Build and Deploy the Second Domain Controller

  • Article
Cc526434.chm_head_left(en-us,TechNet.10).gif Cc526434.chm_head_middle(en-us,TechNet.10).gif Cc526434.chm_head_right(en-us,TechNet.10).gif

Build and Deploy the Second Domain Controller

Next, the second domain controller, AD02, must be built and joined to the domain. This domain controller must also be configured to provide global catalog services. The second domain controller provides redundancy for user account data and helps distribute the load for authentication and global catalog queries.

Tasks

  1. Prepare the Second Domain Controller
  2. Join the Fabrikam Domain
  3. Install the DNS Service on the Second Domain Controller
  4. Promote the Second Domain Controller
  5. Verification Step
  6. Configure the Second Domain Controller as a Global Catalog Server

Prepare the Second Domain Controller

Perform a default install of Microsoft Windows Server 2003 R2 on AD02. This requires you to first install Windows Server 2003 with SP1, and then install Windows Server 2003 R2.

Procedure DWCM.5: To install Windows Server 2003 R2 on AD02

  1. Perform a default installation of Windows Server 2003, Standard Edition (with Service Pack 1 integrated), by using the CD boot method. Install the Support Tools from the Windows Server 2003 CD. Use appropriate naming conventions for your environment.
  2. After Setup for Windows Server 2003 with SP1 is complete, log on to the computer as an administrator. Insert Disc 2 into your CD-ROM drive. Setup for Disc 2 should start automatically. If it does not start automatically, browse to Disk 2 (or the shared folder that contains the Setup files) and, in the \Cmpnents\R2 folder, click Setup2.exe. Follow the instructions on your screen to upgrade to R2.

Prepare AD02 by enabling Remote Desktop, installing Microsoft .NET Framework 2.0, installing the Windows Server 2003 Support Tools, and installing the latest updates from Microsoft.

Procedure DWCM.6: To prepare AD02

  1. Enable Remote Desktop. Click Start, point to Control Panel, click System, and then, on the Remote tab, select Enable Remote Desktop on this Computer.
  2. Install the Microsoft .NET Framework 2.0.
  3. Install Support Tools from the Support Tools directory on the Windows Server 2003 CD.
  4. Apply any released updates to Windows Server 2003 by using Microsoft Update.

Join the Fabrikam Domain

After you have finished building and preparing your domain controller, AD02, add the server to the Fabrikam domain and log on as a domain administrator.

Procedure DWCM.7: To add AD02 to the Fabrikam domain and log on as the domain administrator

Note

Joining a new domain will require you to restart the server.

  1. Configure the local network interface to use the IP Addresses of AD01 and AD02 as Preferred and Alternative DNS server.
  2. Join the server to the fabrikam domain.
  3. Log on to the domain as Administrator@Fabrikam.com.

Install the DNS Service on the Second Domain Controller

Install the DNS service on AD02 using the Add/Remove Windows Components utility.

Note

Unless you installed DNS components when installing the server, you will be prompted for the location of the files. Insert your installation CD or enter a location on your local disk or your network.

Procedure DWCM.8: To install the DNS service on AD02

  1. On AD02, click Start, point to Control Panel, and then click Add or Remove Programs.
  2. Click Add/Remove Windows Components.
  3. Click Networking Services, and then click Details.
  4. Select the Domain Name System (DNS) check box, click OK, and then click Next.
  5. Complete the installation.

Promote the Second Domain Controller

Configure AD02 to use AD01 as its primary DNS server. Then, promote AD02 to be an additional domain controller in the existing Fabrikam.com domain using DCPromo.

Procedure DWCM.9: To install DNS, then promote the second domain controller

  1. To start the Active Directory Installation Wizard, click Start, click Run, type DCPROMO, and then click OK.

  2. On the Welcome page, click Next.

  3. On the Operating System Compatibility page, click Next.

  4. On the Domain Controller Type page, select Additional domain controller for an existing domain, and then click Next.

  5. On the Network Credentials page, enter the administrator username and password, type fabrikam for the domain name, and then click Next.

  6. On the Additional Domain Controller page, enter the full DNS name of the domain (fabrikam.com), and then click Next.

  7. Click Next to accept the default database and log locations.

    Note

    If your domain controllers have more than one hard disk drive, the recommended configuration is to keep the database and the log file on different hard disk drives.

  8. Click Next to accept the shared system volume location.

  9. On the Directory Services Restore Mode Administrator Password page, enter a strong password, and then click Next.

  10. Click Next to accept the settings shown in the summary. This starts the creation of the Windows Server 2003 domain controller.

  11. When complete, click Finish, and then click Restart Now to restart the server.

  12. After the server restarts, log on using an account that is a member of the Domain Administrators group.

Verification Step

To validate that your domain controller is working as specified, run DCDiag from a command prompt. DCDiag was installed as part of the Windows Server 2003 Support Tools. The most important test you will see is the first one, which is connectivity. This test will tell you if your domain controller is properly registered in DNS. If your tests are successful, you have a healthy domain controller.

Configure the Second Domain Controller as a Global Catalog Server

The first domain controller in the forest (AD01) is automatically configured as a global catalog server. For additional resilience, configure AD02 to be a global catalog server too.

Note

If you deploy this solution into a Child Domain, you must ensure that all Domain Controllers in the Child Domain are made Global Catalog Servers.

Procedure DWCM.10: To configure AD02 as a global catalog server

  1. Open the Active Directory Sites and Services Microsoft Management Console (MMC) snap-in.
  2. Expand Sites.
  3. Expand the Default-First-Site-Name site.
  4. Expand the Servers folder.
  5. Expand the AD02 server object.
  6. Right-click the NTDS Settings object, and then click Properties.
  7. Select the Global Catalog check box, and then click OK.
  8. Close the Active Directory Sites and Services dialog box.