Pages

Wednesday, March 13, 2013

How to add a Second Domain Controller in Windows 2008 domain


Domain controller as server for hosting your company Active Directory (AD) is very important part of your network infrastructure. In case of its failure logging users on AD is impossible. Because of that one of the main things in planning your network infrastructure is make plan for implementing redundant domain controller in network infrastructure. In case you have it, failure of one of them does not mean that user will be unable to log on the system. Since failed domain controller is up again, backup controller will be in function of users authentication or other functions which it can have (DNS server etc.). On this way your network can stay functional, reliable and more resistible to failures.
In this article I will describe process of adding additional domain controller in your Windows network infrastructure.
First step is start dcpromo program to create new domain controller. Go to Start and type dcpromo in run field:
Click on OK. Opens first window in process of new DC creating:
When you want to add new DC Use advanced mode installation option should be unchecked because it use for Read Only Domain controller creating. In this case we want new DC with all functionalists as primary DC and read only mode is not option in that case. Click on Next.
In this window some information about operating system compatibility are displayed. Click on Next to continue.
Next window offers choosing option for add new or additional domain controller:
There are two options: to create new forest or to add DC in existing forest. If we have to add additional DC which is option described in this article Existing forest option should be checked. When this option is checked you have possibility to add new domain controller in existing domain or create new domain in existing forest. Here we want to add new DC in existing domain which will backup DC for our primary DC which exists in network. Because of that Add a domain controller to existing domain should be checked. When appropriate option are checked click on Next.
In next window domain name and network credentials for adding new DC should be set:
First, type the name of domain for which you want to add additional DC (testdomain.com in this example). After that credentials for adding DC should be chased. Main thing is that the credentials with which you adding DC should have administrative privileges. In this case we will use credentials of user from domain administrators group.
In network credentials type username and password of user which you use for promoting new DC. Then click OK.
In next step you should choose domain for which your server will be domain controller. By default, your domain will be set:
Chose default option and click Next. Opens window for site selecting.
Leave default option and click Next.
Next window is window for additional domain controller options. These are Global catalog, DNS server and Read Only Domain Controller. For additional DC you should chose DNS server and Global catalog options as it is shown on next picture:
Check DNS server and Global catalog options and click Next. Opens windows for choosing locations for database, SYSVOL and NTDS files. It is recommended to leave default options for these parameters.
Click Next. Opens window for setting restore mode password:
Restore mode account in Active Directory is different then domain administrator account. If you start domain controller in restore mode this account is used. So type password for restore mode account and click Next. Appears window with summary information about options you chose during installation additional domain controller:
When installation process is finished appears last window on which you simple should click on Finish button to finish installation process:
Now you will be prompted for restart computer and then you can log in to your new domain controller computer.
In this article I described how to set additional domain controller in our network. On this way you will make your network more reliable and stable.


Thanks
R.karthikeyan

No comments:

Post a Comment