8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

Shogan.tech
VMware, PowerCLI, IT, how-tos and other tech Home About Apps

Contact

Type text to search here...

Home > Microsoft, Windows Server > Creating Primary and Secondary Domain Controllers (Windows 2003 Server)

Creating Primary and Secondary Domain Controllers (Windows 2003 Server)

November 26th, 2009 Sean Leave a comment Go to comments I was creating a new Domain the other day for testing purposes and thought I would document the process as I went along to put a short tutorial up over here. This is how to create a Primary Domain Controller (Windows Server 2003) as well as a Secondary DC to act as a backup. I will not be covering FSMO roles or changing of FSMO roles in this tutorial however. The how-to assumes that you have two freshly installed Windows 2003 Servers. 1. Create your first DC. On your first freshly installed Windows 2003 Server machine, go to Start->Run, then type dcpromo then hit enter. Alternatively you can go to the Manage your server wizard and add a new Role of Domain Controller (Active Directory). After running dcpromo, click Next till you get to the Domain Controller Type page. Here we will select Domain controller for new domain. 2. Next we select Domain in a new forest. 3. You can now enter your full DNS name for the new domain. I used shogan.local. Dont use your web domain here as this is an internal domain name. Use something like yourcompanyname.local. 4. For the netbios name, leave as default. It should just be a shortened version of your domain specified in step 3. I believe this to help with compatibility when NT, 95, 98 machines are looking at a Windows 2000 or higher
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 1/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

domain. 5. Next you can specify the location of your database and log folders. I usually leave mine in their default location. 6. Same for the Shared System Volume folder. I leave mine as default (C:\WINDOWS\SYSVOL). 7. Next the wizard will check to see if you have DNS installed on this machine. If not, select the second option Install and Configure the DNS server on this computer. This is the easiest option and the installation will set DNS up for you. 8. The next screen deals with compatibility. I selected the second option here (Windows 2000 and 2003) as I wont have any other servers below Windows 2000 or 2003 on this particular domain. 9. Enter your Directory Services restore mode password on the next screen and keep this safe. 10. Continue the wizard and the installation will begin. 11. Once the Active Directory Installation wizard is complete, click Finish, then restart the server. 12. Once it has restarted, you should get a screen stating This Server is now a Domain Controller. Click Finish and you are done with the first DC! 13. Next, I go to the second server with a fresh install of Windows 2003 Server. 14. Set your IP addresses up. Now that you have a DNS server on the other DC, you can point this Servers Preferred DNS address to the IP of the Primary DC we just set up. In this case my Primary DC has an IP of 192.168.1.1 and the second DC we are about to set up gets an IP of 192.168.1.2. 15. Run dcpromo on the new server. 16. This time we are going to choose Additional Domain Controller for an existing domain in the Active Directory installation wizard. 17. The next screen asks you for your network credentials. Enter your new domain administrator username and password (Set up from the first DC). This should be Administrator and whatever password you specified during the install. Enter your domain name specified in step 3 above. For example I used shogan.local. 18. Enter the domain name again (shogan.local) in my case on the next screen. 19. Complete the rest of the installation wizard as we did in the steps for the first DC. This just involves specifying log folders etc I usually leave the rest of the options at their defaults. Once you are done, set up should ask you to restart the server. 20. Restart once complete and login with your domain admin account. You should now have a fully functional secondary DC. Any changes you make in Active directory on either server should now replicate across to the other DC. Here are the images related to each step of the installation process. Click any thumbnail to bring up the larger
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 2/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

version.

www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/

3/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

Feel free to post any questions or comments in the comments section below.

Post to Facebook Post to Twitter Add to LinkedIn Post to Google+ You may also like: Add to Google Bookmarks Live M igrating a VM on a Hyper-V Failover Cluster fails ... Post to Pinterest Figuring out what of ESX or ESXi VM ware Tools maps ... Postbuild to StumbleUpon Send via Shareaholic Mail Corsair XM S3 RAM compatible with HP M icroserver N40L | Sh... Print with PrintFriendly
Checking that a VM has the VM ware Balloon driver running ... DNS for tlds not working on SBS 2008 when using root hin... microserver | Shogan.tech
[ what's this ]

Categories: Microsoft, Windows Server Tags: active directory, domain controller, how to, install, primary, secondary Comments (10) Trackbacks (0) Leave a comment Trackback 1. dawit mesfin August 31st, 2011 at 07:16 | #1 Reply | Quote I found this article very interesting and helped me to identify and how to setup a primary and secondary AD in windows server 2003 , which i was looking for long time . th 2.
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 4/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

Adrian October 14th, 2011 at 09:53 | #2 Reply | Quote I managed to setup the secondary DC as you discribed, but what about the users profiles? how do those get replicated? and if the primary goes down, how does the secondary pick up? thanks again for the post! 3. Anil Kumar October 17th, 2011 at 16:45 | #3 Reply | Quote My DC crashed, i have Additional Domain Controller, how to promote Additional Domain Controller as Domain Controller. 4. Sean October 17th, 2011 at 19:56 | #4 Reply | Quote Anil, Unlucky but there is a way to promote a backup DC (or secondary DC) to take over the role(s) that the primary was handling. I will just need to caution you though, that using the Ntdsutil command incorrectly can result in partial or complete loss of your Active Directory! So just be careful, and do as much reading up on FSMO roles etc to ensure you are comfortable with what you are doing before continuing. Here is an article that seems to explain the process fairly nicely http://geekswithblogs.net/mhamilton/archive/2007/04/15/111674.aspx otherwise google around a bit more and find some other articles that demonstrate the process. Make sure the OS you are using also matches up with the steps you are following. Also it is important if you seize roles from the old DC that crashed, that if you get it working again, you do not connect it back up you shouldnt use this same DC again. Anyway have a read around and familiarise yourself first before you continue! Again, make sure you are comfortable with what you are doing before proceeding. 5. Sean October 17th, 2011 at 20:00 | #5 Reply | Quote Adrian, for the users profiles, what you probably want is to set up roaming profiles they can be stored in a network share on a file server on your domain, and you can back these up using a backup script or software if you like. Otherwise if you mean the actual Active Directory User accounts (or user objects), then these are all held in Active Directory anyway and will be replicated automatically. See my reply to Anil about how a secondary would take over again you basically need to transfer FSMO roles or in
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 5/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

worst cases seize FSMO roles using the command line depending on the situation. If you didnt have a secondary DC or backups of AD when your primary DC failed, then you would be in a very bad situation, so having a secondary DC is a very good idea! 6. amit March 18th, 2012 at 08:32 | #6 Reply | Quote Mate, would just like to thank you for this info . It helped alot , I was stuck trying to create an additional DC on my VM. thanks 7. sherwin September 4th, 2012 at 17:24 | #7 Reply | Quote can these be also synchronize to a ms exchange server? or can be also replicate all the data in ms exchange server. 8. sherwin September 4th, 2012 at 17:43 | #8 Reply | Quote any suggestion for my Domain Controller and ms exchange server i want to make a Back up server.. that synchronize all the data in two server.. in-case one server fails i have another server running. any suggestion please what to do? Thanks 9. Sean September 6th, 2012 at 19:26 | #9 Reply | Quote Hi Sherwin, It all depends on what OS you are using, as your question is quite vague! I would suggest that you read through MS documentation for best practises pertaining to the version of Windows Server OS you are running, with regard to Domain Controllers, and then do the same for the version of MS Exchange you are running too. You should also always split out the roles so dont have any domain controller services
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 6/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

running on an Exchange server for example! 10. wanna January 9th, 2013 at 12:25 | #10 Reply | Quote Hi. I have two Domain connected but i want to delete both. Please Help me. 1. No trackbacks yet. Name (required) E-Mail (will not be published) (required) Website

Subscribe to comments feed

Submit Comment

Enter this to prove you are not a dirty b0t!* Change iPhone root SSH password Developing my own small twitter tweet application

vMetrics
Overall metrics: 6 GHz Total CPU 16 GB Total RAM 1,478 GB Total Disk 2 Host(s) 6 RPs 25 VMs
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 7/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

57 vMotions VM power states: (6) (18) (0) Networking metrics: 6 Physical NICs 13 Virtual PGs Cluster metrics: HADRS-cluster01 DRS: DRS enabled (Full Auto) HA: Highly Available Current Deviation: 0.285 Target Deviation: 0.2 DRS Balance: Unbalanced Hardware: HP ProLiant MicroServer previous refresh 134 days, 12 hrs and 51 min.

Categories
Anti-Virus (1) apple (2) Blackberry (1) Builds (9) Cloud (4) Creative (2) Development (6) EUC (1) Exchange Server (8) Gaming (5) Guest posts (1) Home labs (3) How-tos (66) Linux / uBuntu (7) Microsoft (17) Networking (3) PowerCLI (30) Powershell (10) Programming / VB (2) Raspberry Pi (1)
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 8/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

Reviews (6) SBS 2008 (2) SQL Server (4) Storage (3) The diary of Shogan (21) Uncategorized (1) Virtualization (34) VMware (95) Windows Server (9) Windows Server 2008 (9) Youtube / videos (4)

Archives
August 2013 June 2013 May 2013 March 2013 February 2013 January 2013 December 2012 November 2012 October 2012 September 2012 August 2012 July 2012 June 2012 May 2012 April 2012 March 2012 February 2012 January 2012 December 2011 November 2011 October 2011 August 2011 July 2011 June 2011 May 2011 April 2011 March 2011 February 2011 January 2011 November 2010 October 2010
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 9/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

September 2010 August 2010 July 2010 June 2010 May 2010 April 2010 March 2010 February 2010 January 2010 December 2009 November 2009 October 2009 June 2009 May 2009 April 2009 March 2009 February 2009 January 2009 December 2008

Blogroll
Alan Renouf's Blog Coleslawesome Photography Darren Woollard (Virtually Prepared) Gregg Robertson (The Saffa Geek) Jonathan Medd's blog LucD Notes Mumblecode Nickapedia Paul Wood (Virtual Wood) The SLOG VMware Training / Scott Vessey VMWorld.net What's up with c0d3r? Yellow Bricks

Tag Cloud
2008 active directory automate backup blog change cloud configuration cpu create database datastore dell email esx esxi find function
Gaming ha home lab host

how to hp iphone lab M icroserver plugin powercli powershell ram restore script Server ssh

update utility vcenter vExpert virtualization vm

VMware vsphere vsphere 5 Windows

Meta
www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/ 10/11

8/27/13

Creating Primary and Secondary Domain Controllers (Windows 2003 Server) | Shogan.tech

Register Log in Top WordPress Copyright 2008-2013 Shogan.tech Valid XHTML 1.1 and CSS 3.

www.shogan.co.uk/windows-server/creating-primary-and-secondary-domain-controllers-windows-2003-server/

11/11