How Do I Create an AD Domain?

Procedure

This section describes how to use Windows Server 2012 R2 to create a domain server.

1. When you configure an AD domain information during the DB instance creation, do not configure or disable Group Policy Object (GPO) for your domain controller server, or the DB instance creation will fail.
2. If GPO is required, create an ECS and set up a new domain controller server with GPO disabled. Then, establish trust between your domain controller server and the new domain controller server. For details, contact customer service.

1. Install an AD domain controller.
   1. Open Server Manager and choose Manage > Add Roles and Features.
   2. In the Add Roles and Features Wizard dialog box, click Next until the Select server roles page is displayed. Select Active Directory Domain Services and click Add Features in the displayed box.
   3. Click Next until the Confirm installation selections page is displayed. Click Install to start the role installation process.
   4. After the installation is complete, a yellow triangle icon is displayed. Click Promote this server to a domain controller. The Active Directory Domain Services Configuration Wizard window is displayed.

      

   5. On the Deployment Configuration page, select Add a new forest and set a domain name, such as newrds.com.
   6. Click Next. On the displayed page, enter the DSRM password (non-domain user).
   7. Click Next until the Prerequisites Check page displayed. Click Install. After the installation is complete, the server automatically reboots.
   8. Modify the DNS configuration of the network interface. Set the IP address of the active DNS server to the server's private IP address (such as 192.168.0.133).

2. Create and add a domain account.
   1. Open Active Directory Users and Computers, right-click on the Users and choose New > User. Enter the username and click Next.
   2. Enter the first name, last name, and a user logon name, such as luna@newrds.com.
   3. Enter the password and then confirm it. Deselect all check boxes (do not change the password at the first login).
   4. After the user is added, a figure similar to the following is displayed. You can add domain accounts to user groups for permission control.

      

   5. Add the domain account for logging in to RDS to the AD Admin group.

      

      

      

      

3. Add an RDS DB instance to the domain.

   On the instance creation page, click Configure to configure the AD domain and then complete the DB instance creation. Once the instance is created, the AD domain is ready for use.

   Table 1 AD domain parameters

   Parameter	Description
   Directory Address	Enter the IP address of an ECS that supports the AD domain. For example: 192.168.x.x. NOTE: Ensure that the ECS IP address can connect to the RDS DB instance.
   Domain Name	A fully qualified domain name, such as DBStest.com, must: Be the same as the ECS domain name. Be no more than 48 characters long. Include letters, digits, periods (.), and hyphens (-) only. Include a domain extension, which contains at least 2 characters and cannot contain digits, for example, .com.
   Directory Administrator	Enter the domain administrator username.
   Directory Administrator Password	Password of the directory administrator. Keep this password secure. The system cannot retrieve it.