Active Directory Basics
Step 3 — Promote the Server to a Domain Controller
In this step, you will promote the server to a domain controller and create your first Active Directory domain.
This is the point where Active Directory actually becomes active.
1. Start the Promotion Wizard
- Open Server Manager
- Select the notification flag at the top of the window
- Click Promote this server to a domain controller
2. Deployment Configuration
You are creating a brand-new Active Directory environment.
- Select Add a new forest
- Root domain name: Choose a private internal domain
lab.localThis lab uses a private internal domain. In real environments, domain naming requires more planning — we’ll keep it simple here.
3. Domain Controller Options
- Forest functional level: Leave default
- Domain functional level: Leave default
- DNS server: Checked (default)
- Global Catalog (GC): Checked (default)
Directory Services Restore Mode (DSRM)
Set a DSRM password and save it. This password is required for recovery scenarios when Active Directory cannot start normally.
You will almost never use this password day-to-day, but it is critical for disaster recovery.
4. DNS Options
- You may see a warning about DNS delegation
- This is expected in a lab environment
- Select Next
5. Additional Options
- NetBIOS domain name: Accept the default
6. Paths
- Leave database, log files, and SYSVOL paths at their defaults
7. Review Options
- Review the configuration summary
- Select Next
8. Prerequisites Check
- Allow all prerequisite checks to complete
- Warnings are acceptable in a lab
- Select Install
9. Reboot and Log In
The server will automatically reboot after promotion completes.
After reboot, log in using your domain administrator account (for example: LAB\Administrator).
Checkpoint
- Server successfully rebooted after promotion
- You can log in using a domain account
- Server Manager shows this server as a Domain Controller
- DNS and Active Directory tools are available
If all of these are true, your domain is live and ready for clients.