In this lab, Active Directory Domain Services (AD DS), DHCP, and DNS will be set up and configured on a Windows Server 2022 environment. These services are crucial for managing a networked environment, allowing centralized management of users, IP address allocation, and name resolution across a network.
- A physical or virtual machine running Windows Server 2022.
- Access to Server Manager to install and configure roles.
- Basic knowledge of networking concepts, including IP addressing, subnets, and DNS.
- Administrator privileges on the server to perform role installations and configurations.
- IT professionals or students seeking to practice setting up essential network services like AD DS, DHCP, and DNS.
- Network Administrators interested in automating and managing their organization's infrastructure.
- Active Directory Domain Services (AD DS) will be used to create a centralized directory for managing users and computers.
- DHCP (Dynamic Host Configuration Protocol) will be configured to automatically assign IP addresses to network devices.
- DNS (Domain Name System) will be set up to allow network devices to resolve domain names to IP addresses.
- This lab is useful when setting up a new Windows Server for an organization or a practice environment.
- This lab is designed for use in a virtual environment (e.g., Hyper-V, VMware) or a physical server running Windows Server 2022.
- Setting up Active Directory, DHCP, and DNS is foundational for managing a network of computers and devices in an enterprise environment.
- These services are integral for network security, resource management, and network stability.
Active Directory Domain Services (AD DS) is a core component of Microsoft’s directory service, which provides centralized management and authentication for resources across a network. AD DS is responsible for storing and organizing information about networked resources such as users, computers, and services, and it facilitates access control and security policies.
Key Features:
- Centralized Authentication: AD DS provides a central authentication mechanism, where users log in with a single set of credentials to access network resources.
- Directory Structure: AD DS uses a hierarchical directory structure that includes domains, trees, and forests to organize resources.
- Group Policies: It allows for centralized management and configuration of operating systems, applications, and users through Group Policy Objects (GPOs).
- Access Control: It helps define who can access what resources on the network and under what conditions.
Why it matters: AD DS is crucial for environments that require centralized management of users, computers, and other resources. It ensures security, simplifies administrative tasks, and allows for easier scalability as organizations grow.
How it works:
- Domain Controllers: Servers running the AD DS role, which store the directory database and provide authentication services.
- Replication: AD DS data is replicated across multiple domain controllers to ensure high availability.
- Security and Trusts: AD DS supports the implementation of security policies and cross-domain trusts to enable access to resources across different domains.
-
Open Server Manager and click Manage > Add Roles and Features.
-
Choose Role-based or feature-based installation, then select the server and click Next.
-
In the Roles section, check Active Directory Domain Services. Click Next.
- Click Install to install the AD DS role. Wait for the installation to complete.
-
After installation, click the notification flag in Server Manager and select Promote this server to a domain controller.
-
Choose Add a new forest, then enter the Root domain name (e.g., example.local).
-
Set the Forest functional level and Domain functional level to the appropriate version (e.g., Windows Server 2016 or higher).
-
Enter a Directory Services Restore Mode (DSRM) password and click Next.
-
Set the NetBIOS domain name.
NetBIOS (Network Basic Input/Output System)
This was widely used in early Windows networks and is still supported for backward compatibility. Some older applications, devices, or systems that haven't transitioned to DNS (Domain Name System) may still rely on NetBIOS names to identify and connect to resources on the network.
-
Review the DNS options and it was discovered that a DNS server will be installed during the process.
-
Review the configuration and click Install. The server will restart.
-
Open Server Manager and click Manage > Add Roles and Features.
-
Select Role-based or feature-based installation, choose the server, and click Next.
-
In the Roles section, check DHCP Server, then click Next.
-
Click Install to install the DHCP role. Wait for the installation to complete.
-
Open the DHCP Management Console from Server Manager > Tools > DHCP.
-
Right-click IPv4 and select New Scope.
-
Configure the scope by entering a Start IP address, End IP address, Subnet Mask, and any Exclusions for static IPs.
Be sure to exclude the IP address of the server so there isn't an IP conflict.
- Set the Lease Duration and configure the DHCP Options such as Router and DNS servers.
In a larger network with many devices, such as in an office or enterprise environment, devices are typically more stable and remain connected for long periods of time. In this case, a longer lease duration is ideal.
Recommended Lease Duration: 1 day to 7 days
A longer lease ensures that devices don't need to renew leases too frequently, reducing the workload on the DHCP server. This is especially useful when most devices stay connected for extended periods (e.g., workstations, desktops, etc.).
This is a virtual machine so this will not be required.
- Activate the scope and verify clients can obtain IP addresses.
-
Open the DNS Management Console from Server Manager > Tools > DNS.
-
Right-click Forward Lookup Zones and select New Zone.
-
Select Primary Zone, enter the Zone Name (e.g., example.local), and click Next.
At the end of this lab, Active Directory Domain Services (AD DS), DHCP, and DNS will be successfully installed and configured on a Windows Server 2022 machine. These services provide essential network functionality, allowing for centralized management of users, dynamic IP address assignment, and domain name resolution across the network.
