Install an Read only Domain controller (RODC)

  • Create a VM
  • Install Windows 2012R2 Core
  • If from a Template – run sysprep
  • Install VMWare tools
  • Change name
  • Change IP Address to fix and the DNS server

Make sure the IP address is set to fix and the computer name is change!

Join the Domain

In Power Shell:

Add-Computer -DomainName domain.local

Setup RODC role

Install-WindowsFeature AD-Domain-Services

Install-ADDSDomainController -DomainName domain.local -installDNS:$true -ReadOnlyReplica:$true -Credential (Get-credential) -SiteName Default-First-Site-Name

Credetials: Domain\Administrator

Enter the recovery password twice

(Document the recovery password on a safe and secure place!!)

Install second Domain Controller

Create a VM

  • Install Windows 2012R2 Core
  • If from a Template – run sysprep
  • Install VMWare tools
  • Change name
  • Change IP Address to fix and the DNS server

Join the Domain

In Power Shell:

Add-Computer -DomainName domain.local

Reboot Server

Shutdown –r –t 0

Setup DC role

In Power Shell:

Install-WindowsFeature AD-Domain-Services

Install-ADDSDomainController –DomainName xjbk.local –installDNS:$true

Install first DC and AD/Forest

domain-serviceSetup DC Role and AD

Configure the Server as a domain controller and DNS server and setup the domain & forest

Install-WindowsFeature AD-Domain-Services

 

Install-ADDSForest –ForestMode “Win2012R2” –DomainMode “Win2012R2” –DomainName “domain.local” –DomainNetBIOSName “DOMAIN” –InstallDNS:$true –CreateDNSDelegation:$False

!! Attention !!

DomainNetBIOSName “DOMAIN” must be uppercase

Or you will face troubles when joining the vcenter later on