Installing Active Directory and Configuring Active Directory Domain Services, AD DS, Step-by-Step

Inastalling Active Directory on Windows Server
===

How to install VmWare
How to install Windows 2012 R2
How to install Windows Server 2022
===
Installing Active Directory Domain Services
===
What is Active Directory?

Active Directory (AD) is a database and set of services that connect users with the network resources they need to get their work done. The database (or directory) contains critical information about your environment, including what users and computers there are and who's allowed to do what.

What are the Services Provided by Active Directory?

- Active Directory Domain Services (AD DS) - Users and Computers

- Active Directory Lightweight Directory Services (AD LDS)

AD LDS is a mode of Active Directory that provides directory services for applications. AD LDS provides dedicated directory services for applications.

LDAP - Lightweight Directory Access Protocol - and you can view the objects in the directory.

- Certificate Services (AD CS)

AD CS is the Server Role that allows you to build a public key infrastructure (PKI) and provide public key cryptography, digital certificates, and digital signature capabilities for your organization.

- Federation Services (AD FS)

Active Directory Federation Service (AD FS) enables Federated Identity and Access Management by securely sharing digital identity and entitlements rights across security and enterprise boundaries.


- Rights Management Services (AD RMS).

AD RMS can be used to augment the security strategy for your organization by protecting documents using information rights management (IRM).

AD RMS allows individuals and administrators through IRM policies to specify access permissions to documents, workbooks, and presentations.
==
What is Active Directory Domain Services?

Active Directory Domain Services (AD DS) is a server role in Active Directory that allows admins to manage and store information about resources from a network, as well as application data, in a distributed database.

AD DS contains a centralized directory that lets domains and users communicate. For example, when users log in to Windows domain-based PCs, AD DS checks the submitted credentials and verifies whether they are IT administrators or regular users.

Preparing the Server to Install Active Directory

- The Server Should Have a Static IP (IP Address is pre-configured and will not change.. (DHCP - IP Address will change on reboot)
- Open Server manager and Add Roles and Features

What is a domain controller?

- The server where Active Directory Domain Services are installed and a domain is configured.

AD DS Database Folder

AD DS stores and organizes information about the people, devices and services connected to a network.

AD DS Log Files

These logs are the transaction logs used to record changes made in AD DS.
All changes are first written to a transaction log and eventually make their way into the database a short time later.

AD DS SysVol Folder

SYSVOL is a folder located on each domain controller (DC) within the domain. It consists of the domain public files that need to be accessed by clients and kept synced between DCs.

Powershell Code:

#
# Windows PowerShell script for AD DS Deployment
#

Import-Module ADDSDeployment
Install-ADDSForest `
-CreateDnsDelegation:$false `
-DatabasePath "C:\Windows\NTDS" `
-DomainMode "WinThreshold" `
-DomainNetbiosName "BYQUS" `
-ForestMode "WinThreshold" `
-InstallDns:$true `
-LogPath "C:\Windows\NTDS" `
-NoRebootOnCompletion:$false `
-SysvolPath "C:\Windows\SYSVOL" `
-Force:$true

How to Open Active Directory Domain Services.

- Administrative Tools - Active Directory Domains and Services

Enterprise Admin will have admin rights over the root domain - Forest level.

Forest is collections of Domains - Each Domain will have its own Domain Admin Role.
=

[vash_]

Please keep dropping more videos, im loving your content and its helping with my junior tech role!

[GhStLkr]

The video I was looking for. You are the best, mr.

[onlysubal]

Thanks for uploading this video on AD. This made my concepts pretty much clear.🙏🙏

[alberts]

I have the issue that VM win10 CAN ping my ws19 with AD and DNS but can't ping my domain. nslookup shows my domain, that makes me more confused why it is not working. I did all proper steps in DNS.
Good video.