Active Directory Fundamentals

Prerequisites

• Windows Server 2019/2022/2025
• Admin privileges
• Static IP + proper DNS plan

1. Install AD DS Role

Use Server Manager or PowerShell:

Install-WindowsFeature AD-Domain-Services -IncludeManagementTools

2. Promote to Domain Controller

1. Post-install tasks → Promote this server to a domain controller.
2. Create new forest (example: corp.local).
3. Specify DSRM password and complete wizard.

3. DNS Configuration

Ensure clients use the DC IP as primary DNS.

Common Tasks

• Create OUs (Users, Computers, Servers).
• Create users & groups (least privilege).
• Link baseline GPO (password, audit, hardening).

Best Practices

• Document OU & GPO structure.
• Keep SYSVOL healthy & replicate.
• Regular system state backups.