The key steps to install Active Directory are as follows: 1. Add the AD DS role in Server Manager; 2. Promote the server to a domain controller; 3. Select Create a new forest or join an existing domain; 4. Configure DNS and database paths; 5. Check the prerequisites and complete the installation. First, open the server manager, add roles and functions, check Active Directory Domain Services, click the warning sign after the installation is completed to promote the server to a domain controller. For the first deployment, you should select the new forest and set the root domain name and DSRM password. The system will automatically install the DNS role, and you can customize the database storage location but it can be done by default. Finally, after confirming the network and permissions, the installation will be carried out, and the restart will take effect. The entire process needs to be carried out according to the steps, pay special attention to the DNS and domain name settings to avoid errors.

Installing Active Directory is not difficult, but it requires step-by-step operation. Enable Active Directory Domain Services (AD DS) on Windows Server is mainly to build an environment that centrally manages users, computers, and resources. The following are a few key steps to explain how to operate.

Promote the server to a domain controller

To use Active Directory, you must first turn a Windows Server server into a "domain controller". This is the core role of the entire Active Directory environment.

• Open Server Manager.
• Click "Add roles and features".
• Select " Role-based or feature-based installation " in the wizard.
• Select the server you want to install AD DS.
• Check " Active Directory Domain Services " in the role list.
• Continue with the next step until the installation is completed.

After the installation is complete, a yellow warning sign appears in the upper right corner. Click it and select "Promote this server to a domain controller".

Create a new forest or join an existing domain?

This step determines whether you create a new domain structure or join an existing Active Directory environment.

• If it is the first deployment, select " Add a new forest " and set the root domain name, such as example.com .
• After setting, the system will automatically generate the NetBIOS name, which is usually the default.
• Next, set the directory service restore mode password (DSRM) . This password cannot be too simple, so it is recommended to save it separately.

If you are adding a domain controller to an existing domain, you should select "Add a domain controller to an existing domain".

Configure DNS and database location (optional)

When Windows Server installs AD DS, the DNS role is automatically installed by default, because Active Directory relies on DNS to resolve domain information.

• If you choose to create a new forest, the installer will prompt you to automatically add the DNS server role.
• The storage paths of database and log files can be kept by default unless you have special storage requirements or performance considerations.

Note: If the current server has DNS service running, conflicts may occur, and it is best to check in advance.

Check the prerequisites and complete the installation

The final step is to check that all configurations meet the requirements.

• The system will conduct a series of prerequisite checks, including network configuration, permissions, etc.
• If everything is OK, click "Install" to start the installation.
• The installation process requires a restart of the server before it can take effect.

After the installation is complete, you can manage users and computers through the "Active Directory Users and Computers" tool.

Basically that's it. The entire process is not complicated, but every step cannot be skipped, especially the settings of DNS and domain names, which are prone to errors and are easily overlooked.

The above is the detailed content of How to install Active Directory on Windows Server?. For more information, please follow other related articles on the PHP Chinese website!