Tabular array of Contents

  • Introduction
  • Prerequisites
  • Active Directory Topology
  • Active Directory Port Details
    • Active Directory Default Ports
    • Active Directory Replication
    • Active Directory Authentication
  • Installation Steps
    • Step 1: Login every bit Local Admin
    • Pace 2: IP Config
    • Step 3: Static IP
    • Step 4: Find InterfaceIndex
    • Step 5 : DNS
    • Pace half dozen: Install Advertisement-DS Role
    • Step 7:AD-DS Configuration
      • IncludeManagementTools
      • Install-ADDSForest
    • Step viii : Prompt for the Safe Mode Admin Pass
    • Step 9 : Reboot & Login
    • Footstep 11 : Run Get-ADDomainController
    • Step 12 : Run Go-ADDomain example.com
    • Pace xiii : List The AD Forest Details
    • Footstep xiv : Check if DC Sharing The SYSVOL Folder
  • Decision
  • References
  • Glossary
  • Other Languages

Introduction

This article helps to Install / setup the active directory environs using windows server 2019 using PowerShell / PowerShell config file.

Prerequisites

  1. Install Windows server 2019 Standard / Data eye on a Hardware.
  2. Active Directory Topology
  3. Brand certain Active directory ports are open.
  4. Patch the Server with the latest Windows Updates and hot-fix.
  5. Assign the static IP address to Domain Controller
  6. Install Agile directory domain services (ADDS) Role on the server.
  7. Configure ADDS according to requirement.
  8. Evaluate the windows event logs to validate the health of ADDS installation and configuration
  9. Configure Service and Functioning Monitoring
  10. ADDS Backup / DR Configuration

Active Directory Topology

In my sample surround, example.com will be the woods root domain. The showtime domain controller installs on the woods will hold all 5 FSMO roles. In one case additional domain controllers are in place you tin can identify them inapposite locations.

↑ Back to top

Active Directory Port Details

Active Directory communications comprise of the number of ports, beneath table explains ports with its details.

Active Directory Default Ports

Port

Type

Description

135

TCP/UDP

RPC endpoint mapper

137

TCP/UDP

NetBIOS name service

138

UDP

NetBIOS datagram service

139

TCP

NetBIOS session service

445

TCP/UDP

SMB over IP (Microsoft-DS)

389

TCP/ UDP

LDAP

636

TCP

LDAP over SSL

3268

TCP

Global itemize LDAP

3269

TCP

Global catalog LDAP over SSL

88

TCP/ UDP

Kerberos

53

TCP/ UDP

DNS

1512

TCP/ UDP

WINS resolution

42

TCP/ UDP

WINS replication

Dynamically-assigned ports, unless restricted

TCP

RPC

Active Directory Replication

Port

Type

Description

135

TCP

RPC endpoint mapper

389

TCP/UDP

LDAP

636

TCP

LDAP over SSL

3268

TCP

Global catalog LDAP

3269

TCP

Global catalog LDAP over SSL

53

TCP/UDP

DNS

88

TCP/UDP

Kerberos

445

TCP

SMB over IP (Microsoft-DS)

RPC

TCP

Dynamically-assigned ports (unless restricted)

Agile Directory Authentication

Port

Type

Clarification

445

TCP/UDP

SMB over IP (Microsoft-DS)

88

TCP/UDP

Kerberos

389

UDP

LDAP

53

TCP/UDP

DNS

RPC

TCP

Dynamically-assigned ports (unless restricted)

↑ Back to top

Installation Steps


Step 1: Login as Local Admin

To commencement the configuration, log in to Windows server 2019 server as the local administrator.

Step 2: IP Config

We already inverse the name of the server to a meaningful one. Then demand to check the IP config. in my initial configuration, information technology shows DHCP IP.

We need to alter it to static commencement, with PowerShell

Step 3: Static IP

To set the static IP, we can use below PowerShell command.

          
            
                              New-NetIPAddress` -InterfaceIndex                                4                -IPAddress                                192.168                .                61.100                -PrefixLength                                24                DefaultGateway                                192.168                .                61.2                `

 Note: Here we assigned IP based on my network requirement. Hence use the IP accost according to your Infrastructure.

Step 4: Find InterfaceIndex

In higher up, InterfaceIndex can detect using Get-NetIPAddress command.

Step 5 : DNS

Adjacent footstep is to ready DNS Ip addresses. The primary dc too going to deed as DC so we need to set it as the preferred DNS. We tin can exercise this using below command.

          
            
                              Set-DnsClientServerAddress -InterfaceIndex                                4                -ServerAddresses (                "192.168.61.100"                ,                "8.8.8.8"                )

After config, nosotros tin verify it using ipconfig /all.

Step half-dozen: Install AD-DS Office

Before the AD configuration process, we need to install the Advertising-DS Role in the given server. In order to do that we tin can use the Post-obit command.

          
            
                              Install-WindowsFeature –Proper name Ad-Domain-Services –IncludeManagementTools`

Annotation: Reboot is not required to complete the role service installations.

Now we take the Advertizing-DS office installed, the next pace is to keep with the configuration

Step 7:AD-DS Configuration

Below is the ability-shell configuration file / script for configuring the ADDS.

Install-ADDSForest `

-DomainName "example.com" `

-CreateDnsDelegation:$faux `

-DatabasePath "C:\Windows\NTDS" `

-DomainMode "7" `

-DomainNetbiosName "case" `

-ForestMode "7" `

-InstallDns:$true `

-LogPath "C:\Windows\NTDS" `

-NoRebootOnCompletion:$True `

-SysvolPath "C:\Windows\SYSVOL" `

-Forcefulness:$true


Following explicate the Power-Shell arguments and what it volition do. Install-WindowsFeature

This cmdlet will allow to install windows role, role services or windows feature in la ocal server or remote server. It is similar to using windows server manager to install those.

IncludeManagementTools

This cmdlet will allow to install windows role, part services or windows feature in  local server or remote server. Information technology is similar to using windows server managing director to install those.

This will install the management tools for the selected function service.

Install-ADDSForest

This cmdlet will allow to setup a new active directory forest.

  • DomainName: This parameter defines the FQDN for the agile directory domain.
  • CreateDnsDelegation Using this parameter can define whether to create DNS delegation that reference active directory integrated DNS.
  • DatabasePath; this parameter will apply to define the binder path to store the active directory database file (Ntds.dit).
  • DomainMode: This parameter volition specify the agile directory domain functional level. In above I accept used mode 7 which is windows server 2016. Windows Server 2019 doesn't take carve up domain functional level.
  • DomainNetbiosName This defines the NetBIOS name for the forest root domain.
  • ForestMode; This parameter will specify the active directory wood functional level. In in a higher place I have used manner 7 which is windows server 2016. Windows Server 2016 doesn't accept separate forest functional level.
  • InstallDns: Using this can specify whether DNS role need to install with the active directory domain controller. For new wood, it is the default requirement to set up information technology to $true.
  • LogPath: Log path can use to specify the location to salvage domain log files.
  • SysvolPath
  • SysvolPath | This is to define the SYSVOL binder path. Default location for it will be C:\Windows
  • NoRebootOnCompletion: By default, the system will restart the server after domain controller configuration. using this command tin can prevent the automatic system restart.
  • Forcefulness: This parameter will force command to execute past ignoring the alarm. It is typical for the system to pass the alarm near best practices and recommendations.

Pace 8 : Prompt for the Prophylactic Mode Admin Pass

After executing the control information technology will prompt for the Condom Mode Ambassador Password. This is to use in Directory Services Restore Mode (DSRM).

Brand sure to use the complex password (According to windows password complexity recommendations). Failure to do so will terminate the configuration.

Pace ix : Reboot & Login

When configuration complete, reboot the domain controller and log dorsum in as domain administrator.

Step ten : Confirm the Installation

To ostend the successful installation of the services. 

          
            
                              Get-Service adws,kdc,netlogon,dns

Above command volition list down the status of the agile directory related services running on the domain controller.

Step 11 : Run Get-ADDomainController

It will listing downwards all the configuration details of the domain controller.

Step 12 : Run Become-ADDomain case.com

It volition listing down the details about the active directory domain.

Step xiii : List The AD Wood Details

Aforementioned way Get-ADForest example.com will list downwards the active directory forest details.

Pace fourteen : Check if DC Sharing The SYSVOL Folder

Get-smbshare SYSVOL will show if the domain controller sharing the SYSVOL folder.

↑ Back to top

Conclusion

Equally we tin see AD DS components are installed and configured successfully. This marks the end of this post. Please feel costless to charge per unit this article.

References

  • Service overview and network port requirements for Windows
  • What's new in Active Directory 2019? 

↑ Back to superlative

Glossary

Item Clarification
SYSVOL Arrangement Book
DC Domain Controller
Advertising DS Agile Directory Domain Services
DNS Domain Name System
FQDN Fully Qualified Domain Proper noun
DSRM Directory Services Restore Mode 
KDC
 Fundamental Distribution Eye
LDAP Lightweight Directory Access Protocol
NTDS NT Directory Services
IP Internet Protocol
FSMO Flexible Single-Master Operation

↑ Back to top

Other Languages