Active Directory Domain Services (AD DS) is a crucial component for managing users, computers, and resources in a Windows Server environment. In this guide, we’ll walk through the process of installing and configuring AD DS on Windows Server.

Prerequisites

Before starting, ensure you have:

  • A Windows Server installation (2016, 2019, or 2022).
  • A static IP address assigned to the server.
  • Administrator privileges.

Step 1: Install Active Directory Domain Services (AD DS)

  1. Open Server Manager.
    Open Server Manager

  2. Click on ManageAdd Roles and Features.

  3. In the Before You Begin window, click Next.

  4. Select Role-based or feature-based installation, then click Next.
    Role-based installation

  5. Choose the server where AD DS will be installed, then click Next.

  6. Under Server Roles, check Active Directory Domain Services and click Add Features when prompted.
    Select AD DS Role

  7. Click Next until you reach the Confirmation screen, then click Install.
    Installation Progress

Step 2: Promote the Server to a Domain Controller

  1. Once the installation is complete, open Server Manager.

  2. Click the flag notification and select Promote this server to a domain controller.
    Promote to Domain Controller

  3. Choose Add a new forest and enter your Root domain name (e.g., example.local).
    Add New Forest

  4. Set a Directory Services Restore Mode (DSRM) password and click Next.

  5. Review and configure DNS options, NetBIOS name, and other settings.
    Domain Controller Options

  6. Click Next and review the configuration summary.

  7. Click Install and wait for the server to reboot.
    Installation Summary

Step 3: Verify the AD DS Installation

After the reboot, log in and verify:

  • Active Directory Users and Computers (dsa.msc) is accessible.
    Active Directory Users and Computers

  • The Domain Controller is listed in Active Directory Sites and Services.
    AD Sites and Services

  • The DNS Server is correctly configured.
    DNS Server Configuration

🛠 Quick Diagnostic with PowerShell

To ensure everything is working correctly, open PowerShell as Administrator and run:

PS C:\Users\Administrator> dcdiag /v