8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

1/47

How do I install Active Directory on my Windows Server 2003 server?

First make sure you read and understand Active Directory Installation Requirements. If you don't comply with all the requirements ofthat article you will not be able to set up your AD (for example: you don't have a NIC or you're using a computer that's not connectedto a LAN).

Note: This article is only good for understanding how to install the FIRST DC in a NEW AD Domain, in a NEW TREE, in a NEWFOREST. Meaning - don't do it for any other scenario, such as a new replica DC in an existing domain. In order to install a WindowsServer 2003 DC in an EXISTING Windows 2000 Domain follow the Windows 2003 ADPrep tip.

Windows 2000 Note: If you plan to install a new Windows 2000 DC please read How to Install Active Directory on Windows2000.

Windows Server 2003 Note: If you plan to install a new Windows Server 2003 DC in an existing AD forest please read thepage BEFORE you go on, otherwise you'll end up with the following error:

Here is a quick list of what you must have:

An NTFS partition with enough free space

An Administrator's username and password

The correct operating system version

A NIC

Properly configured TCP/IP (IP address, subnet mask and - optional - default gateway)

A network connection (to a hub or to another computer via a crossover cable)

http://www.petri.co.il/active_directory_installation_requirements.htmhttp://www.petri.co.il/windows_2003_adprep.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k.htmhttp://www.petri.co.il/windows_2003_adprep.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k.htmhttp://www.petri.co.il/active_directory_installation_requirements.htm

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

2/47

An operational DNS server (which can be installed on the DC itself)

A Domain name that you want to use

The Windows Server 2003 CD media (or at least the i386 folder)

Brains (recommended, not required...)

This article assumes that all of the above requirements are fulfilled.

Step 1: Configure the computer's suffix

(Not mandatory, can be done via the Dcpromo process).

1. Right click My Computer and choose Properties.2. Click the Computer Name tab, then Change.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

3/47

3. Set the computer's NetBIOS name. In Windows Server 2003, this CAN be changed after the computer has beenpromoted to Domain Controller.

4. Click More.

5. In the Primary DNS suffix of this computer box enter the would-be domain name. Make sure you got it right. No spellingmistakes, no "oh, I thought I did it right...". Although the domain name CAN be changed after the computer has beenpromoted to Domain Controller, this is not a procedure that one should consider lightly, especially because on the possibleconsequences. Read more about it on my Windows 2003 Domain Rename Tool page.

http://www.petri.co.il/windows_2003_domain_rename.htmhttp://www.petri.co.il/windows_2003_domain_rename.htm

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

4/47

6. Click Ok.7. You'll get a warning window.

8. Click Ok.9. Check your settings. See if they're correct.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

5/47

10.Click Ok.11.You'll get a warning window.

12.Click Ok to restart.

Step 2: Configuring the computer's TCP/IP settings

You must configure the would-be Domain Controller to use it's own IP address as the address of the DNS server, so it will point to

itself when registering SRV records and when querying the DNS database.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

6/47

Configure TCP/IP

1. Click Start, point to Settings and then click Control Panel.2. Double-click Network and Dial-up Connections.

3. Right-click Local Area Connection, and then click Properties.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

7/47

4. Click Internet Protocol (TCP/IP), and then click Properties.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

8/47

5. Assign this server a static IP address, subnet mask, and gateway address. Enter the server's IP address in the PreferredDNS server box.

Note: This is true if the server itself will also be it's own DNS server.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

9/47

If you have another operational Windows 2000/2003 server that is properly configured as your DNS server (read myCreate a New DNS Server for AD page) - enter that server's IP address instead:

http://www.petri.co.il/create_a_new_dns_server_for_ad.htmhttp://www.petri.co.il/create_a_new_dns_server_for_ad.htm

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

10/47

6. Click Advanced.7. Click the DNS Tab.8. Select "Append primary and connection specific DNS suffixes"9. Check "Append parent suffixes of the primary DNS suffix"10.Check "Register this connection's addresses in DNS". If this Windows 2000/2003-based DNS server is on an intranet, it

should only point to its own IP address for DNS; do not enter IP addresses for other DNS servers here. If this serverneeds to resolve names on the Internet, it should have a forwarder configured.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

11/47

11.Click OK to close the Advanced TCP/IP Settings properties.12.Click OK to accept the changes to your TCP/IP configuration.

13.Click OK to close the Local Area Connections properties.

Step 3: Configure the DNS Zone

(Not mandatory, can be done via the Dcpromo process).

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

12/47

This article assumes that you already have the DNS service installed. If this is not the case, please read Create a New DNSServer for AD.

Furthermore, it is assumed that the DC will also be it's own DNS server. If that is not the case, you MUST configure anotherWindows 2000/2003 server as the DNS server, and if you try to run DCPROMO without doing so, you'll end up with errors and

the process will fail.

Creating a Standard Primary Forward Lookup Zone

1. Click Start, point to All Programs, point to Administrative Tools, and then click DNS Manager. You see two zones underyour computer name: Forward Lookup Zone and Reverse Lookup Zone.

2. Right click Forward Lookup Zones and choose to add a new zone.

http://www.petri.co.il/create_a_new_dns_server_for_ad.htmhttp://www.petri.co.il/create_a_new_dns_server_for_ad.htmhttp://www.petri.co.il/create_a_new_dns_server_for_ad.htmhttp://www.petri.co.il/create_a_new_dns_server_for_ad.htm

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

13/47

3. Click Next. The new forward lookup zone must be a primary zone so that it can accept dynamic updates. Click Primary,and then click Next.

4. The name of the zone must be the same as the name of the Active Directory domain, or be a logical DNS container for

that name. For example, if the Active Directory domain is named "lab.dpetri.net", legal zone names are "lab.dpetri.net","dpetri.net", or "net".

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

14/47

Type the name of the zone, and then click Next.

5. Accept the default name for the new zone file. Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

15/47

6. To be able to accept dynamic updates to this new zone, click "Allow both nonsecure and secure dynamic updates". ClickNext.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

16/47

7. Click Finish.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

17/47

You should now make sure your computer can register itself in the new zone. Go to the Command Prompt (CMD) and run"ipconfig /registerdns" (no quotes, duh...). Go back to the DNS console, open the new zone and refresh it (F5). Notice

that the computer should by now be listed as an A Record in the right pane.

If it's not there try to reboot (although if it's not there a reboot won't do much good). Check the spelling on your zoneand compare it to the suffix you created in step 1. Check your IP settings.

Enable DNS Forwarding for Internet connections (Not mandatory)

1. Start the DNS Management Console.

2. Right click the DNS Server object for your server in the left pane of the console, and click Properties.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

18/47

3. Click the Forwarders tab.

4. In the IP address box enter the IP address of the DNS servers you want to forward queries to - typically the DNS server ofyour ISP. You can also move them up or down. The one that is highest in the list gets the first try, and if it does notrespond within a given time limit - the query will be forwarded to the next server in the list.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

19/47

5. Click OK.

Creating a Standard Primary Reverse Lookup Zone

You can (but you don't have to) also create a reverse lookup zone on your DNS server. The zone's name will be the same as yourTCP/IP Network ID. For example, if your IP address is 192.168.0.200, then the zone's name will be 192.168.0 (DNS will appenda long name to it, don't worry about it). You should also configure the new zone to accept dynamic updates. I guess you can do

it on your own by now, can't you?

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

20/47

Step 4: Running DCPROMO

After completing all the previous steps (remember you didn't have to do them) and after double checking your requirements youshould now run Dcpromo.exe from the Run command.

1. Click Start, point to Run and type "dcpromo".

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

21/47

2. The wizard windows will appear. Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

22/47

3. In the Operating System Compatibility windows read the requirements for the domain's clients and if you like what yousee - press Next.

4. Choose Domain Controller for a new domain and click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

23/47

5. Choose Create a new Domain in a new forest and click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

24/47

6. Enter the full DNS name of the new domain, for example - kuku.co.il - this must be the same as the DNS zone you've

created in step 3, and the same as the computer name suffix you've created in step 1. Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

25/47

This step might take some time because the computer is searching for the DNS server and checking to see if any naming

conflicts exist.

7. Accept the the down-level NetBIOS domain name, in this case it's KUKU. Click Next

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

26/47

8. Accept the Database and Log file location dialog box (unless you want to change them of course). The location of the filesis by default %systemroot%\NTDS, and you should not change it unless you have performance issues in mind. Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

27/47

9. Accept the Sysvol folder location dialog box (unless you want to change it of course). The location of the files is by default%systemroot%\SYSVOL, and you should not change it unless you have performance issues in mind. This folder must be

on an NTFS v5.0 partition. This folder will hold all the GPO and scripts you'll create, and will be replicated to all otherDomain Controllers. Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

28/47

10.If your DNS server, zone and/or computer name suffix were not configured correctly you will get the following warning:

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

29/47

This means the Dcpromo wizard could not contact the DNS server, or it did contact it but could not find a zone with the

name of the future domain. You should check your settings. Go back to steps 1, 2 and 3. Click Ok.

You have an option to let Dcpromo do the configuration for you. If you want, Dcpromo can install the DNS service, create

the appropriate zone, configure it to accept dynamic updates, and configure the TCP/IP settings for the DNS server IPaddress.

To let Dcpromo do the work for you, select "Install and configure the DNS server...".

Click Next.

Otherwise, you can accept the default choice and then quit Dcpromo and check steps 1-3.

11.If your DNS settings were right, you'll get a confirmation window.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

30/47

Just click Next.

12.Accept the Permissions compatible only with Windows 2000 or Windows Server 2003 settings, unless you have legacyapps running on Pre-W2K servers.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

31/47

13.Enter the Restore Mode administrator's password. In Windows Server 2003 this password can be later changed via

NTDSUTIL. Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

32/47

14.Review your settings and if you like what you see - Click Next.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

33/47

15.See the wizard going through the various stages of installing AD. Whatever you do - NEVER click Cancel!!! You'll wreck

your computer if you do. If you see you made a mistake and want to undo it, you'd better let the wizard finish and thenrun it again to undo the AD.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

34/47

16.If all went well you'll see the final confirmation window. Click Finish.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

35/47

17.You must reboot in order for the AD to function properly.

18.Click Restart now.

Step 5: Checking the AD installation

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

36/47

You should now check to see if the AD installation went well.

1. First, see that the Administrative Tools folder has all the AD management tools installed.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

37/47

2. Run Active Directory Users and Computers (or type "dsa.msc"from the Run command). See that all OUs and Containersare there.

3. Run Active Directory Sites and Services. See that you have a site named Default-First-Site-Name, and that in it yourserver is listed.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

38/47

4. Open the DNS console. See that you have a zone with the same name as your AD domain (the one you've just created,

remember? Duh...). See that within it you have the 4 SRV record folders. They must exist.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

39/47

= Good

If they don't (like in the following screenshot), your AD functions will be broken (a good sign of that is the long time it

took you to log on. The "Preparing Network Connections" windows will sit on the screen for many moments, and evenwhen you do log on many AD operations will give you errors when trying to perform them).

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

40/47

= Bad

This might happen if you did not manually configure your DNS server and let the DCPROMO process do it for you.

Another reason for the lack of SRV records (and of all other records for that matter) is the fact that you DID configure theDNS server manually, but you made a mistake, either with the computer suffix name or with the IP address of the DNSserver (see steps 1 through 3).

To try and fix the problems first see if the zone is configured to accept dynamic updates.

1. Right-click the zone you created, and then click Properties.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

41/47

2. On the General tab, under Dynamic Update, click to select "Nonsecure and secure" from the drop-down list,

and then click OK to accept the change.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

42/47

You should now restart the NETLOGON service to force the SRV registration.

You can do it from the Services console in Administrative tools:

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

43/47

Or from the command prompt type "net stop netlogon", and after it finishes, type "net start netlogon".

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

44/47

Let it finish, go back to the DNS console, click your zone and refresh it (F5). If all is ok you'll now see the 4 SRV recordfolders.

If the 4 SRV records are still not present double check the spelling of the zone in the DNS server. It should be exactly the

same as the AD Domain name. Also check the computer's suffix (see step 1). You won't be able to change the computer'ssuffix after the AD is installed, but if you have a spelling mistake you'd be better off by removing the AD now, before you

have any users, groups and other objects in place, and then after repairing the mistake - re-running DCPROMO.

5. Check the NTDS folder for the presence of the required files.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

45/47

6. Check the SYSVOL folder for the presence of the required subfolders.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

46/47

7. Check to see if you have the SYSVOL and NETLOGON shares, and their location.

8/6/2019 2887447 How Do I Install Active Directory on My Windows Server 2003 Server

47/47

If all of the above is ok, I think it's safe to say that your AD is properly installed.

If not, read Troubleshooting Dcpromo Errors and re-read steps 1-4 in this article.

Related articles

You may find these related articles of interest to you:

Delete Failed DCs from Active Directory

How to Install Active Directory on Windows 2000

How to Install Active Directory on Windows 2000 (for Lamers)

How to Install a Replica DC in an Existing AD Domain on

Windows 2000

How to Install a Replica DC in an Existing AD Domain on

Windows Server 2003

Install DC from Media in Windows Server 2003

Joining a Domain in Windows XP Pro

Troubleshooting Dcpromo Errors

Unattended Installation of Active Directory

Windows 2003 ADPrep

Windows 2003 ADPrep Fix for Exchange 2000

Windows 2003 Domain Controller Rename

Windows 2003 Domain Rename

http://www.petri.co.il/troubleshooting_dcpromo_errors.htmhttp://www.petri.co.il/delete_failed_dcs_from_ad.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k_for_lamers.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htmhttp://www.petri.co.il/install_dc_from_media_in_windows_server_2003.htmhttp://www.petri.co.il/joining_a_domain_in_windows_xp_pro.htmhttp://www.petri.co.il/troubleshooting_dcpromo_errors.htmhttp://www.petri.co.il/unattended_installation_of_active_directory.htmhttp://www.petri.co.il/windows_2003_adprep.htmhttp://www.petri.co.il/windows_2003_adprep_fix_for_e2k.htmhttp://www.petri.co.il/windows_2003_domain_controller_rename.htmhttp://www.petri.co.il/windows_2003_domain_rename.htmhttp://www.petri.co.il/troubleshooting_dcpromo_errors.htmhttp://www.petri.co.il/delete_failed_dcs_from_ad.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_on_w2k_for_lamers.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_w2k.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htmhttp://www.petri.co.il/how_to_install_active_directory_replica_on_windows_2003.htmhttp://www.petri.co.il/install_dc_from_media_in_windows_server_2003.htmhttp://www.petri.co.il/joining_a_domain_in_windows_xp_pro.htmhttp://www.petri.co.il/troubleshooting_dcpromo_errors.htmhttp://www.petri.co.il/unattended_installation_of_active_directory.htmhttp://www.petri.co.il/windows_2003_adprep.htmhttp://www.petri.co.il/windows_2003_adprep_fix_for_e2k.htmhttp://www.petri.co.il/windows_2003_domain_controller_rename.htmhttp://www.petri.co.il/windows_2003_domain_rename.htm