Adding a Second Domain Controller
Deploy a second domain controller to enhance network reliability and redundancy, ensuring seamless authentication and resource access within an Active Directory environment.
Session duration: 60 minutes· Typical launch: ~4 min
Difficulty
Beginner
Lab level
Lab VMs
2
2 Windows
XP Reward
300 XP
On completion
Virtual machines
Lab VMs
SADC01
Windows
Username / Password
user / password123
administrator / password123
{{ display_name }} / password123
ad\user / password123
Connection type
In-browser RDP / RDP
CPU / RAM
8 vCPU · 32 GiB RAM
SADC02
Windows
Username / Password
user / password123
administrator / password123
Connection type
In-browser RDP / RDP
CPU / RAM
8 vCPU · 32 GiB RAM
Lab instructions
Follow the steps below to complete the lab.
The goal of this lab is to join the VM tab SADC02 to the Active Directory domain that exists on SADC02, then promote SADC02 to a domain controller.
Before proceeding with the next step, you need to rename the server from its current dynamic name to SADC02. In this step, you will log in to the server and perform the renaming action.
- Click the
SADC02server tab. - Log in using the credentials:
userandpassword123. - Rename the server to
SADC02. - Restart the server before clicking
Check step
Now that you have renamed SADC02, we need to make sure it can resolve the DNS name of ad.serveracademy.com. In order to do that, you need to add the private IP address of SADC01 as a DNS server on SADC02.
Get IP Address of SADC01:
- Open CMD
- Execute
ipconfig - Copy the
IPv4 Address
Add IP of SADC01 as DNS server on SADC02
- Open Server Manager
- Go to the Local Servers tab
- Click the blue text next to
Ethernet - Right-click Ethernet and select Properties
- Select `Internet Protocol Version 4 (TCP/IPv4), and then select Properties
- Select the Use the following DNS server addresses: radio box
- Enter the private IP of
SADC01
You can test this by opening cmd on SADC02 and pinging ad.serveracademy.com
Join SADC02 to the ad.serveracademy.com domain
- In server manager from the Local Server tab, select the blue text
WORKGROUP - Click the
Change...button - Select the
Domainradio box, then type the domainad.serveracademy.com - Click
OK. - Enter your domain admin credentials (
AD\userandpassword123)
After preparing the server and ensuring it meets the prerequisites, you will now install the Active Directory Domain Services (AD DS) server role. In this step, you need to initiate the installation of the AD DS role on your server.
- Open the
Server Managerfrom the taskbar. - Click on
Manageand selectAdd Roles and Features. - In the
Add Roles and Features Wizard, clickNextuntil you reach theServer Rolessection. - Check the box for
Active Directory Domain Services. - Click
Nextthrough the subsequent prompts until you reach theConfirmationpage. - Review your selections and click
Installto begin the installation process. - Wait for the installation to complete, then click
Close.
After installing the Active Directory Domain Services role on SADC02, you need to promote the server to a Domain Controller. In this step, you will initiate the Active Directory Domain Services Configuration Wizard to complete the promotion.
- Open the
Server ManageronSADC02. - Click on the notification flag in the top right corner and select
Promote this server to a domain controller. - In the Active Directory Domain Services Configuration Wizard, choose
Add a domain controller to an existing domainand enter the domain name. - Provide the credentials of a user account with permissions to add a Domain Controller.
- Select the appropriate options for
Domain Controller Options, including the site name and Global Catalog. - Configure the
Directory Services Restore Mode (DSRM)password and clickNext. - Review the options and click
Installto begin the promotion process.