Dean Suzuki Blog

Title: Creating a Windows 2012 Forest and Domain Controller

Created: 11/10/2012

Description:

In this document, we walk through how to create a new Windows 2012 Forest and Domain Controller.

The process to create a Windows Active Directory Forest and Domain Controller has changed from

Windows 2008.

References:

http://technet.microsoft.com/en-us/library/hh831477.aspx ; What's New in Active Directory Domain

Services (AD DS)

http://technet.microsoft.com/en-us/library/hh472160.aspx ; Deploy Active Directory Domain Services

(AD DS) in Your Enterprise

http://technet.microsoft.com/en-us/library/hh472162.aspx ; Install Active Directory Domain Services

(Level 100)

http://technet.microsoft.com/en-us/library/jj574166.aspx ; Install a New Windows Server 2012 Active

Directory Forest (Level 200)

http://technet.microsoft.com/en-us/library/cc794937(v=ws.10).aspx ; Configure Time Source for the

Forest

http://social.technet.microsoft.com/wiki/contents/articles/12370.step-by-step-guide-for-setting-up-

windows-server-2012-domain-controller.aspx

http://technet.microsoft.com/en-us/library/hh831734.aspx

Procedure:

Table of Contents 1 How to Begin: ........................................................................................................................................ 2

2 Creating the Virtual Machine ................................................................................................................ 2

3 Creating the Domain Controller ............................................................................................................ 4

3.1 Set the IP address. ......................................................................................................................... 5

3.2 Set the computer name ................................................................................................................ 7

4 Set the Authoritative Time Server for the Forest ............................................................................... 19

5 Accessing the Windows Start Screen .................................................................................................. 19

1 How to Begin: Follow my previous blog post to build a Windows 2012 base image.

Copy the base image and create a new virtual machine for the domain controller

2 Creating the Virtual Machine

Launch HyperV Manager and select New and then Virtual Machine.

Give the VM some memory.

Configure network connection.

This is important. Select “Use an existing virtual hard disk” and point it to the copy of the base IM that was made earlier.

3 Creating the Domain Controller Start the virtual machine.

The Active Directory Domain Services Configuration Wizard replaces the Active Directory

Domain Services Installation Wizard and dcpromo

3.1 Set the IP address. Go to the Network tool on the toolbar and right-click it and select “Open Network and Sharing

Center”

Select “Change Adapter Settings”

Right-click the “Ethernet” and select Properties

Click the TCP/Ipv4 and select Properties

Set the IP address and point DNS to itself.

3.2 Set the computer name Open Windows Explorer

Right-click Computer and select Properties.

Select Change Settings.

Select Change

Set the Computer name and press Ok.

Restart the computer and login

Select Add roles and features

Press Next

Select “Role-based or feature-based installation”

Select your server (e.g. lab2012-dc) and press Next.

Select “Active Directory Domain Services”

Press “Add Features”

Add DNS as well since we need DNS

Press “Add Features”

Press Ad

Press Next

Click Install

When the install is complete, click Promote this server to a domain controller

Give your root domain a name. In this scenario, we are creating a new forest.

Enter a DSRM password. Note the forest and domain functional levels being set. Also note domain controller capabilities being installed.

System will reboot

4 Set the Authoritative Time Server for the Forest Need to set the authoritative time server on the PDC Emulator FSMO role holder in the domain.

Setting authoritative time source for the forest

W32tm /stripchart /computer:tick.usnogps.navy.mil /samples:4 /dataonly

Checking the time source to see if you can access.

Set the authoritative time source.

W32tm /config /manualpeerlist:tick.usnogps.navy.mil /syncfromflags:manual /reliable:yes /update

5 Accessing the Windows Start Screen Go to lower right corner. Brings up charges. Click the windows icon to bring up the windows start screen