Setting up Active Directory
Install Active Directory Domain Services (AD DS) and promote Windows Server to a domain controller. Then perform core user-management tasks in ADUC.
Setting up Active Directory starts with installing the AD DS server role on Windows Server and then promoting the server to a domain controller.
Steps to Setting up Active Directory
1) Add the AD DS Role
In Server Manager, click Add roles and features to launch the wizard.
2) Installation Type
Select Role-based or feature-based installation.
3) Server Selection
Select the local server from the server pool and click Next.
4) Choose the Role
Select Active Directory Domain Services (AD DS).
5) Add required features
Accept the additional features needed for AD DS.
6) Continue
Click Add Features, then Next.
7) Install
AD DS Installation
1) AD DS tab → Install
2) Confirmation → Install
3) Installation Progress
4) Promote to Domain Controller
Click Promote this server to a domain controller.
5) Deployment Configuration
Select Add a new forest for this example.
6) Domain Controller Options
Verify capabilities and set a Directory Services Restore Mode (DSRM) password.
7) Additional Options
Specify the NetBIOS domain name.
8) Paths
Paths for AD DS database, logs, and SYSVOL (defaults are fine for lab setups).
9) Review Options
10) Prerequisites Check
Run the check and then click Install.
11) Install & Reboot
The server installs AD DS and restarts automatically.
12) Domain Logon Screen
13) ADUC Available in Tools
14) Active Directory Console
Creating a New AD User Account
1) New User Wizard
In Active Directory Users and Computers, right-click the Users container (or target OU) → New → User.
2) Enter Name Attributes
3) Next
4) Set Password
5) Finish
6) User Visible in OU
Resetting a User Account Password
A common IT support task.
1) Locate the User
2) Right-click → Reset Password…
3) Specify New Password
4) Search Tools
Use Find (toolbar icon) to quickly locate accounts in larger environments.
5) Example Search
Unlocking a User Account
Accounts may lock after too many failed logons. For repeated locks, investigate mapped drives, services, or cached credentials.
Unlock Steps
Right-click the user → Properties → Account tab → check Unlock account.
This walkthrough installed AD DS, promoted the server to a domain controller, and covered essential ADUC tasks: creating a user, resetting a password, and unlocking an account.