{"id":305,"date":"2011-12-01T20:27:37","date_gmt":"2011-12-01T20:27:37","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=305"},"modified":"2011-12-01T20:27:37","modified_gmt":"2011-12-01T20:27:37","slug":"creating-the-first-windows-server-2003-domain-controller-in-a-domain","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=305","title":{"rendered":"Creating the first Windows Server 2003 Domain Controller in a domain"},"content":{"rendered":"<p>When I was first starting to mess with servers, I dived into Windows Server 2000 and 2003. While reading books about Server 2003 I encountered this website that helped me setup my very first DC at home \ud83d\ude42 years ago\u00a0 <a href=\"http:\/\/www.visualwin.com\/\" target=\"_blank\">http:\/\/www.visualwin.com\/<br \/>\n<\/a><\/p>\n<p>I recommend this site for techs that want to start familiarizing themselves with Servers , DC (active directory), DNS &#8230;etc<\/p>\n<p>One of the greatest features of Windows Server 2003 is its  ability to be a Domain Controller (DC).\u00a0 The features of a domain extend  further than this tutorial ever could, but some of its most well known features  are its ability to store user names and passwords on a central computer (the  Domain Controller) or computers (several Domain Controllers).\u00a0 In this  tutorial we will cover the &#8220;promoting&#8221; (or creating) of the first DC in a  domain.\u00a0 This will include DNS installation, because without DNS the client  computers wouldn&#8217;t know who the DC is.\u00a0 You can host DNS on a different  server, but we&#8217;ll only deal with the basics.<\/p>\n<p><span style=\"font-size: medium;\">Method:<\/span><\/p>\n<p>Click Start -&gt; Run&#8230;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/Common\/start-menu-run.png\" border=\"0\" alt=\"\" width=\"467\" height=\"508\" \/><\/p>\n<p>Type &#8220;dcpromo&#8221; and click &#8220;OK&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/run-dcpromo.png\" border=\"0\" alt=\"\" width=\"347\" height=\"179\" \/><\/p>\n<p>You will see the first window of the wizard.\u00a0 As it  suggests, I suggest reading the help associated with Active Directory.\u00a0  After this, click &#8220;Next&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/welcome-wizard-next.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>Click &#8220;Next&#8221; on the compatibility window, and in the next window  keep the default option of &#8220;Domain Controller for a new domain&#8221; selected, and  click &#8220;Next&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/dc-type-next.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>In this tutorial we will create a domain in a new forest,  because it is the first DC, so keep that option selected<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/new-domain-next.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>Now we have to think of a name for our domain.\u00a0 If you own  a web domain like &#8220;visualwin.com&#8221;, you can use it, but it isn&#8217;t suggested  because computers inside of your domain may not be able to reach the company  website.\u00a0 Active Directory domains don&#8217;t need to be &#8220;real&#8221; domains like the  one above &#8211; they can be anything you wish.\u00a0 So here I will create &#8220;visualwin.testdomain&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-dns-name.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>Now in order to keep things simple, we will use the first part  of our domain (&#8220;visualwin&#8221;), which is the default selection, as the NetBIOS name  of the domain<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-netbios-name.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>The next dialog suggests storing the AD database and log on  separate hard disks, and so do I, but for this tutorial I&#8217;ll just keep the  defaults<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-db-location.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>The SYSVOL folder is a public share, where things like .MSI software packages  can be kept when you will distribute packages (as I said, AD has a <em>lot<\/em> of  different features).\u00a0 Once again, I will keep the default selection but it  can be changed if you wish to use the space of another drive<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-sysvol-location.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>Now we will get a message that basically says that you will need  a DNS server in order for everything to work the way we want it (i.e., our &#8220;visualwin.testdomain&#8221;  to be reachable).\u00a0 As I mentioned earlier, we will install the DNS server  on this machine as well, but it can be installed elsewhere.\u00a0 So keep the  default selection of &#8220;Install and configure&#8221;, and click &#8220;Next&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/dns-diag.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>Because, after all, this is a Windows Server 2003 tutorial  website, we&#8217;ll assume there are no pre-Windows 2000 servers that will be  accessing this domain, so keep the default of &#8220;Permissions compatible only with  Windows 2000 or Windows Server 2003 operating systems&#8221; and click &#8220;Next&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-permissions.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>The restore mode password is the single password that all  administrators hope to never use, however they should also never forget it  because this is the single password that might save a failed server.\u00a0 Make  sure it&#8217;s easy to remember but difficult to guess<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-restore-mode-pw.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>Now we will see a summary of what will happen.\u00a0 Make sure  it&#8217;s all correct because changing it afterwards can prove to be difficult<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-summary.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>After the previous next was clicked, the actual process occurs.\u00a0  This can take several minutes.\u00a0 It&#8217;s likely that you will be prompted for  your Windows Server 2003 CD (for DNS) so have it handy<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/configuring-ad.png\" border=\"0\" alt=\"\" width=\"437\" height=\"274\" \/><\/p>\n<p>If your computer has a dynamically assigned address (from DHCP)  you will be prompted to give it a static IP address.\u00a0 Click ok, and then in  the Local Area Connection properties, click &#8220;Internet Protocol (TCP\/IP)&#8221; and  then &#8220;Properties&#8221;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/lac-properties.png\" border=\"0\" alt=\"\" width=\"367\" height=\"443\" \/><\/p>\n<p>In the next window select &#8220;Use the following IP address&#8221; and  select the information that you will use for your domain (and 127.0.0.1 for the  primary DNS, because your computer will host DNS.\u00a0 I still suggest setting  up an alternate as well.)\u00a0 Click &#8220;OK&#8221; and then &#8220;Close&#8221; on the next window<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/tcp-ip-properties.png\" border=\"0\" alt=\"\" width=\"404\" height=\"448\" \/><\/p>\n<p>And after a while you will see<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/www.visualwin.com\/AD-Controller\/ad-finished.png\" border=\"0\" alt=\"\" width=\"503\" height=\"385\" \/><\/p>\n<p>And we&#8217;re finished.<\/p>\n<p>You may also want to see the other  Active Directory tutorials on the <a href=\"http:\/\/www.visualwin.com\/\">main page<\/a>, including <a href=\"http:\/\/www.visualwin.com\/New-User-AD\/\">adding users<\/a>, and adding computers to the Active Directory, either <a href=\"http:\/\/www.visualwin.com\/New-Computer-Ad\/\">manually<\/a> into the domain, or from existing <a href=\"http:\/\/www.visualwin.com\/AD-XP\/\">Windows XP<\/a> and <a href=\"http:\/\/www.visualwin.com\/AD-2000\/\">Windows 2000<\/a> computers.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When I was first starting to mess with servers, I dived into Windows Server 2000 and 2003. While reading books about Server 2003 I encountered this website that helped me setup my very first DC at home \ud83d\ude42 years ago\u00a0 http:\/\/www.visualwin.com\/ I recommend this site for techs that want to start familiarizing themselves with Servers [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-305","post","type-post","status-publish","format-standard","hentry","category-general-2003-stuff"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/305","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=305"}],"version-history":[{"count":2,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/305\/revisions"}],"predecessor-version":[{"id":307,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/305\/revisions\/307"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=305"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=305"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=305"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}