Sursa: Microsoft

Build and Deploy the Second Domain

Controller
37 out of 43 rated this helpful - Rate this topic

Build and Deploy the Second Domain Controller

Next, the second domain controller, AD02, must be built and joined to the domain. This domain
controller must also be configured to provide global catalog services. The second domain controller
provides redundancy for user account data and helps distribute the load for authentication and
global catalog queries.
Tasks
1.
2.
3.
4.
5.
6.

Prepare the Second Domain Controller

Join the Fabrikam Domain
Install the DNS Service on the Second Domain Controller
Promote the Second Domain Controller
Verification Step
Configure the Second Domain Controller as a Global Catalog Server

Prepare the Second Domain Controller

Perform a default install of Microsoft Windows Server 2003 R2 on AD02. This requires you to first
install Windows Server 2003 with SP1, and then install Windows Server 2003 R2.
Procedure DWCM.5: To install Windows Server 2003 R2 on AD02
1. Perform a default installation of Windows Server 2003, Standard Edition (with Service Pack
1 integrated), by using the CD boot method. Install the Support Tools from the Windows
Server 2003 CD. Use appropriate naming conventions for your environment.
2. After Setup for Windows Server 2003 with SP1 is complete, log on to the computer as an
administrator. Insert Disc 2 into your CD-ROM drive. Setup for Disc 2 should start
automatically. If it does not start automatically, browse to Disk 2 (or the shared folder that
contains the Setup files) and, in the \Cmpnents\R2 folder, click Setup2.exe. Follow the
instructions on your screen to upgrade to R2.
Prepare AD02 by enabling Remote Desktop, installing Microsoft .NET Framework 2.0, installing
the Windows Server 2003 Support Tools, and installing the latest updates from Microsoft.
Procedure DWCM.6: To prepare AD02
1. Enable Remote Desktop. Click Start, point to Control Panel, click System, and then, on
the Remote tab, select Enable Remote Desktop on this Computer.
2. Install the Microsoft .NET Framework 2.0.
3. Install Support Tools from the Support Tools directory on the Windows Server 2003 CD.
4. Apply any released updates to Windows Server 2003 by using Microsoft Update.
Join the Fabrikam Domain
After you have finished building and preparing your domain controller, AD02, add the server to the
Fabrikam domain and log on as a domain administrator.

Procedure DWCM.7: To add AD02 to the Fabrikam domain and log on as the domain administrator
Note
Joining a new domain will require you to restart the server.
1. Configure the local network interface to use the IP Addresses of AD01 and AD02 as
Preferred and Alternative DNS server.
2. Join the server to the fabrikam domain.
3. Log on to the domain as Administrator@Fabrikam.com.
Install the DNS Service on the Second Domain Controller
Install the DNS service on AD02 using the Add/Remove Windows Components utility.
Note
Unless you installed DNS components when installing the server, you will be prompted for the
location of the files. Insert your installation CD or enter a location on your local disk or your
network.
Procedure DWCM.8: To install the DNS service on AD02
1.
2.
3.
4.
5.

On AD02, click Start, point to Control Panel, and then click Add or Remove Programs.
Click Add/Remove Windows Components.
Click Networking Services, and then click Details.
Select the Domain Name System (DNS) check box, click OK, and then click Next.
Complete the installation.

Promote the Second Domain Controller

Configure AD02 to use AD01 as its primary DNS server. Then, promote AD02 to be an additional
domain controller in the existing Fabrikam.com domain using DCPromo.
Procedure DWCM.9: To install DNS, then promote the second domain controller
1. To start the Active Directory Installation Wizard, click Start, click Run, type DCPROMO,
and then click OK.
2. On the Welcome page, click Next.
3. On the Operating System Compatibility page, click Next.
4. On the Domain Controller Type page, select Additional domain controller for an
existing domain, and then click Next.
5. On the Network Credentials page, enter the administrator username and password, type
fabrikam for the domain name, and then click Next.
6. On the Additional Domain Controller page, enter the full DNS name of the domain
(fabrikam.com), and then click Next.
7. Click Next to accept the default database and log locations.
Note
If your domain controllers have more than one hard disk drive, the recommended
configuration is to keep the database and the log file on different hard disk drives.
8. Click Next to accept the shared system volume location.
9. On the Directory Services Restore Mode Administrator Password page, enter a strong
password, and then click Next.
10.
Click Next to accept the settings shown in the summary. This starts the creation of
the Windows Server 2003 domain controller.
11.
When complete, click Finish, and then click Restart Now to restart the server.
12.
After the server restarts, log on using an account that is a member of the Domain
Administrators group.

Verification Step
To validate that your domain controller is working as specified, run DCDiag from a command
prompt. DCDiag was installed as part of the Windows Server 2003 Support Tools. The most
important test you will see is the first one, which is connectivity. This test will tell you if your
domain controller is properly registered in DNS. If your tests are successful, you have a healthy
domain controller.
Configure the Second Domain Controller as a Global Catalog Server
The first domain controller in the forest (AD01) is automatically configured as a global catalog
server. For additional resilience, configure AD02 to be a global catalog server too.
Note
If you deploy this solution into a Child Domain, you must ensure that all Domain Controllers in the
Child Domain are made Global Catalog Servers.
Procedure DWCM.10: To configure AD02 as a global catalog server
1. Open the Active Directory Sites and Services Microsoft Management Console (MMC)
snap-in.
2. Expand Sites.
3. Expand the Default-First-Site-Name site.
4. Expand the Servers folder.
5. Expand the AD02 server object.
6. Right-click the NTDS Settings object, and then click Properties.
7. Select the Global Catalog check box, and then click OK.
8. Close the Active Directory Sites and Services dialog box.