Setting up a new Active Directory Network on a Physical Server with Windows Server 2019 License

Here is a detailed article on setting up a new Active Directory (AD) network on a single physical server running Windows Server 2019 with a single license. The network will have one connection per LAN, one VLAN, and will be located in a neighboring building.

Setting Up a New Active Directory Network on a Single Physical Server Running Windows Server 2019

Introduction

In this article, we will guide you through the process of setting up a new Active Directory (AD) network on a single physical server running Windows Server 2019. This network will have one connection per Local Area Network (LAN), one Virtual Local Area Network (VLAN), and will be located in a neighboring building.

Prerequisites

Before you begin, ensure that you have the following:

1. A physical server with Windows Server 2019 installed and activated.
2. A network connection to the LAN and the Internet.
3. A basic understanding of networking concepts.

Step 1: Install Active Directory Domain Services

1. Open Server Manager by clicking the Start button and selecting Server Manager.
2. In the Server Manager dashboard, click on the 'Add Roles and Features' link.
3. In the 'Add Roles and Features Wizard', select the server on which you want to install Active Directory Domain Services and click 'Next'.
4. On the 'Server Roles' page, select 'Active Directory Domain Services' and click 'Next'.
5. On the 'Features' page, click 'Next'.
6. On the 'AD DS - Domain Controller Options' page, select 'Add a new domain in a new forest' and enter a domain name for your network (e.g., mydomain.com).
7. Click 'Next', review the requirements, and click 'Install'.
8. Once the installation is complete, click 'Close'.

Step 2: Configure Network Settings

1. Open Server Manager, click on 'Tools', and select 'Active Directory Domains and Trusts'.
2. In the 'Active Directory Domains and Trusts' console, right-click on the domain you created and select 'Properties'.
3. Go to the 'NetBIOS' tab and enter a NetBIOS domain name (e.g., MYDOMAIN).
4. Go to the 'DNS' tab and ensure that the DNS server is configured correctly.
5. Click 'OK' to save the changes.

Step 3: Create a VLAN

1. Open Server Manager, click on 'Tools', and select 'Network and Sharing Center'.
2. Click on 'Change adapter settings' on the left-hand side.
3. Right-click on the network adapter connected to the VLAN and select 'Properties'.
4. Select 'Internet Protocol Version 4 (TCP/IPv4)' and click 'Properties'.
5. Click 'Advanced' and go to the 'IPv4' tab.
6. Click 'Add' and enter the VLAN ID, subnet mask, and default gateway.
7. Click 'OK' to save the changes.

Step 4: Configure Firewall Settings

1. Open Server Manager, click on 'Tools', and select 'Windows Firewall with Advanced Security'.
2. In the 'Windows Firewall with Advanced Security' console, click on 'Inbound Rules' and then 'New Rule'.
3. Select 'Port' and click 'Next'.
4. Select 'TCP' and enter the port number for your network (e.g., 389 for LDAP).
5. Click 'Next', select 'Allow the connection', and click 'Next'.
6. Enter a name for the rule and click 'Finish'.
7. Repeat steps 3-6 for other necessary ports (e.g., 636 for LDAPS, 88 for Kerberos, etc.).

Conclusion

By following the steps outlined in this article, you have successfully set up a new Active Directory network on a single physical server running Windows Server 2019. This network now has one connection per LAN, one VLAN, and is located in a neighboring building.

References

1. Microsoft Docs: Install Active Directory Domain Services (https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/install-adds)
2. Microsoft Docs: Configure a VLAN (https://docs.microsoft.com/en-us/windows-server/networking/technologies/network-virtualization/virtual-lan)
3. Microsoft Docs: Configure the Windows Firewall to allow incoming connections (https://docs.microsoft.com/en-us/windows-server/security/firewall-protection/configure-a-port-in-windows-firewall-to-allow-incoming-connections)