How to Create a Windows Server 2012 R2 Domain

Create the Domain

When the domain creation is complete, the Windows Server 2012 R2 computer is made the domain controller.

1. Verify Active Directory Domain Service is installed.

   1. Take note of the blue progress bar, and beneath it, you are reminded that Additional steps are required to make this machine a domain controller.
   2. Move your mouse and hover over the blue progress bar to see when installation is 100% complete.

2. Promote server.

   1. Observe that at this point, only the Active Directory Domain Service is installed. In other words, the server is not yet a domain controller.
   2. Note the link, in blue, Promote this server to a domain controller.
   3. Click Promote this server to a domain controller to display the Active Directory Domain Services Configuration Wizard.
   4. Notice under Select the deployment operation are three radio buttons; please review them, because they are very different.
   5. Click Add a new forest.
   6. Type your desired domain name under Specify the domain information for this operation, and to the right of Root domain name.
   7. Click Next to display Active Directory Domain Services Wizard.

3. Configure domain controller options.

   1. Notice that these are options, which means you are not required to install any.
   2. Notice that even though DNS is selected you can un-check it, since it is optional, but that is possible only if you have another DNS server in your domain. Since a DNS server does not exist yet in your domain you must leave it checked.
   3. Click the box under Type the Directory Service Restore Mode (DSRM) password.
   4. Type the restore password you desire. Don't forget it!
   5. Click Next to display DNS options.

4. Configure name service options.

   1. Notice that the message in the yellow box is informing you that a domain could not be found with which to associate; the reason is because your domain is the first domain in the forest.
   2. Click Next to display additional name options.
   3. Notice that the wizard lets you select more options.
   4. Click Next to display Active Directory configuration settings.

5. Configure the path name.

   1. Notice the default location for saving active directory files, which you can accept or modify where Active Directory configuration will be stored.
   2. Click Next to accept the default location and display the options you have selected.

6. Review the selection.

   1. Review the selected options.
   2. Click Next to begin the installation prerequisite check.

7. Install the selection.

   1. Observe the green circle and the white check mark.
   2. Click Install to begin installing the options you have selected.
   3. Note that at this point the installation process goes through several displays, including reboot followed by the sign in prompt.
   4. Keep all windows open.
   5. Continue to Part 3, and keep learning.

Executing the Domain Log-on Process

1. Execute Ctrl+Alt+Delete

   1. Notice that the sign in prompt is an indication that the installation is complete.
   2. Issue Ctrl+Alt+Delete to display yourdomainnamehereAdministrator, which is requesting the Administrator password.

2. Log on to the domain.

   1. Notice that you are about to logon to the domain, and not the server, and that only the account Administrator can logon using the domain controller console logon prompt.
   2. Observe that this prompt means you are logging on to your domain using the user account Administrator and its password.
   3. Type the password for Administrator and click the arrow to display Server Manager, if logon is successful.
   4. Continue to Part 4, Create domain memberships, and keep learning.

Creating Domain Memberships

At this point you are ready to make other configuration changes to test the functionality of your domain; one way to test is by creating memberships with other computers; these computers may have Windows server or Windows client operating system installed.

1. Verify connectivity.

   1. Take note that in this example you will configure membership using Windows 7, but you can use any other Windows machine.
   2. Boot a Windows 7 machine, if it is not up.
   3. Logon.
   4. Verify that your Windows 7 machine and your Windows 2012 R2 server can ping each other by IP address.

2. Join your Windows 7 computer to the domain.

   1. Go to Control Panel on your Windows 7 computer.
   2. Click System to display basic information about your computer.
   3. Click Advanced system settings to display System Properties.
   4. Click Computer Name.
   5. Click Change to display Computer Name/Domain Changes.
   6. Click the radio button next to Domain, Under Member of.
   7. Type yourdomainnamehere. (Ex. kim.local)
   8. Click OK to display User name and Password prompt; note that this is the administrator account on the domain controller.
   9. Note that Administrator is the only account that has authorization to add a computer to the domain.
   10. Type Administrator into the username field and use the password you've created.
   11. Click OK.
   12. Note that shortly after you will see a popup welcoming you to your domain.
   13. Click OK and you are prompted to restart the client.

3. Logon the domain.

   1. Click OK to return to System Properties.
   2. Click Close and you are prompted to Restart Now or Restart Later
   3. Click Restart Now to restart the client.
   4. Issue Ctrl+Alt+Delete, after the restart, to display the logon prompt.
   5. Notice that you can logon to the local computer with your normal Windows 7 user account. However, if that same account tries to logon to the domain, it will fail, for two reasons:
      1. Because so far only one domain user, Administrator, has been configured.
      2. Your Windows 7 local users is not a member of your domain.
   6. Click Switch User to display Select a user for logon, so you can logon as Administrator.
   7. Click Other User to display the domain logon prompt.
   8. Notice that under Password, Logon to: yourdomainnamehere displays; informing you that you are about to logon with a domain logon and not a local logon.
   9. Type Administrator into the username field and use the password you've created.
   10. You are now logged on to the domain, not your local Windows 7 computer.