Windows Server 2016 - Setup Local Domain Controller | Tutorials

Information There are several reasons to create and use a local domain even in relatively small home networks. To list a few:

• Centralized user management
• Users sign in to domain instead of signing in to just a certain PC. No separate user account setup on each machine, a domain user can sign in on each domain joined machine, access level controlled by server admin
• Centrally managed Group Policies; Restrict or expand user rights with group policies on server, all policies applied throughout the domain
• And so on...

To create a local domain, you need a Windows Server operating system (yes, of course you can set up a Linux server, too, but this is Windows 10 Forums! ). It can be installed on physical hardware with quite modest specifications, or on a virtual machine. Naturally, to guarantee that your domain and Active Directory which controls and manages the users and computers on your domain function, the server should be always on, up and running. Setting up an Active Directory Domain Controller can be divided to five phases:

1. Install Windows Server
2. Set up the server (static IP, updates, server name etc.)
3. Create the domain
4. Setup Active Directory Domain Services
5. Create domain / AD users

This tutorial will show you how to do this. When done, your users and computers can join your own local domain. The new Windows Server 2016 is now (end of May 2016) in version Technical Preview 5 and can be downloaded for free from Microsoft TechNet Evaluation Center: Technet Evaluation Center More information about Windows Server 2016: https://www.microsoft.com/en-us/serv...s-server-2016/ More about Active Directory:

• Active Directory - Wikipedia, the free encyclopedia
• Active Directory
• Active Directory Domain Services

Let's start! The tutorial might look long and complicated but please believe me, it's a piece of cake, doing everything told in this tutorial will take 30 to 40 minutes of your time, including the time needed to install Windows Server 2016 :) Warning To join a Windows PC or virtual machine to a domain, it must be PRO or better edition:

• Windows 7 Professional, Ultimate, Enterprise
• Windows 8 & 8.1 Pro, Enterprise
• Windows 10 Pro, Education, Enterprise

If your home computers have a Home edition of any Windows version, they cannot join a domain. Contents

Part One:	Install Windows Server 2016
Part Two:	Setup Windows Server 2016
Part Three:	Setup Active Directory Domain Controller
Part Four:	Create a domain
Part Five:	Add users to Active Directory
Part Six:	Additional videos

Note Click or tap screenshots in this tutorial to pop out them, click / tap again to enlarge. Part One

Install Windows Server 2016

1.1) Download Windows Server 2016: Technet Evaluation Center. Notice that you need to register to be able to download 1.2) If installing on a virtual machine select the ISO file as install media. On a physical machine you need first to create a DVD or flash install media. See this tutorial for help: USB Flash Drive - Create to Install Windows 10 - Windows 10 Forums 1.3) Boot from Windows Server 2016 install media 1.4) When prompted, enter the generic product key shown in Preinstall Information: 1.5) Select the Desktop Experience version: 1.6) Install Windows normally, as any other Windows version. When installation is done, you need to set the password for the built-in administrator 1.7) Press CTRL+ALT+DEL to enter the sign-in dialog, enter the password, hit Enter to sign in: Part Two

Setup Windows Server 2016

2.1) Server Dashboard opens automatically by default (when closed it can be opened from Start). First thing is to change the resolution, after the installation Windows defaults to 1024*768, aspect ratio 4:3. To work comfortably you need better resolution. Minimize the Dashboard, select Display Settings from desktop context menu. This warning will be shown: Just ignore the warning, click Close to open display settings and change the resolution to what you prefer 2.2) Maximize / open the Dashboard. Select Local Server on left pane It is extremely important that Windows Server is fully updated before going any further. Click Never after Last checked for updates, run Windows Update, restart if prompted: 2.3) Change the computer name to something easier to remember and recognize. In this example I changed the name to TenForumsServer. Remember to restart after computer name change! 2.4) Set a static IP address for server. Select an IP outside the DHCP IP pool your router uses to assign dynamic IP addresses. In this example I checked my router settings, learned that the IP pool it uses is from 192.168.2.100 to 192.168.2.200, router itself using 192.168.2.1: I chose 192.168.2.50 for the server, set it as static IP, setting both Default Gateway and Preferred DNS server to use the router IP 192.168.2.1: Part Three

Setup Active Directory Domain Controller

3.1) Select Add Roles and Features from the Manage menu top right: 3.2) Click Next: 3.3) Select Role-based or feature-based installation, click Next: 3.4) See that your server is listed, select it and choose Select a server from the server pool. Click Next: 3.5) Click on the selection box Active Directory Domain Services. A dialog opens, click Add Features: 3.6) Click Next: 3.7) Click Next: 3.8) Click Next: 3.9) Click Install: 3.10) You can close the wizard now, installation continues in the background: Part Four

Create a domain

4.1) You should now see a yellow warning sign next to Notifications flag in menu bar top right. Click the flag to open the menu. When it tells you Installation succeeded on ServerName, select Promote this server to a domain controller: 4.2) Select Add a new forest, enter your chosen local domain name (prefix.suffix). In this example I named my domain as ten.forums: Note Local domain name guidelines A domain name as we have been used to see on Internet consists of subdomain (optional), domain and TLD (top level domain). They are separated with a dot. For example in domain name www.myownwebsite.com, the www is the subdomain, myownwebsite domain and com the TLD. My favourite news site from my native Finland is http://www.yle.fi, again the subdomain being www, the domain itself yle and the TLD the country code for Finland fi. Their on-demand TV I can find from http://areena.yle.fi where areena is subdomain, yle the domain and again fi as TLD. In naming local domains the subdomain can be used but is mostly left out as unnecessary. The local domain suffix can be almost anything you'd like to, important to remember is not to use any reserved top level domain suffixes like .com, .org, .net or the country TLDs like .co.uk, .fi, .fr and so on. TLD suffixes commonly used in local domains are for instance .loc and .local. My home domain is called agm.home, I'm used to name my home network domains with suffix .home but as it might happen that it will be registered as an available TLD for Internet, I need to rethink that and rename my domain. A local domain prefix (domain name) should be max 15 characters; if any longer, Windows Server uses the first 15 characters of it as so called NetBIOS name. The prefix may only contain letters A-Z, a-z, numbers 0-9 and one or more hyphens. It must contain at least one letter, a domain prefix containing numbers only is not allowed. 4.3) This is important: on the next page of the wizard you need to set up a password you wish you will never need: A recovery password in case something goes awfully wrong and you need to run Directory Services Restore. Select a good password, it may but don't have to be the same as your server admin password. Click Next when done: 4.4) The DNS options page shows you a warning which you can completely ignore. Click Next: 4.5) On Additional Options page check that NetBIOS name is correct; it should be the prefix of your local domain. In this example I named my domain as ten.forums, the NetBIOS name therefore being TEN (NetBIOS names are usually written with upper case). Click Next: 4.6) Accept default paths, click Next: 4.7) Review your settings, click Next 4.8) You will now see a list of warnings. As long as the bottom of this list tells you that All prerequisite checks passed successfully, you can ignore the warnings and click Install: 4.9) Windows Server will restart automatically to finalize the installation: 4.10) Sign in. Notice the missing network connection: 4.11) Fix the DNS server IP error (see previous screenshot in step 4.10 for explanation), change it back to your default gateway IP. In my case now for this example I changed it back to 192.168.2.1: 4.12) To be sure let's check Internet works. You cannot use Edge: 4.13) Instead open Internet Explorer (WIN+R, type iexplore, hit Enter). You will be notified that Enhanced Security is enabled. You need to manually add websites you want to visit to list of allowed sites: 4.14) Everything OK, Internet works. You can close the browser: 4.15) Dashboard > Local Server shows the domain is OK: Part Five

Add users to Active Directory

5.1) A domain without users allowed to sign in is useless. To create users, open Tools menu, select Active Directory Users and Computers: 5.2) Expand your domain, select Users, click New User button: 5.3) Add a user, click Next: 5.4) Set password for this user. As this is a private home domain, select Password never expires, click Next: 5.5) Review the information, click Finish: 5.6) The first user is usually yourself. To add this user to Administrators, right click the user and select Properties: 5.7) Add user to Administrators: 5.8) In the future you can sign in to server with your own domain user credentials Part Six

Additional videos

Embedded Video is not supported in Internet Explorer - Watch on youtube Embedded Video is not supported in Internet Explorer - Watch on youtube Embedded Video is not supported in Internet Explorer - Watch on youtube Embedded Video is not supported in Internet Explorer - Watch on youtube Embedded Video is not supported in Internet Explorer - Watch on youtube That's it! Note Your domain is set up and running. Now you can join your devices to the domain. Managing users and computers, group policies and much more in future tutorials and videos. Kari Related Tutorials

• How to Join a Windows 10 PC to a Local Active Directory Domain
• How to Remove a Windows 10 PC from a Local Active Directory Domain

Windows 11 Tutorials

Brink Posts : 75,920 64-bit Windows 11 Pro for Workstations New 27 May 2016 #1

Nice tutorial Kari. :)

My Computers

• System One
• System Two

Computer Type: PC/Desktop System Manufacturer/Model Number: Custom self built OS: 64-bit Windows 11 Pro for Workstations CPU: Intel i7-8700K 5 GHz Motherboard: ASUS ROG Maximus XI Formula Z390 Memory: 64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR) Graphics Card: ASUS ROG-STRIX-GTX1080TI-O11G-GAMING Sound Card: Integrated Digital Audio (S/PDIF) Monitor(s) Displays: 2 x Samsung Odyssey G75 27" Screen Resolution: 2560x1440 Keyboard: Logitech wireless K800 Mouse: Logitech MX Master 3 PSU: Seasonic Prime Titanium 850W Case: Thermaltake Core P3 wall mounted Cooling: Corsair Hydro H115i Hard Drives: 1TB Samsung 990 PRO M.2, 4TB Samsung 990 PRO PRO M.2, TerraMaster F8 SSD Plus NAS Internet Speed: 2 Gbps Download and 35 Mbps Upload Browser: Google Chrome Antivirus: Windows Defender and Malwarebytes Premium Other Info: Logitech Z625 speaker system, Logitech BRIO 4K Pro webcam, HP Color LaserJet Pro MFP M477fdn, CyberPower CP1500PFCLCD, Galaxy S23 Plus phone View my PC Album Computer Type: Laptop System Manufacturer/Model Number: HP Spectre x360 2in1 OS: 64-bit Windows 10 Pro build 21390 CPU: i7-1065G7 3.9 GHz Memory: 16 GB LPDDR4-3200 Graphics Card: Intel Iris Plus Sound Card: Intel SST Monitor(s) Displays: 13.3" 4K UWVA AMOLED multitouch Screen Resolution: 3840 x 2160 Hard Drives: 512 GB PCIe NVMe M.2 SSD Browser: Google Chrome Antivirus: Windows Defender and Malwarebytes Premium Quote

Kari Posts : 17,661 Windows 10 Pro Thread Starter New 27 May 2016 #2

Thanks Brink :)

My Computer

• My Computer

Computer Type: Laptop System Manufacturer/Model Number: HP ENVY 17-1150eg OS: Windows 10 Pro CPU: 1.6 GHz Intel Core i7-720QM Processor Memory: 8 GB Graphics Card: ATI Mobility Radeon HD 5850 Graphics Sound Card: Beats sound system with integrated subwoofer Monitor(s) Displays: 17" laptop display, 22" LED and 32" Full HD TV through HDMI Screen Resolution: 1600*900 (1), 1920*1080 (2 & 3) Keyboard: Logitech diNovo Media Desktop Laser (bluetooth) Mouse: Logitech Performance Mouse MX Cooling: As Envy runs a bit warm, I have it on a Cooler Master pad Hard Drives: Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm External: 2TB for backups, 2*3TB USB3 network drives for media Internet Speed: 100/20 Mbps VDSL Browser: Maxthon 3.3.4.1000, IE 11.0.9879.0 Antivirus: Windows Defender 4.7.9879.0 Quote

simrick Posts : 16,364 W10Prox64 New 27 May 2016 #3

Very good Kari. :) Your instructions are always precise and easy to follow.

My Computer

• My Computer

Computer Type: PC/Desktop System Manufacturer/Model Number: Custom Build OS: W10Prox64 CPU: Core i7-6700 Motherboard: ASUS Maximus VIII Hero Memory: 2x8GB DDR4-2400 Graphics Card: EVGA GeForce GTX-960 Sound Card: on-board Monitor(s) Displays: ASUS VE247 Screen Resolution: 1920x1080 Keyboard: Logitech K800 Wrls, Illuminated Mouse: Anker Ergo PSU: EVGA NEX750G Case: Corsair Obsidian 750D Cooling: Corsair Vortex Plus Hard Drives: Samsung SSD 850EVO 250GB + 2x2TB Spinners Internet Speed: 100Mbps Other Info: Many thanks to essenbe for his help putting this monster together! Quote

Kari Posts : 17,661 Windows 10 Pro Thread Starter New 27 May 2016 #4

Thanks Simrick! My goal was to make it as simple as possible to follow without any knowledge about the subject, even when it meant a lot of screenshots, to make sure that someone who has never installed a server OS or set up a domain can manage it.

My Computer

• My Computer

Computer Type: Laptop System Manufacturer/Model Number: HP ENVY 17-1150eg OS: Windows 10 Pro CPU: 1.6 GHz Intel Core i7-720QM Processor Memory: 8 GB Graphics Card: ATI Mobility Radeon HD 5850 Graphics Sound Card: Beats sound system with integrated subwoofer Monitor(s) Displays: 17" laptop display, 22" LED and 32" Full HD TV through HDMI Screen Resolution: 1600*900 (1), 1920*1080 (2 & 3) Keyboard: Logitech diNovo Media Desktop Laser (bluetooth) Mouse: Logitech Performance Mouse MX Cooling: As Envy runs a bit warm, I have it on a Cooler Master pad Hard Drives: Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm External: 2TB for backups, 2*3TB USB3 network drives for media Internet Speed: 100/20 Mbps VDSL Browser: Maxthon 3.3.4.1000, IE 11.0.9879.0 Antivirus: Windows Defender 4.7.9879.0 Quote

simrick Posts : 16,364 W10Prox64 New 27 May 2016 #5

Kari said: Thanks Simrick! My goal was to make it as simple as possible to follow without any knowledge about the subject, even when it meant a lot of screenshots, to make sure that someone who has never installed a server OS or set up a domain can manage it. And that would be me....

My Computer

• My Computer

Computer Type: PC/Desktop System Manufacturer/Model Number: Custom Build OS: W10Prox64 CPU: Core i7-6700 Motherboard: ASUS Maximus VIII Hero Memory: 2x8GB DDR4-2400 Graphics Card: EVGA GeForce GTX-960 Sound Card: on-board Monitor(s) Displays: ASUS VE247 Screen Resolution: 1920x1080 Keyboard: Logitech K800 Wrls, Illuminated Mouse: Anker Ergo PSU: EVGA NEX750G Case: Corsair Obsidian 750D Cooling: Corsair Vortex Plus Hard Drives: Samsung SSD 850EVO 250GB + 2x2TB Spinners Internet Speed: 100Mbps Other Info: Many thanks to essenbe for his help putting this monster together! Quote

Dude Posts : 16,695 Windows 11 Pro X64 New 27 May 2016 #6

Well done Kari, impressive job

My Computers

• System One
• System Two

Computer Type: PC/Desktop System Manufacturer/Model Number: Dude Build OS: Windows 11 Pro X64 CPU: R9 5950X Motherboard: ASUS ROG Strix X570-E Gaming ATX Memory: F4-3600C16D-32GTZR Graphics Card: Sapphier Pulse 9070 XT Sound Card: Onboard Monitor(s) Displays: LG 32GK650F-B 32" QHD Gaming Monitor 144Hz VA32AQ Screen Resolution: 1440p Keyboard: Logitech G910 Orion Spectrum RGB Wired Mechanical Gaming Keyboard Mouse: Logitech G502 Hero PSU: EVGA SuperNOVA 850 Ga, 80 Plus Gold 850W Case: Thermaltake Commander C33 Cooling: ARCTIC Liquid Freezer II 280 Hard Drives: SAMSUNG 980 Pro 1TB Samsung 990 Pro 2TB SPCC Solid State Disk 1TB Samsung SSD 850 EVO 500GB Internet Speed: 949 down 40 up Browser: Edge Antivirus: Defender Other Info: Corsair Void Elite Wireless HS View my PC Album Computer Type: PC/Desktop System Manufacturer/Model Number: AMD Build OS: W10 Pro CPU: R9 3900X Motherboard: ROG Crosshair VII X470 Memory: 16 GB G.SKILL TRIDENT Z 3600 C15 Graphics Card: GeForce RTX™ 3070 Ti Sound Card: ROG SupremeFX 8-Channel High Definition Audio CODEC S1220 Monitor(s) Displays: Samsung Keyboard: Logitech Mouse: Logitech PSU: EVGA Supernova 850G Case: Thermaltake Commander C36 Cooling: ARCTIC Liquid Freezer II 240 Hard Drives: Samsung M.2 970 EVO Plus 500GB Internet Speed: 948d/40u Browser: Edge Antivirus: Defender View my 2nd PC Album Quote

Kari Posts : 17,661 Windows 10 Pro Thread Starter New 27 May 2016 #7

Thanks Dude :)

My Computer

• My Computer

Computer Type: Laptop System Manufacturer/Model Number: HP ENVY 17-1150eg OS: Windows 10 Pro CPU: 1.6 GHz Intel Core i7-720QM Processor Memory: 8 GB Graphics Card: ATI Mobility Radeon HD 5850 Graphics Sound Card: Beats sound system with integrated subwoofer Monitor(s) Displays: 17" laptop display, 22" LED and 32" Full HD TV through HDMI Screen Resolution: 1600*900 (1), 1920*1080 (2 & 3) Keyboard: Logitech diNovo Media Desktop Laser (bluetooth) Mouse: Logitech Performance Mouse MX Cooling: As Envy runs a bit warm, I have it on a Cooler Master pad Hard Drives: Internal: 2 x 500 GB SATA Hard Disk Drive 7200 rpm External: 2TB for backups, 2*3TB USB3 network drives for media Internet Speed: 100/20 Mbps VDSL Browser: Maxthon 3.3.4.1000, IE 11.0.9879.0 Antivirus: Windows Defender 4.7.9879.0 Quote

Mystere Posts : 3,257 Windows 10 Pro New 27 May 2016 #8

You should make sure to mention that, while the technical preview is free... it won't remain so. Some people might have a rude awakening to find out they have to pay several hundred dollars to keep their network running.

My Computer

• My Computer

Computer Type: PC/Desktop OS: Windows 10 Pro Quote

JasonNJ Posts : 1 Windows Server 2016 New 29 Jan 2017 #9

Hi, Great post! Thank you for these detailed instructions. I got to step 4.11 - 4.13. I am running Windows Server 2016 as a VM in VM Workstation 12 Pro. Before I made these changes, I had internet access. My VM Network Adapter is set to NAT. I'm now connected to my new domain and I've changed the Preferred DNS address back to my router's IP address, but I'm still showing "No Internet access" and I have the yellow warning on my network connection. Any suggestions? I've restarted the vm and the main machine with no luck.

My Computer

• My Computer

OS: Windows Server 2016 Quote