
- Open the DCPROMO.log file and analyze the results in the file.
Install a Domain Tree by Using the Command Line
Table 3.5 lists the installation parameters used in the steps that follow and the corresponding action of each parameter.
Table 3.5. Installing a Domain Tree by Using the Command Line Installation Parameters
Installation Parameter |
Corresponding Action |
/InstallDns:yes |
DNS server will be installed. |
/ParentDomainDNSName:WS03Domain.local |
Name of the forest root domain to which this domain tree will be added. |
/replicaOrNewDomain:domain |
A new domain will be created. |
/newDomain:tree |
The new domain will be a new domain tree. |
/newDomainDnsName:WS08DomainB.local |
FQDN of the new domain tree. |
/DomainNetbiosName:WS08DomainB |
NetBIOS name of the new domain tree. |
/databasePath:"c:\Windows\ntds" |
Database path. |
/logPath:"c:\Windows\ntds" |
Log file path. |
/sysvolpath:"c:\Windows\sysvol" |
SYSVOL path. |
/safeModeAdminPassword:Today01! |
DSRM Administrator password. |
/forestLevel:2 |
Forest functional level will be set to Windows Server 2003. |
/domainLevel:2 |
Domain functional level will be set to Windows Server 2003. |
/rebootOnCompletion:no |
Server will not be rebooted after completion. |
/userName:WS03Domain\Administrator |
The username that will be used to promote the server to a domain controller. |
/userDomain:WS03Domain |
The domain of the user account that will be used to promote the server to a domain controller. |
/password:Today01! |
The password of the user that will be used to promote the server to a domain controller. |
To install child domain tree by using the command line, perform the following steps using an AD DS account that has membership in the following AD DS group:
- Enterprise Administrators
- Log on to the server you want to promote to a domain controller.
- Click Start and then click Command Prompt.
Type the following into the command prompt window, as shown in Figure 3.36, and then press Enter:
dcpromo /unattend /InstallDns:yes /ParentDomainDNSName:WS03Domain.local /replicaOrNewDomain:domain /newDomain:tree /newDomainDnsName:WS08DomainB.local /DomainNetbiosName:WS08DomainB /databasePath:"c:\Windows\ntds" /logPath:"c:\Windows\ntds" /sysvolpath:"c:\Windows\sysvol" /safeModeAdminPassword:Today01! /forestLevel:2 /domainLevel:2 /rebootOnCompletion:no /userName:WS03Domain\Administrator /userDomain:WS03Domain /password:Today01!
Figure 3.36 Installing a new domain tree using the command line.
The dcpromo process begins by determining whether the AD DS binaries are installed. If the binaries are not installed, dcpromo installs them.
- After the AD DS binaries have been installed, a summary of the installation options is presented in the command prompt window; then the AD DS installation process begins.
- The status of the AD DS installing is updated in the command prompt window.
- When the installation process is complete, the server reboots automatically if the /rebootOnCompletion option was used in the command line. If the /rebootOnCompletion was not used in the command line, you are prompted to restart the server.
- To validate the installation process, click Start, click Run, type C:\Windows\Debug, and click OK.
- Open the DCPROMO.log file and analyze the results in the file.
Install a Domain Tree by Using an Answer File
Table 3.6 lists the installation parameters used in the steps that follow and the corresponding action of each parameter.
Table 3.6. Installing a Domain Tree by Using Answer File Installation Parameters
Installation Parameter |
Corresponding Action |
InstallDns=yes |
DNS server will be installed. |
ParentDomainDNSName=WS03Domain.local |
Name of the forest root domain to which this domain tree will be added. |
replicaOrNewDomain=domain |
A new domain will be created. |
newDomain=tree |
The new domain will be a new domain tree. |
newDomainDnsName=WS08DomainC.local |
FQDN of new domain tree. |
DomainNetbiosName=WS08DomainC |
NetBIOS name of the new domain tree. |
databasePath="c:\Windows\ntds" |
Database path. |
logPath="c:\Windows\ntds" |
Log file path. |
Sysvolpath="c:\Windows\sysvol" |
SYSVOL path. |
safeModeAdminPassword=Today01! |
DSRM Administrator password. |
forestLevel=2 |
Forest functional level will be set to Windows Server 2003. |
domainLevel=2 |
Domain functional level will be set to Windows Server 2003. |
rebootOnCompletion=no |
Server will not be rebooted after completion. |
userName=WS03Domain\Administrator |
The username that will be used to promote the server to a domain controller. |
userDomain=WS03Domain |
The domain of the user account that will be used to promote the server to a domain controller. |
Password=Today01! |
The password of the user that will be used to promote the server to a domain controller. |
To install child domain tree by using an answer file, perform the following steps using an AD DS account that has membership in the following AD DS group:
- Enterprise Administrators
- Log on to the server you want to promote to a domain controller.
- Click Start, click Run, type notepad, and click OK.
- On the first line, type [DCINSTALL]; then press ENTER.
Type the following entries, one entry on each line:
InstallDns=yes ParentDomainDNSName=WS03Domain.local replicaOrNewDomain=domain newDomain=tree newDomainDnsName=WS08DomainC.local DomainNetbiosName=WS08DomainC databasePath="c:\Windows\ntds" logPath="c:\Windows\ntds" sysvolpath="c:\Windows\sysvol" safeModeAdminPassword=Today01! forestLevel=2 domainLevel=2 rebootOnCompletion=no userName=WS03Domain\Administrator userDomain=WS03Domain password=Today01!
- Save the answer file as C:\DCAnswer.txt.
- Click Start and then click Command Prompt.
Type the following into the command prompt window, as shown in Figure 3.37, and then press ENTER:
dcpromo /unattend:"C:\DCAnswer.txt"
Figure 3.37 Installing a domain tree using an answer file.
The dcpromo process begins by determining whether the AD DS binaries are installed. If the binaries are not installed, dcpromo installs them.
- After the AD DS binaries have been installed, a summary of the installation options is presented in the command prompt window. Then the AD DS installation process begins. The status of the AD DS installing is updated in the command prompt window.
- When the installation process is complete, the server reboots automatically if the /rebootOnCompletion option was used in the answer file. If the /rebootOnCompletion was not used in the answer file, you are prompted to restart the server.
- To validate the installation process, click Start, click Run, type C:\Windows\Debug, and click OK.
- Open the DCPROMO.log file and analyze the results in the file.