🛠️ Step-by-Step: Setting Up an Active Directory Domain Services (AD DS) Server
⚠️ Educational & Authorized Use Only
This guide is intended for system administrators, students, and security professionals deploying Active Directory in authorized environments.
This guide is intended for system administrators, students, and security professionals deploying Active Directory in authorized environments.
✅ Prerequisites Before Installing AD DS
- ✔ Windows Server (2016 / 2019 / 2022 / 2025)
- ✔ Static IP address configured
- ✔ Updated system & security patches
- ✔ Correct system time & timezone
- ✔ Sufficient disk space (NTDS & SYSVOL)
💡 Domain Controllers should never use DHCP IPs.
⬇️ How to Download Windows Server ISO (2016 / 2019 / 2022 / 2025)
Before installing Active Directory Domain Services, you must obtain a legitimate Windows Server ISO image. Microsoft provides official evaluation ISOs suitable for learning, lab environments, and enterprise testing.
💡 Evaluation editions are fully functional for 180 days
and can later be converted to licensed versions without reinstallation.
🅾️ Option 1: Download via Microsoft Evaluation Center
-
Visit Microsoft Evaluation Center:
https://www.microsoft.com/evalcenter - Select Windows Server
- Choose version: 2016 / 2019 / 2022
- Select ISO download
- Fill in required evaluation details
💡 This option is useful if you want to explore all available Microsoft server evaluations.
🅾️ Option 2: Direct Official ISO Download Links
-
Windows Server 2016
https://www.microsoft.com/en-us/evalcenter/download-windows-server-2016 -
Windows Server 2019
https://www.microsoft.com/en-us/evalcenter/download-windows-server-2019 -
Windows Server 2022
https://www.microsoft.com/en-us/evalcenter/download-windows-server-2022 -
Windows Server 2025
https://www.microsoft.com/en-us/evalcenter/download-windows-server-2025
⚡ This option is faster if you already know the exact version you need.
📦 Recommended Editions for AD DS Labs
- ✔ Windows Server Standard (Desktop Experience)
- ✔ Windows Server Datacenter (Desktop Experience)
⚠️ Important:
Always choose Desktop Experience (GUI) when learning Active Directory Domain Services. Server Core is recommended only for advanced administrators.
Always choose Desktop Experience (GUI) when learning Active Directory Domain Services. Server Core is recommended only for advanced administrators.
🖥️ Installing Windows Server Using VMware (Complete Lab Setup)
VMware allows you to safely deploy Active Directory inside an isolated lab environment without affecting your physical system.
🔹 Step 1: Install VMware Workstation
- ✔ Download VMware Workstation Player or Pro
- ✔ Supported on Windows & Linux
- ✔ Install with default settings
💡 VMware Player is sufficient for AD labs.
VMware Pro adds snapshots & advanced networking.
🔹 Step 2: Create New Virtual Machine
- Open VMware Workstation
- Click Create a New Virtual Machine
- Select Typical (Recommended) → Next
- Choose I will install the operating system later
- Guest OS: Microsoft Windows
- Version: Windows Server 2016
- VM Name: WIN2016
- Disk Size: 60 GB
- Select Split disk into multiple files
- Click Finish
🔹 Step 2.1: Virtual Hardware Configuration (Recommended)
| Component | Recommended Value |
|---|---|
| CPU | 2 vCPUs (Minimum) |
| Memory | 4–8 GB RAM |
| Disk | 80–100 GB (Single disk) |
| Network | NAT (Default) or Host-Only |
⚠️ Avoid Bridged networking unless required.
NAT or Host-Only is safer for AD labs.
🔹 Step 3: Attach Windows Server ISO
- Select VM → Edit virtual machine settings
- Click CD/DVD (SATA)
- Enable Connect at power on
- Select Use ISO image file
- Browse & select Windows Server 2016 ISO
- Click OK
🔹 Step 4: Start Windows Installation
- Click Power on this virtual machine
- Windows Setup loads automatically
- Select Language, Time & Keyboard
- Click Install Now
🔹 Step 5: Select Windows Server Edition
- Select Windows Server 2016 Standard Evaluation (Desktop Experience)
- Desktop Experience provides GUI required for AD labs
- Click Next
🔹 Step 6: Select Installation Type
- Choose Custom: Install Windows only (advanced)
- Click Next
🔹 Step 7: Disk Selection
- Select Drive 0 Unallocated Space
- Click Next
🔹 Step 8: Configure Administrator Password
- System installs & reboots automatically
- Enter strong Administrator password
- Re-enter password → Finish
Strong password is mandatory for Domain Controller promotion.
🔹 Step 9: Login to Server
- Click inside VM window
- VM → Send Ctrl + Alt + Del
- Login as Administrator
💡 Before installing AD DS, ensure the server has a static IPv4 address
configured and DNS points to itself (127.0.0.1 or server IP).
🔹 Step 10: Server Manager Dashboard
- Server Manager opens automatically
- Click Add roles and features
🔹 Step 11: Add Roles & Features Wizard
- Review Before you begin
- Click Next
- Select Role-based or feature-based installation
- Click Next
- Select Local Server
- Click Next
🔹 Step 11.1: Take Snapshot Before AD DS Installation
- Power off the virtual machine
- Create a VMware snapshot
- Name it Pre-AD DS Install
- Ensures safe rollback if promotion fails
🚨 Never promote a Domain Controller without a snapshot.
🔹 Step 12: Install Active Directory Domain Services (AD DS)
- Check Active Directory Domain Services
- Click Add Features
- Click Next through Features
- Click Install
Always take a VM snapshot before promoting Domain Controller.
🔹 Step 13: Promote to Domain Controller
- Click Promote this server to a domain controller
- Select Add a new forest
- Root domain name: NotesTime.local
- Forest & Domain level: Windows Server 2016
- Ensure DNS Server & Global Catalog checked
- Enter DSRM password
- Leave DNS delegation unchecked
- NetBIOS name: NOTESTIME
- Keep default database & SYSVOL paths
- Run Prerequisites Check
- Click Install
🔹 Step 14: Automatic Reboot
- Server displays You're about to be signed out
- System reboots automatically
- Domain Controller promotion completes
🔹 Step 15: Login as Domain Administrator
- Press Ctrl + Alt + Del
- Login as NOTESTIME\Administrator
🔹 Step 16: Verify Active Directory Tools
- Open Start Menu
- Navigate to Windows Administrative Tools
- Confirm availability of:
- ✔ Active Directory Users and Computers
- ✔ Active Directory Domains and Trusts
- ✔ Active Directory Sites and Services
- ✔ DNS Manager
