The perfect solution for providing Active Directory to your servers in AWS and suitable for the hybrid setup of Active Directory and AWS AD Sync.
This is a quick deployment and ready-to-run image.
Simple and rapid installation. Easy to maintain.
The guide how to work with the Active Directory Domain Controller for Windows 2016
- Right-click the network icon in the bottom right of the Task Bar and select Open Network and Sharing Center from the menu.
- In the Network and Sharing Center, click <Change adapter settings>.
- On the Network Connections screen, right-click the network adapter for which you want to change the IP address and select
- Select Internet Protocol Version 4 (TCP/IPV4) and click <Properties>
- Fill in your private IPV4 ip address, subnet mask, default gateway.
- Fill in the preferred DNS server as (127.0.0.1) which is known as your local host IP.
- The alternate DNS server address will be the IP address of another domain controller you have in your forest. If you don’t have any setup yet, you can leave this blank and update later if you are going to setup other domain controllers.
After that you will need to reconnect to the VM
Active Directory Installation Steps
Open up Server Manager and click on the yellow notification and select promote this server to a domain controller
This will start the active directory configuration wizard. The next demo shows how to set up a new forest. But if you add this to an existing domain you can choose the relevant option. Select the option to add a new forest and type FQDN for the domain. Then click <next>.
On the next page you can select the domain and forest functional levels. Then type a password for DSRM. Then click <next>
Since we are creating the first DNS server in the new forest, it is not necessary to select additional parameters and click <next> to proceed
For the NETBIOS name keep the default and click <next>
Next page is to define the NTDS, SYSVOL and LOG file folders. You can keep default or define different paths for these. This demo shows how to keep the default paths. Once changes are done, click <next> to continue
The option to review configuration changes will be given on the next page.
If everything looks ok you can click <next> to proceed or otherwise can go back and change the settings.
On the next window, the prerequisite check will be done.
If it passes, it will enable the option to install. Click on the <install> button to begin the installation process.
Then the installation process of promoting this server to a Windows domain controller will be started.
After the AD installation, The server will restart automatically. Once it comes back online, log in to the server as domain administrator.
Once logged in, open powershell (as administrator) and type dsac.exe and press enter. It will open up the active directory administrative center. Here you can start managing the domain resources.
Also you can use Get-ADDomain | fl Name,DomainMode and Get-ADForest | fl Name,ForestMode from powershell to confirm the domain and forest functional levels
Active Directory Firewall Ports
In order to your domain controllers to communicate with other domain controllers in your Active Directory, you will need to make sure the following firewall ports are open between domain controllers in your cloud environment or on premises domain if you have a hybrid setup:
- RPC endpoint mapper: port 135 TCP, UDP
- NetBIOS name service: port 137 TCP, UDP
- NetBIOS datagram service: port 138 UDP
- NetBIOS session service: port 139 TCP
- SMB over IP (Microsoft-DS): port 445 TCP, UDP
- LDAP: port 389 TCP, UDP
- LDAP over SSL: port 636 TCP
- Global catalog LDAP: port 3268 TCP
- Global catalog LDAP over SSL: port 3269 TCP
- Kerberos: port 88 TCP, UDP
- DNS: port 53 TCP, UDP
