Categories
MCSA MCSE Servers

Add Additional Domain Controller to Existing Domain step by step

As you know, Active Directory Domain Services (AD DS) is installed on a server that is called Domain Controller (DC). You can add dozens of domain controllers to an active directory for load balancing, fault tolerance, etc purposes. All the domain controllers should contain the same contents like user accounts, computer accounts, etc for working as a group.

They need to replicate with each other. When you add a new domain controller to existing domain, they automatically replicate with each other. If the new DC and the previous DC are on the same site, they can replicate easily with each other. If the new DC is in a remote site, therefore automatic replication is not so practical. Because they are replicating through Wide Area Network (WAN) connection which costs much and takes a long time. That’s why I’ve written the article in two parts. Part 1 is for Local Area Network (LAN). Part 2 is for Wide Area Network(WAN).

In this article, we will learn how to add additional domain controller to existing domain in local area network(LAN). Let’s move on.

Check out: Install Active Directory Domain Services on Windows Server

                        Promote Windows Server to Domain Controller

Topics covered in this article:

  • Role Installation
  • Promote this server to a domain controller
  • Root DC and New DC Replication
  • Conclusion

Add Additional Domain Controller to Existing Domain

First of all, we need to install Active Directory Domain Services on the new DC, then promote that as DC.

#1: Role Installation

1. First of all open Server Manager by clicking on Server Manager icon in Start Menu. When Server Manager opened, click on Add roles and features to open roles and features installation console.

Add roles and features
Add roles and features

2. Skip the Before you Begin page. Let the role-based or featured-based installation selected; click on Next button. In the Server Selection page, again click Next button.

Select installation type
Select installation type

3. Select Active Directory Domain Services role, a window pops up, click on Add Features button to add active directory management tools.

Active Directory role
Active Directory role

When installation process is completed, reboot the server, log in as an administrator and furthermore follow the following steps.

#2: Promote this server to a domain controller

1. When logged in as an administrator, click on Promote this server to a domain controller hyperlink to promote the server to domain controller.

Promote this server to domain controller
Promote this server to domain controller

2. Select the Add a domain controller to an existing domain option, below the specify the domain information for this operation, type your domain name. If you are logged as a standard user, you can change the credential below that. Click on Select button, a new window opens, select your domain name then hit on Ok then Next button.

Deployment Configuration
Deployment Configuration

3. In the Domain Controller Options page, leave unchecked the DNS server if you don’t want to install that on your DC. Let the Global Catalog checked. Type a password and confirm it then click Next button.

Domain Controller Optionsq
Domain Controller Options

4. In the Additional options page, Specify the server that you want replicate with and copy all information from that domain controller to new domain controller.You can take a snapshot from AD DS and apply the image on the new machine. The new machine will have the exact copy. You can read about the Install From Media (IFM) here:

Check out:  Create & Deploy Active Directory Snapshot in Windows Server 2016

Replication option
Replication option

5. In the Paths and Review options pages almost we have nothing to do, skip them by clicking on Next button. In the prerequisite page if any error you see, check that then click on Install button.

Install
Install

#3: Root DC and New DC Replication

We are almost done, just use the DCs to replicate between the root DC(DC01.tactig) and the new DC(DC02.tactig). While replicating between these two DCs, the Active Directory files will be copied from the DC01.tactig to DC02.tactig. then check out, you will see all files exactly the same to the root domain controller in the current domain controller.

6. In the Server Manager, click on Tools and select Active directory sites and services option.

Active directory sites and services
Active directory sites and services

7. In the left pane expand the Sites>Default-First-Site-Name> Servers, then the name of the current server that you are now working on, then click on NTDS Settings. In my case DC01 is root doamin controller and I am logged in currently in DC02 which is additional domain controller.

NTDS Settings
NTDS Settings

8. Right-click on automatically generated node, Click on Replicate now, an alert informs you that replication between root domain controller and new domain controller occurred.

Replicate now
Replicate now

9. Do the same thing for DC01 in the same server. Expand DC01 node and click on NTDS Settings. Right-click on automatically generated then click on Replicate now option. Both server replicate with each other and all the contents of DC01 will be copied in DC02.

Replicate now
Replicate now

Conclusion

Finally we’re done! After all, you’ve completed replication between two DCs successfully, but remember if the DCs are in different sites, then you can do it using our next article that will be the second part in addition of this.

For part 2 click on this link: Create & Deploy Active Directory Snapshot in Windows Server 2016

Categories
MCSA MCSE Servers

Promote Windows Server 2016 to Domain Controller step by step

Active Directory which is the management service in Windows Server is installed on a server that is called Domain Controller (DC). When active directory have been installed on a server. You can promote the server to a domain controller. Every network needs at lest two domain controllers. When one of them is down, the other domain controller take the place and respond to clients. The Domain controllers respond to security authentications like logging in, checking permissions, files access, system check up and many more.

When you want to log in to a server from a client computer, you should have a user name and a password. Your system will be checked to have updated anti-virus and etc.

Permissions are the level of the tasks that you can do in the domain. File access is about the level of your access to sources. These and a lot more duties are done through domain controller.

In this article, I am going to show some easy steps outlined to promote server to domain controller. First, make sure that you logged in as an administrator.

Prerequisites

Install Active Directory Domain Services (AD DS) role on the server you want to promote it to domain controller (DC).

Promote Server to Domain Controller

Follow the following steps to promote server to domain controller.

1. After the role installation, open Server Manager. Click on the flag, then click on Promote this server to a domain controller hyperlink.

Promote this server to domain controller
Promote this server to domain controller

2. When the Deployment Configuration page appears, you see three options.

  • Add domain controller to existing domain: This option is used when you want to add additional domain controller.
  • Add a new domain to an existing forest: This option is used for adding a new domain to existing forest.
  • Add a new forest: It is used for creating a new forest.

Select the third option: Add a new forest. Enter a Root domain name and click on Next button.

Create new forest
Create new forest

3. Specify the forest and domain functional levels (2008, 2008R2, 2012, 2o12R2, 2016). Type a complex password (composed of capital letters, small letters, numbers, symbols).

By default, Domain Name Services (DNS) server is installed at the same time when you are promoting the server to domain controller. If you want to install DNS server later, remove the selection from the box next to Domain Name Services (DNS) server. Click on Next button when you’re finished here.

Domain Controller Options
Domain Controller Options

4. On the Additional options page, let the NetBIOS domain name as selected by default. If you want, you can change the NetBIOS name. Click on Next button to move on next page.

NetBIOS domain name
NetBIOS domain name

5. Thus you can specify the path that you want to restore your Database files, log files and SYSVOL files. The path page give you the options to specify location of the sources to be restored. When you finished your work, click on Next button.

Paths page
Paths page

6. The next page is Review options. You go nothing to do. Click on Next button. The Prerequisites Check page shows you the summary of all prerequisites that are verified or not. If it’s verified click Next. If not, recheck the steps you did just before and be sure you have done all correctly. Click on Install button. After the installation succeeded, the system automatically reboots.

Install button
Install button

Conclusion

After the restart, the server is domain controller. It is really easy to promote server to domain controller (DC). Also, you can start managing and controlling users from your server. For any questions leave a comment below. I would be glad to answer your questions as soon as possible.