Installer Annuaire actif sur Serveur Windows 2016.
NOTE: Before installing the AD role, you must install the DNS role. (DNS – required component for AD)
Install Active Directory Domain Services with Graphical Interface (Interface graphique)
1. Start your Server and start the Gestionnaire de serveur console (by default starts after user login);
2. Click Manage (upper menu) et cliquez Add Roles and Features;
3. Cliquez le prochain bouton;
4. Sélectionner Installation basée sur des rôles ou des fonctionnalités et cliquez Suivant bouton;
5. Select your target server (in my case it’s only one) et cliquez sur le Suivant bouton;
6. Cocher la case Annuaire actif Domaine Services (ADDS);
7. In the pop-up window click Ajouter des fonctionnalités bouton (added some AD management tools);
8. Cliquez Suivant bouton;
9. For now we don’t need any Caractéristiques, so click Suivant;
10. Read the short text about AD and click the Suivant bouton;
11. You may set a check mark Restart the destination server automatically if required (by default not required). Cliquez sur le Installer bouton;
12. After installation is complete click the Fermer bouton;
13. After role installation is complete you will see a yellow triangle in the upper menu. Click on it to show the next list, cliquez Promote this server to a domaine contrôleur (to make this device Domaine Contrôleur, aka DC);
14. Sélectionner Ajouter une nouvelle forêt (in my case this is a new DC and new forest), and enter the Root domaine nom (this is our future domaine). Cliquez sur le Suivant bouton;
15. Sélectionnez votre:
- Forest functional level;
- Domaine functional level;
Type the DSRM mot de passe (make it strong, needed for future restore if it fell) et cliquez le prochain bouton;
16. If you have parent DNS cliquez Show more;
17. Read the short text about DNS delegation and click the OK button.If needed- create a DNS delegation. If you don’t need to Créer DNS delegation (à titre d'exemple) – click le prochain bouton;
18. Entrer The NetBIOS domaine nom de votre domaine et cliquez le prochain bouton;
19. If need – specify the location of AD DS objects, et cliquez sur le Suivant bouton;
20. Read the summary information, and if all is OK click le prochain bouton;
21. After checking pre-requirements click Installer;
22. Installation began;
23. After installation is complete you get a pop-up about Signing out and the system restarting. You may click the Fermer button or wait to restart;
24. System restart;
25. After restarting you will see, that you are able to enregistrer in as Domaine Administrateur;
26. After login to the system, when the Server Manager console shows up you will see the installed role AD DS;
Install Active Directory Domain Services with Windows Powershell
The first thing you will need to do is open Windows PowerShell. Once you have logged into the system and are faced with the ligne de commande, simply type PowerShell (dans Fenêtres Cœur). For the desktop interface run PowerShell (Administrateur).
1. Exécuter:
Get-WindowsFeature
2. Once the command has been completed successfully, you will be presented with all the uninstalled, but available, modules.
3. Once we have figured out the service name and the module name, we now have to go ahead and install it.
Install-WindowsFeature AD-Domain-Services
This command will extract all required binary files and start the installation procedure.
4. Let’s create a new forest.
Import-Module ADDSDeployment
NOTE: If the command is completed successfully then you will be faced with a blank prompt.
5. Now, you will need need to promote your server to a domaine controller as per your requirements – there are several commands that you can use to do this.
Command | Description |
Add-ADDSReadOnlyDomainControllerAccount | Install a read-only domaine contrôleur |
Install-ADDSDomain | Install the first domaine controller in a child or tree domaine |
Install-ADDSDomainController | Install an additional domaine controller in a domaine |
Install-ADDSForest | Install the first domaine controller in the new forest |
Test-ADDSDomainControllerInstallation | Verify prerequisites to install an additional domaine controller in a domaine |
Test-ADDSDomainControllerUninstallation | Uninstall AD services from the server |
Test-ADDSDomainInstallation | Verify prerequisites to install the first domaine controller in a child or tree domaine |
Test-ADDSForestInstallation | Install the first domaine controller in the new forest |
Test-ADDSReadOnlyDomainControllAccountCreation | Verify prerequisites to install a read-only domaine contrôleur |
Uninstall-ADDSDomainController | Uninstall the domaine controller from the server |
Pour installer le Annuaire actif with the default configuration, execute the following command:
Install-ADDSForest
This will install the basic features and functions, cependant, if you want to install a customized setup:
Install-ADDSForest -CreateDnsDelegation:$false -DatabasePath "C:\Windows\NTDS" -DomainMode "Win2012R2" -DomainName "yourdomain.com" -DomainNetbiosName "YOURDOMAIN" -ForestMode "Win2016" -InstallDns:$true -LogPath "C:\Windows\NTDS" -NoRebootOnCompletion:$false -SysvolPath "C:\Windows\SYSVOL" -Force:$vrai
Once you execute this, you will be asked to enter SafeModeAdministratorPassword – this is for the Directory Services Restore Mode (DSRM). Once you set this mot de passe ici Fenêtres will finish the AD installation and configuration on your Serveur Windows based on the input provided.
6. Le Annuaire actif will now install. You may receive various warnings, depending on whether you have static IPs or not. Your server may automatically restart during this process as well.
awsome