Overview
Windows Active Directory (AD) is a centralized system that manages user identities and controls access to networked resources like servers, files, and applications.
Note: This setup requires local admin and some rebooting of the server.
The 2 main steps are:
Install Active Directory
Configure AD
Step 1 - Installation of Active Directory
1. Search for and open "Server Manager". It will often be open when you log in.
2. Add the role, for Active Directory, Domain Services. You can open the "Add Roles and Features Wizard" from the Server Manager window, under the "Manage" section
3. It will open a window. Click Next on the first window. You will need to select a "Role-based" installation type and click next.
4. Select "Role-based or feature installation" and click next
5. On the next page, "Server Selection", make sure your server is selected, and click Next.
6. In Server Roles, you will select"Active Directory Domain Services" and any other roles you would like.
Selecting the role will bring up the "add roles and features wizard", select "add features", and then click Next.
7. On the next page, "Features", the AD features are now added. You can add additional features as needed or just click Next.
8. On the next page, "AD DS" there will be a description of Active Directory Domain Services, you can review the links or just click Next.
9. On the next page, "Confirmation", you just need to click Install. if you wish you can check the box next to "Restart the destination server automatically if required", if you dont you may need to reboot manually afterwards
10. You will see a progress bar in both the window open and under the flag in Server Manager:
In many cases, it won't need a reboot at this stage, but once it's completed, the Server Manager will show the below icon and request you to promote the server to a domain controller. Click the Promote message, and it will take you to the next step.
Step 2 - Configuration of Active Directory and a new "Forest"
Now that the Active Directory services are installed, you will need to create a new forest. Generally, you can do this based on your domain name, which is assigned to each order.
For example, SAU-ABC12-OR.servercontrol.com.au
1. Click Promote Server under the flag/notification symbol in server manager:
2. You will now choose "Add a new forest", and enter the root domain name. Then click Next.
3. On the next page, you will need to generate a DSRM password. This can be of your choosing, but store it somewhere safe, as you may need it in the future. Domain controller capabilities can be left as the default. Once you are satisfied, click next.
4. On the next page "DNS Options", click Next.
5. On the "Additional Options" page, you can choose your NETBIOS name, this will be required before the username in some instances. e.g, SAUABC12OR\username when logging in from legacy machines. When you're happy with it, click next.
6. Paths options can be left as default, click next when ready.
7. On the next page "Review Options", check your selections and click Next.
Note: the local administrator password will be the password for the domain administrator account
8. On the next page "Prerequisites Check", wait for it to finish the checks, and scoll down in the window to confirm that they are passed. Click Install. The server will reboot as it configures the domain controller.
The installation will complete after a few minutes and then reboot.
You should be able to see the new features added under the tools menu and be able to navigate to them e.g. 'Active Directory users and computers':
Then Under the ‘Users’ tab.