Microsoft Servers, Microsoft Windows Server 2008

How To Create Additional Domain Controller (ADC) In Windows Server 2008

Go to the command prompt or Run, type dcpromo and hit Enter. Whether you are making a Domain, Child Domain, ADC or removing any of them, the dcpromo command is used.


This will take you to the first step of the wizard from where you can create an Additional Domain Controller. Make sure that the advance mode installation option is unchecked and click Next. In case you are wondering what the advance mode installation is used for, it is used for making a RODC (Read Only Domain Controller). An RODC is used by organizations to deploy a DC (Domain Controller) in scenarios where physical security issues occur, such as a subsidiary branch office. It can also be used where local storage of domain passwords is unsafe.


In the next step you will see the same page regarding operating system compatibility which appears when making a DC. Simply click Next to proceed.


When choosing a deployment configuration, select Existing Forest, then select Add a Domain Controller to an existing forest and hit Next.


After that, you will be asked for network credentials which in other words means that you need to enter the name of the Domain that you wish to connect this server to as an ADC. After adding the Domain name, click on the Set button.


This will prompt you to enter credentials to connect to the Domain. Note: the credentials must have administrative privileges. In this case I am using an account that is apart of the Domain Controllers group. After verifying the information, the wizard will allow you to proceed further. Click Next to continue.


In the next section you will be asked to select a Domain Controller. The Domain Controller you entered in the previous step will be selected by default, simply move forward to the next step.


When selecting a site name, leave the default site name as it is and proceed.


Make sure that the DNS Server and Global Catalog check boxes are checked and hit Next. Note: do not check RODC.


Just like when creating a Domain, you will get the choice to set a location for the database, SYSVOL and NTDS files. You may change the destination or let them remain in the default location and proceed to the next step.


Moving forward, you will be asked to save a restore mode password (which is separate from the Domain Administrator’s account). As mentioned in the previous post, this password is configured to be used when the Domain Controller is started in Directory Services Restore Mode. Choose a password and click Next.


Finally, you will be presented with a summary of the selected options which you can review before moving forward


The Active Directory Domain Installation Wizard will configure services and take you to the next step, where you simply need to click Finish to complete the process.


You will be prompted to restart the system after which your configurations will take effect. Finally you can login with a Domain account and manage your Additional Domain Controller.