Install-ADDSForest

Windows Server 2012 R2 and Windows 8.1

Install-ADDSForest

Installs a new Active Directory forest configuration.

구문

Parameter Set: ADDSForest
Install-ADDSForest -DomainName <String> [-CreateDnsDelegation] [-DatabasePath <String> ] [-DnsDelegationCredential <PSCredential> ] [-DomainMode <DomainMode> ] [-DomainNetbiosName <String> ] [-Force] [-ForestMode <ForestMode> ] [-InstallDns] [-LogPath <String> ] [-NoDnsOnNetwork] [-NoRebootOnCompletion] [-SafeModeAdministratorPassword <SecureString> ] [-SkipAutoConfigureDns] [-SkipPreChecks] [-SysvolPath <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>]




자세한 설명

The Install-ADDSForest cmdlet installs a new Active Directory forest configuration.

매개 변수

-CreateDnsDelegation

Indicates whether to create a DNS delegation that references the new DNS server that you are installing along with the domain controller. Valid for Active Directory-integrated DNS only. The default is computed automatically based on the environment.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-DatabasePath<String>

Specifies the fully qualified, non-Universal Naming Convention (UNC) path to a directory on a fixed disk of the local computer that contains the domain database, for example, C:\Databases\NTDS. The default is %SYSTEMROOT%\NTDS.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-DnsDelegationCredential<PSCredential>

Specifies the user name and password (account credentials) for creating DNS delegation. This parameter is skipped if the value for the -CreateDnsDelegation parameter is either specified or computed to be $false.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-DomainMode<DomainMode>

Specifies the domain functional level of the first domain in the creation of a new forest. Supported values for this parameter can be either a valid integer or a corresponding enumerated string value. For example, to set the domain mode level to Windows Server 2008 R2, you can specify either a value of 4 or Win2008R2.

The following are the supported values:

     -- Windows Server 2003: 2 or Win2003
     -- Windows Server 2008: 3 or Win2008
     -- Windows Server 2008 R2: 4 or Win2008R2
     -- Windows Server 2012: 5 or Win2012
     -- Windows Server 2012 R2: 6 or Win2012R2

The domain functional level cannot be lower than the forest functional level, but it can be higher. The default is automatically computed and set.


별칭

없음

필수 여부

false

위치

named

기본값

Windows2008R2

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-DomainName<String>

Specifies the fully qualified domain name (FQDN) for the root (first) domain in the forest.


별칭

없음

필수 여부

true

위치

named

기본값

<mandatory>

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-DomainNetbiosName<String>

Specifies the NetBIOS name for the root domain in the new forest. For NetBIOS names to be valid for use with this parameter they must be single label names of 15 characters or less.

If this parameter is set with a valid NetBIOS name value, then forest installation continues with the name specified. If this parameter is not set, then the default is automatically computed from the value of the -DomainName parameter.

For example, if this parameter is not specified and a single-label prefix domain name of 15 characters or less is specified within the value of the -DomainName parameter, then promotion continues with an automatically generated NetBIOS domain name. For example, the prefix label "corp" within a full domain name value of "corp.contoso.com" would be a successful name choice.

Note that if the name value given for this parameter (or if it is omitted, the value of the single-label prefix domain name within the -DomainName parameter) is a name of 16 characters or more, then the forest installation fails. For example, if a value of "CORPORATEHEADQTRS" were specified for this parameter (or if this parameter is omitted and the value of -DomainName were set to be "corporateheadqtrs.contoso.com") then the forest installation will fail.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-Force

When this parameter is specified any warnings that might normally appear during the installation of the new forest will be suppressed to allow the cmdlet to complete its operation. This parameter can be useful to include when scripting installation of new forests.


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-ForestMode<ForestMode>

Specifies the forest functional level for the new forest. Supported values for this parameter can be either a valid integer or a corresponding enumerated string value. For example, to set the forest mode level to Windows Server 2008 R2, you can specify either a value of 4 or Win2008R2. The following are the supported values:

     -- Windows Server 2003: 2 or Win2003
     -- Windows Server 2008: 3 or Win2008
     -- Windows Server 2008 R2: 4 or Win2008R2
     -- Windows Server 2012: 5 or Win2012
     -- Windows Server 2012 R2: 6 or Win2012R2
The default forest functional level in Windows Server is typically the same as the version you are running. However, the default forest functional level in Windows Server 2008 R2 when you create a new forest is Windows Server 2003 (2).


별칭

없음

필수 여부

false

위치

named

기본값

Windows2008R2

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-InstallDns

Specifies whether the DNS Server service should be installed and configured for the new forest. For forest installation, the default is $true (a new DNS server will be installed and configured).


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-LogPath<String>

Specifies the fully qualified, non-UNC path to a directory on a fixed disk of the local computer where the log file for this operation will be written. For example, C:\Logs. The default log file path if no other path is specified with this parameter is %SYSTEMROOT%\NTDS.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-NoDnsOnNetwork

Specifies that DNS service is not available on the network. This parameter is used only when the IP setting of the network adapter for this computer is not configured with the name of a DNS server for name resolution. It indicates that a DNS server will be installed on this computer for name resolution. Otherwise, the IP settings of the network adapter must first be configured with the address of a DNS server.

Omitting this parameter (the default) indicates that the TCP/IP client settings of the network adapter on this server computer will be used to contact a DNS server. Therefore, if you are not specifying this parameter, ensure that TCP/IP client settings are first configured with a preferred DNS server address.


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-NoRebootOnCompletion

Specifies that the computer is not to be rebooted upon completion of this command. Omitting this parameter (the default) indicates the computer will be rebooted upon completion of the command, regardless of success or failure. As a general rule, Microsoft support recommends that you not use this parameter except for testing or troubleshooting purposes because once configuration has completed the server will not function correctly as either a member server or a DC until it is rebooted.


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-SafeModeAdministratorPassword<SecureString>

Supplies the password for the administrator account when the computer is started in Safe Mode or a variant of Safe Mode, such as Directory Services Restore Mode. You must supply a password that meets the password complexity rules of the domain and the password cannot be blank. If specified with a value, the value must be a secure string.

If this parameter is not specified, the cmdlet prompts you to enter and confirm a masked password. This is the preferred usage when running the cmdlet interactively. If additionally there are no other arguments specified with the cmdlet, you will be prompted to enter a masked password for this parameter but no confirmation of the password entered will be made (which is not recommended as it could allow a mistyped password to be configured). Another available advanced option is to use the ConvertTo-SecureString cmdlet and specify the password string inline as unmasked console input, which is also not a recommended security best practice in production deployments.


별칭

없음

필수 여부

false

위치

named

기본값

<mandatory>

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-SkipAutoConfigureDns

Skips automatic configuration of DNS client settings, forwarders, and root hints. This parameter is in effect only if the DNS Server service is already installed.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-SkipPreChecks

Specifies that only a base set of validations will be performed. This behavior is equivalent to the validations that were performed when using Dcpromo.exe in earlier versions of Windows Server to add a new forest. When this switch parameter is set, it specifies that additional preliminary checks should be bypassed. For more information on the scope of these additional preliminary checks that the ADDSDeployment module performs by default when using Windows Server 2012, refer to the table in the section “Prerequisite Checking” in the Understand and Troubleshoot AD DS Simplified Administration in Windows Server 2012 guide (http://go.microsoft.com/fwlink/?LinkID=237244).


별칭

없음

필수 여부

false

위치

named

기본값

없음

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-SysvolPath<String>

Specifies the fully qualified, non-UNC path to a directory on a fixed disk of the local computer where the Sysvol file will be written. For example, C:\Logs\SYSVOL. The default path if no other path is specified with this parameter is %SYSTEMROOT%\SYSVOL.


별칭

없음

필수 여부

false

위치

named

기본값

NULL

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-Confirm

cmdlet을 실행하기 전에 확인 메시지가 표시됩니다.


필수 여부

false

위치

named

기본값

false

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

-WhatIf

cmdlet이 실행될 경우 결과 동작을 표시합니다. cmdlet이 실행되지 않습니다.


필수 여부

false

위치

named

기본값

false

파이프라인 입력 적용 여부

false

와일드카드 문자 허용 여부

false

<CommonParameters>

이 cmdlet은 일반 매개 변수 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer 및 -OutVariable을 지원합니다. 자세한 내용은 다음을 참조하세요. about_CommonParameters(http://go.microsoft.com/fwlink/p/?LinkID=113216).

입력

입력 유형은 cmdlet에 파이프할 수 있는 개체의 유형입니다.

출력

출력 유형은 cmdlet이 내보내는 개체의 유형입니다.

참고

  • By default, the DNS Server service is installed when you create a new forest. It is strongly recommended that you install and use the Windows DNS Server to support the needs for DNS name resolution in your Active Directory deployment. You do not need to specifically include the -InstallDNS to install it.

    If you are using Active Directory-integrated DNS, the IP address for the preferred DNS server for the first domain controller in the forest is automatically set to the loopback address of 127.0.0.1. This helps assure that the IP address of the first domain controller will be resolved in DNS even if the address is changed.

예제

EXAMPLE 1

Description

-----------

Installs a new forest named corp.contoso.com, causes the user to be prompted to provide and confirm the Directory Services Restore Mode (DSRM) password and specifies a DNS server should also be installed during the forest installation process.


PS C:\> Install-ADDSForest -DomainName "corp.contoso.com" -InstallDNS

EXAMPLE 2

Description

-----------

Installs a new forest named corp.contoso.com, creates a DNS delegation in the contoso.com domain, sets domain functional level to Windows Server 2008 R2 and sets forest functional level to Windows Server 2008, installs the Active Directory database and SYSVOL on the D:\ drive, installs the log files on the E:\ drive and has the server automatically restart after AD DS installation is complete and prompts the user to provide and confirm the Directory Services Restore Mode (DSRM) password.


PS C:\> Install-ADDSForest -DomainName corp.contoso.com -CreateDNSDelegation -DomainMode Win2008R2 -ForestMode Win2008R2 -DatabasePath "d:\NTDS" -SysvolPath "d:\SYSVOL" -LogPath "e:\Logs"

관련 항목

커뮤니티 추가 항목

추가
표시: