Adding an additional Domain Controller to an existing domain in Windows Server 2012 R2

This video demonstrates how to add a second domain controller to a new Active Directory domain. It is important to ensure that DNS is set up properly for everything to work correctly, so DNS is stressed as well.

[@shilezi]

for me, the difference in all other vids that i watched and this is that you just didnt steamroll through, you touched on all options and what they're for. thanks.

[@dhavebarsalote810]

because he's an expert.

[@PeterWhoIntrestedIn]

This is great video. I did everything as you did, and now I have a working two computer hosted AD ! This helped lot at the beginning as you told what I should check before. Thanks Patrick!

[@enterbreeshikari]

Just saved me so much trouble for my Final project, thank you!

[@gomzy000]

Best video. Thank you for the explanation along with each step. This video help me to add 2nd DC into our production domain. Cheers!!

[@al.hayward]

Thank you sir. Even in Windows 2019 this tutorial is still working.

[@Physics072]

Lol you posted this in 2020 though. Might want to check your calendar from time to time :)

[@al.hayward]

@@Physics072 what are you saying? i am talking about Windows 2019 version not year. Might want to read my comment again. :)

[@Physics072]

@@al.hayward Oh you were talking about Windows Server 2019 as there is no windows 2019. Thought it was just the broken English translation and you meant either windows 2019 or windows 10 in 2020 but not windows 2019 as it does not exist. There is a Server 2019. "What we have here is a failure to communicate" :)

[@ryomai8063]

@@Physics072 lol I laughed at that one. Have a great day

[@randyg.7940]

Awesome video. Love your speech technique

[@PatrickHornung]

Thank you! 😃

[@arcticjoe1142]

Hi Patrick- very good video. Thank you. One thing you did not mention was getting the two servers to sync time together. Is that covered in one of your later videos?

[@PatrickHornung]

The first AD server is always automatically configured as the PDC emulator FSMO role holder. The PDC Emulator will be the time source for the entire domain. The other DCs always sync time from the PDC emulator during the bootup process, and any non-DC computers (clients or servers) will sync time from the DC that they authenticate with when they boot up. If you ever want to set up an external time source (such as NTP to pool.ntp.org), you only need to do so on the PDC Emulator. There is more on the PDC Emulator and other FSMO roles at this video: kzbin.info/www/bejne/aHPRqHuojbKleq8

[@lileanalopez1137]

thank you I was stuck on the credentials part!

[@xAjido]

Great video, thank you very much.

[@iceicebaby8469]

This video still helps me a lot. Thanks!

[@maemae4811]

Thanks dude, you're a life saver!

[@gregmusto3336]

Ive had to do this today for the first time. This is a great remind and revise! Thanks

[@PatrickHornung]

Glad it was helpful!

[@islamicsection1558]

this video reslove my problem this channel good for me

[@mohdnsiddiqui]

Hi, I need to upgrade my Secondary DC from Win Server 2008 R2 to Win Server 2019. Do you have any video on that. What would be the best way to do it. Do I add a ned secondary DC and shutdown the old one. Or Do I upgrade the current one? Please advise.

[@nozynoz]

Good question in a same scenario did you mange to find the answer is it possible ??. Cheers in advance.

[@PatrickHornung]

I would recommend adding your new 2019 DC, then demoting the old one. It is much cleaner to use the promote/demote process to ensure there are no remnants of the old domain controller in your AD structure.

[@sumondas6483]

Thank you. It was really helpful.

[@rodolfocesarsobraldealmeid571]

Will it still be using the same DNS as the main controller? If it fails, what happens wih the secondary's connection?

[@elatesoft5581]

I am getting error "Active directory domain controller for domain could not be contacted. Ensure that you supplied correct DNS domain name" on deployment configuration wizard when selecting domain name and provide admin user credentials. What is the cause of this error?.

[@PatrickHornung]

Your DNS settings are wrong on the new DC, or you don't have network connectivity between the original DC and the new DC.

[@expat2010]

Check that the time is within 5 minutes of each other.

[@MoNeenja]

Having the same issue. I've verified my DNS records on DC1 and made sure the DNS address on DC2 was the IP of DC1 but it's still saying the same thing

[@cskyo]

Great video tutorial. Much appreciated.

[@PatrickHornung]

Glad you enjoyed it!

[@ronaldmigahil]

Could we install second domain controller without the primary domain controller (the domain controller server has a hardware error and it doesnt boot)?

[@poladrianbinas2156]

thank you sir for your help

[@MateussCelioBR]

Thanks for the explanations.

[@PatrickHornung]

Glad it was helpful!

[@adenigba]

Thanks for the time and effort

[@gregtucker7071]

Watched it twice. Thanks Patrick!

[@Escarade]

Thnx! do you know how to get internet connection from server one?

[@johncarlsantos]

Anyone can help me with this? When my 1st domain controller goes down(cannot power up because of hardware problem), new users cannot join the domain using my second domain controller. Did I miss a configuration? Or two domain controllers should have access to each others?

[@shafiqirfaqi4179]

Thank you for this great video!

[@giga9449]

Thx a lot! That fixed it for me! 2:20

[@CasualtyGaming]

what is the use cause of this? why and when do we need to add 1 more domain controller?

[@umersiddique4171]

Great work well done Patrick

[@FirehawkVFX]

If I'm using windows server 2008, and I want to start adding new domain controllers with the most recent version, is it safe to do that? can I later kill the original and replace it with the updated version as well? or is this not best practice?

[@krasimirrangelov1767]

If you have a Domain Network which was build in Windows Server 2008 or Windows Server 2008 R2 and now you want to migrate to newer version like Windows Server 2012, 2012 R2, 2016 you can add the new servers as Domain controllers but you need to keep in mind that if you raise the forest functional level or the domain functional level. For example you have Windows Server 2012 R2 and your domain network is build on functional level for 2008 R2 you still can add the 2012 R2 DC and you can even change the functional level from the 2012 R2 but if you raise the domain or forest functional level up to 2012 R2 you'll be unable to use 2008 nor 2008 R2.

[@its3BStudio]

Thank you for sharing your expertise. It help me a lot.

[@djoverspingaming2733]

Can you answer this? I've been trying to create a subdomain on an existing domain, but I was wondering if I Have to load in a new server and add it to this online server I have. I'm running a VPS and was also wondering if there is any way I can load up my laptop with windows server 2012 R2 and have it connect to the DNS of my VPS and get it to be a subdomain.

[@IneedSUBSCRIBERSPLEASE-zb3ri]

DJ Overspin Gaming search it up online you fool

[@djoverspingaming2733]

i did and there is nothing on it

[@amilaperera6636]

Good Explanation. Thanks...

[@ainsalleh]

if i just supply username as Administrator. it will be Server2/Administrator. is that ok?

[@gunjannagpal9255]

Thanks Patrick for the Video

[@sidewickx]

I have done this a million times before, but on this particular server environment of 2012, Srv2 is on the virtual machine of the SRC 1 that's running the DC, tried to join to an existing domain it give me th error that I can not be contacted. I have made sure DNS on SRV 2 is the ip address of server 1. I have done dcdiag with all switches, it passed no errors. Nslookup from Srv 2 display the domain name, server name and IP address. It pings okay from both servers. But I still get there error that it can not be contacted. After doing all the diagnosis that I can think of. Its not not coming through.

[@sal54]

I'm having the same problem. how did you resolve your issue?

[@MoNeenja]

Having the same issue

[@sidewickx]

Backed up and reinstalled everything. That was my last option. Which everything was fine I was able to just join to the existing domain.

[@kcdtech8478]

thank you

[@Hanesy]

Sir I have a question? if the server1 was down? will the server2 replicate? is this a redundancy sir?

[@PatrickHornung]

Matt Lucero it won't replicate, because replication implies they are both available. But it will be able to service clients if either server is down.

[@Hanesy]

Now Iv'e got the Idea. Thank you very much sir. what if server 3 server 4 was created? Should we point the server 3, server 4, to server 1 also? or point the server 3, server 4 to server 2?

[@yasirsultan7767]

vcenter can not be installed on domain controller..please guide me what should i do?

[@zkilla4611]

You install is on its own VM. As a vCenter Appliance. Then add Hosts to it.

[@Rogueone109]

thank you....this was great

[@hoangkhangtran7390]

tks pal

[@uman7201]

Thank you !

[@Physics072]

Adapter DNS settings totally left off video. he left it pointed to itself and no other DC. 127.0.0.1 wont cut it.

[@PatrickHornung]

You must be referring to server1 in the video - when installing Active Directory for the first time, DNS automatically is set to 127.0.0.1 on server1, and the DNS installation sets up forwarding to whatever DNS was originally set on the server. This makes server1 query its own DNS tables, and if the answer is not found, it will forward the query to an upstream DNS server.

[@hasansohel88]

why server 2 has no internet access?

[@MyJewishSongs]

Great job!!!

[@hadihassanieh9680]

thank yoouuuuu

[@anonasocah]

That helped a lot.

[@tuukkavirsula1371]

Ty

[@ndzalamatshimangadzoneluka2298]

The video was helpful

[@rixosyed]

Nice sir

[@nessavee5714]

Great

[@chris-ui2nt]

What is the reason you don't have a default gateway during this part? kzbin.info/www/bejne/n6e3koSAjbN3msUm45s

[@SoufVanBuuren]

You put a default gateway when your traffic will go through another subnet. That means you will need a routing processor to route your traffic from Subnet1 to Subnet2. in this video, I suppose his two VMs are ine the same subnet , which means , these two VMs will only communicate using their Mac addresses and not their IPs :)

[@qistinalizan9119]

sir i hv some quetions..may I know ur email to ask u some questions

[@mahmoudshams7753]

thank you