1-Deploy the first domain controller

Environmental information

• The Contoso Group is a multinational company headquartered in Redmond, USA, with subsidiaries in Japan and China, and Japan in Tokyo, while China has offices in Beijing, Shanghai and Suzhou. As the scale of the enterprise expanded, the Contoso group decided to use AD Domain Services to manage and integrate existing IT resources and lay a solid foundation for subsequent expansions. After investigation, the Contoso group finally adopted the Tanlindo domain multi-site AD domain architecture, with the following topology:

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/8B/41/wKiom1hIA9jTmjZmAAJW0i9BU9M299.jpg-wh_500x0-wm_3 -wmp_4-s_1948039479.jpg "style=" Float:none; "title=" image001.jpg "alt=" wkiom1hia9jtmjzmaajw0i9bu9m299.jpg-wh_50 "/ >

• This experiment will deploy the first domain controller in the forest;

domain		ip address	role
Contoso.group	Redmond-dc01	192.168.10.1	Domain Controller

1. Install active Directory Domain Services

1. Open the Server Manager ", click on" Add roles and Features ";

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M02/8B/41/wKiom1hIA9jiyKDYAADgzRJEwdE021.png-wh_500x0-wm_3 -wmp_4-s_3822078603.png "title=" Image002.png "style=" Float:none; "alt=" wkiom1hia9jiykdyaadgzrjewde021.png-wh_50 "/ >

2. Click on the " Next ";

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M02/8B/3E/wKioL1hIA9izefnOAABzfZbxtG0813.png-wh_500x0-wm_3 -wmp_4-s_2312203960.png "title=" Image003.png "style=" Float:none; "alt=" wkiol1hia9izefnoaabzfzbxtg0813.png-wh_50 "/ >

3. Click on the " Next ";

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/8B/3E/wKioL1hIA9myKp3KAABV4Z6QsZY530.png-wh_500x0-wm_3 -wmp_4-s_4087567993.png "title=" Image004.png "style=" Float:none; "alt=" wkiol1hia9mykp3kaabv4z6qszy530.png-wh_50 "/ >

4. Click on the " Next ";

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M00/8B/41/wKiom1hIA9mg2M2mAABewXM7P2w957.png-wh_500x0-wm_3 -wmp_4-s_3594142310.png "title=" Image005.png "style=" Float:none; "alt=" wkiom1hia9mg2m2maabewxm7p2w957.png-wh_50 "/ >

5. Tick " Active Directory Domain Services ";

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M02/8B/41/wKiom1hIA9nwqVHIAAB_GbWLp00068.png-wh_500x0-wm_3 -wmp_4-s_3900646952.png "title=" Image006.png "style=" Float:none; "alt=" wkiom1hia9nwqvhiaab_gbwlp00068.png-wh_50 "/ >

6. Click on the " Add Features ";

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M02/8B/3E/wKioL1hIA9nT0zJSAAB3RS1CX5M162.png-wh_500x0-wm_3 -wmp_4-s_3024338013.png "title=" Image007.png "style=" Float:none; "alt=" wkiol1hia9nt0zjsaab3rs1cx5m162.png-wh_50 "/ >

7. Click on the " Next ";

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/8B/41/wKiom1hIA9qxukxsAACErM_jxME494.png-wh_500x0-wm_3 -wmp_4-s_3912513436.png "title=" Image008.png "style=" Float:none; "alt=" wkiom1hia9qxukxsaacerm_jxme494.png-wh_50 "/ >

8. Click on the " Next ";

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8B/3E/wKioL1hIBDaBVlwBAACAy5bcMGc011.png-wh_500x0-wm_3 -wmp_4-s_4115423468.png "style=" Float:none; "title=" Image009.png "alt=" wkiol1hibdabvlwbaacay5bcmgc011.png-wh_50 "/ >

9. Click on the " Next ";

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8B/41/wKiom1hIBDbxmL2UAACMmsBou5M462.png-wh_500x0-wm_3 -wmp_4-s_801800957.png "title=" Image010.png "style=" Float:none; "alt=" wkiom1hibdbxml2uaacmmsbou5m462.png-wh_50 "/ >

Click "Install" to start installing active Directory Domain Services;

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8B/3E/wKioL1hIBDbj5sxhAABpcvT2EVg662.png-wh_500x0-wm_3 -wmp_4-s_1495113478.png "title=" Image011.png "style=" Float:none; "alt=" wkiol1hibdbj5sxhaabpcvt2evg662.png-wh_50 "/ >

One . Installing Active Directory Domain Services;

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/8B/41/wKiom1hIBDfBwRlmAACBLxaTrAo102.png-wh_500x0-wm_3 -wmp_4-s_403724494.png "title=" Image012.png "style=" Float:none; "alt=" wkiom1hibdfbwrlmaacblxatrao102.png-wh_50 "/ >

Active Directory Domain Services installation completed;

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/8B/3E/wKioL1hIBDejeQ9zAACJKWc3DX0869.png-wh_500x0-wm_3 -wmp_4-s_3737673016.png "title=" Image013.png "style=" Float:none; "alt=" wkiol1hibdejeq9zaacjkwc3dx0869.png-wh_50 "/ >

2. Deploy the first domain controller

1. in the NIC Properties , the DNS server points to itself: 192.168.10.1;

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8B/3E/wKioL1hIBDeQnBouAAAqnz6L-ew686.png-wh_500x0-wm_3 -wmp_4-s_2181945755.png "title=" Image014.png "style=" WIDTH:375PX;HEIGHT:426PX; "width=" 375 "height=" 426 "border=" 0 " Hspace= "0" vspace= "0" alt= "wkiol1hibdeqnbouaaaqnz6l-ew686.png-wh_50"/>

2. Click on the " Promote This server to a domain controller ";

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/8B/41/wKiom1hIBDeTXZzbAACKoTgB8nQ020.png-wh_500x0-wm_3 -wmp_4-s_150399518.png "title=" Image015.png "style=" Float:none; "alt=" wkiom1hibdetxzzbaackotgb8nq020.png-wh_50 "/ >

3. Select the Add A New Forest ", enter the root domain" Contoso.group ", click" Next ";

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/8B/3E/wKioL1hIBDjBLTF4AABvBn4z9lI158.png-wh_500x0-wm_3 -wmp_4-s_97645154.png "title=" Image016.png "style=" Float:none; "alt=" wkiol1hibdjbltf4aabvbn4z9li158.png-wh_50 "/ >

4. as the first domain controller in the forest, the forest and domain functional level defaults to the version of the operating system, and it must itself be a global catalog server, enter the directory Service Restore Mode password, and click Next ";

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8B/41/wKiom1hIBJmR0n5vAAB8LdeXvhc837.png-wh_500x0-wm_3 -wmp_4-s_3408370271.png "style=" Float:none; "title=" Image017.png "alt=" wkiom1hibjmr0n5vaab8ldexvhc837.png-wh_50 "/ >

5. This warning message appears because the previous point in the NIC configuration is not installed DNS server, however, this warning message can be ignored by clicking "Next" because the DNS server is installed by default in the domain Controller feature .

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8B/3E/wKioL1hIBJnizF1AAABy5ZwWkQs077.png-wh_500x0-wm_3 -wmp_4-s_3038707478.png "title=" Image018.png "style=" Float:none; "alt=" wkiol1hibjnizf1aaaby5zwwkqs077.png-wh_50 "/ >

6. Click on the " Next ";

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8B/41/wKiom1hIBJnzEndWAABMOziC7H4678.png-wh_500x0-wm_3 -wmp_4-s_2739764245.png "title=" Image019.png "style=" Float:none; "alt=" wkiom1hibjnzendwaabmozic7h4678.png-wh_50 "/ >

7. Click on the " Next ";

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M02/8B/3E/wKioL1hIBJqSmJ8QAABQDS9p2VU114.png-wh_500x0-wm_3 -wmp_4-s_344895949.png "title=" Image020.png "style=" Float:none; "alt=" wkiol1hibjqsmj8qaabqds9p2vu114.png-wh_50 "/ >

8. Click on the " Next ";

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/8B/41/wKiom1hIBJyi8OvOAABtg2Jk_G0930.png-wh_500x0-wm_3 -wmp_4-s_2439414165.png "title=" Image021.png "style=" Float:none; "alt=" wkiom1hibjyi8ovoaabtg2jk_g0930.png-wh_50 "/ >

9. Before the prerequisite check is passed, click " install to start installing the domain controller;

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/8B/3E/wKioL1hIBJyCOCkFAACpn7hsSnM208.png-wh_500x0-wm_3 -wmp_4-s_2577147304.png "title=" Image022.png "style=" Float:none; "alt=" wkiol1hibjycockfaacpn7hssnm208.png-wh_50 "/ >

Ten. Installing a domain controller;

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M02/8B/41/wKiom1hIBJ2QkvQLAAB72yR59xs676.png-wh_500x0-wm_3 -wmp_4-s_2362879416.png "title=" Image023.png "style=" Float:none; "alt=" wkiom1hibj2qkvqlaab72yr59xs676.png-wh_50 "/ >

One . the domain controller installation is complete and automatically restarted;

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8B/3E/wKioL1hIBJ2ykX_wAABVWYH87y4589.png-wh_500x0-wm_3 -wmp_4-s_3497671465.png "title=" Image024.png "style=" Float:none; "alt=" wkiol1hibj2ykx_waabvwyh87y4589.png-wh_50 "/ >

Log in using a domain account after restarting;

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M02/8B/3E/wKioL1hIBO2j32ytAA29rfYMBCc450.png-wh_500x0-wm_3 -wmp_4-s_1418555246.png "style=" Float:none; "title=" Image025.png "alt=" wkiol1hibo2j32ytaa29rfymbcc450.png-wh_50 "/ >

because the DNS server was previously installed , the operating system automatically configures the DNS server in the NIC properties for the local server: 127.0.0.1;

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/8B/41/wKiom1hIBO2wQg9-AAAp7ZeFmPw395.png-wh_500x0-wm_3 -wmp_4-s_3272293747.png "title=" Image026.png "style=" WIDTH:375PX;HEIGHT:426PX; "width=" 375 "height=" 426 "border=" 0 " Hspace= "0" vspace= "0" alt= "wkiom1hibo2wqg9-aaap7zefmpw395.png-wh_50"/>

One more time. In the NIC Properties , point the DNS server to itself: 192.168.10.1;

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8B/3E/wKioL1hIBDeQnBouAAAqnz6L-ew686.png-wh_500x0-wm_3 -wmp_4-s_2181945755.png "title=" Image014.png "width=" 375 "height=" 426 "border=" 0 "hspace=" 0 "vspace=" 0 "style=" width : 375px;height:426px; "alt=" Wkiol1hibdeqnbouaaaqnz6l-ew686.png-wh_50 "/>

After the domain controller installation is complete, the following administrative tools are added:

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/8B/41/wKiom1hIBO7xytNwAAIcZ9cGHMo255.png-wh_500x0-wm_3 -wmp_4-s_66382854.png "title=" Image027.png "style=" Float:none; "alt=" wkiom1hibo7xytnwaaicz9cghmo255.png-wh_50 "/ >

This article is from the "Lynn Microsoft Labs" blog, so be sure to keep this source http://lingyf.blog.51cto.com/12275871/1880477

1-Deploy the first domain controller