Setting up Active Directory in Windows Server 2019 (Step By Step Guide)

Step-by-Step Guide to install Active Directory in Windows Server 2019
In this video tutorial I will show you the step by step guide on how to install and configure Active Directory Domain Service with DNS server role on Windows Server 2019.
Link to read my blog:
msftwebcast.co...

[@marvinrobinson9624]

Thank you so much!! I'm building a VM lab and needed this piece for the vCenter appliance. You saved me hours of research. Kudos to you and thanks again!!!

[@BluBeep]

The DNS settings between 9:40 and 11:08 are absolutely gold. I haven’t been able to find this info even from Microsoft’s documentation. I wish I understood ‘Why’ this was necessary. The ‘How’ fixed the problem tho for sure 🙂

[@TheBlackDove]

Not necessary for local domain setup.

[@sebeling3]

Excellent! Really well done. I hadn't setup a DC in a number of years and this got me from refresher to setup in about 10 minutes.

[@Tech-geeky]

..and the Indian accent is also a joy to listen to :)

[@KaszaKrynica]

Excellent job. Quick question : for me everything went great till when I did nslookup then I get : server unknown , address : : 1. Can you suggest what i did wrong? Tank you

[@MSFTWebCast]

Nothing wrong with the output.On your server IPv6 is enable and that why when you run nslookup command it gives ::1 (which is ipv6 lookback address). In my video i have disabled ipv6.

[@KaszaKrynica]

MSFT WebCast Thank you very much for your help. Those are great videos you making keep up a good work.

[@ixaau]

i had same issue , after changing Ethernet properties>internet protocol v 6 to "obtain DNS server automatically" its working as shown

[@Viral_Videos_2024_]

@@MSFTWebCast Before set the static IP go to CMD ---> IPCONFIG /ALL, Wright down IPv4, subnetmask, default getway, DNS server and use them for stati IP Or in your host computer go to CMD ---> IPCONFIG /ALL, Wright down IPv4, subnetmask, default getway, DNS server, and use them for static IP after you change the last number form the IP to another number

[@gamingwithjonty]

This Question saved a lot of time. Thanks

[@Forcedlaw]

If your default server after NSLOOKUP is showing >Nslookup Default Server: Local Address::1 Switch iPv6 to obtain DNS automatically, then hit okay/apply. This should fix the issue :)

[@tianenliu6368]

if switching ipv6 to obtain dns automatically still does not work, try to disable ipv6. It fixed y problem.

[@tianenliu6368]

my problem

[@ItsObby]

i had to give it a reboot after hitting apply. then it worked thanks for the help

[@ThePayanazo]

aaaaah, mvp thanks man!

[@dazza0987]

I just got a new job as a trainee technical engineer and this is exactly what i need to improve my knowledge around server 2019 thank you so much well presented, explained and easy to understand thank you so much for taking the time to make this video

[@MrThousandkg]

You still got the job?

[@dazza0987]

@@MrThousandkg hi yes :) im now a senior engineer :)

[@MrNams]

@@dazza0987 I have google domain and created A record to point to vps IP and working fine, I still did not understand why we need to install and configure DNS in VPS?

[@dazza0987]

@@MrNams hi. its been a while since I watched this video so specifically what's the issue ?

[@MrNams]

I meant we dont need setting dns in windows server.

[@muniyandijack4930]

Video is not clear 🤣😝

[@MSFTWebCast]

Video is recorded in full HD. Try to change the video quality in KZbin.

[@andrzejmurzyn4998]

dzięki hindus

[@patel201]

Thank you! This was easy to follow and helped me setup my own test environment.

[@MHTRIP]

This video heeeeelp me a lot , thanks man for sharing all that

[@OkSear]

when I write nslookup at 12:02 I get a bunch of different stuff with a bunch of 0s and when I type my domain name it says Server: Unknown and Address: ::1

[@MSFTWebCast]

It is due to IPv6. If you are not using IPv6 in your environment then you can disable it on your server. Also change or set local server's IP address as a preferred (primary) dns server address and then run nslookup again.

[@OkSear]

@@MSFTWebCast thank you

[@faisaljan3884]

thankyou so much that was very helpful. the only problem i am facing is they say the server is unknown. and also tell me which video i should watch after this .

[@MSFTWebCast]

You mean you get the message "server unknown" when you run nslookup command? It is because IPv6 taking precedence over IPv4.

[@MurageKabui]

@@MSFTWebCast Hi, at the end of the video you said you will show how to join a windows 10 computer to this domain, can you reference the video here please?

[@Stuab]

Just perfect!

[@versij]

excellent. Thanks

[@ghofranesayari-f3u]

thankyouuuuu so muchhhh

[@s.ep30]

if this does not work for you be absolutely sure that ipv6 is disabled

[@Arif_Techtalk]

Thanks for the well articulated instruction - In my career worked closely with LDAP integration never worked on Windows active directory, this tutorial really helped to get started with the AD installation and also integration for my Single sign on connectivity testing in my local computer.

[@Pop-c9h]

Thank you!!👌

[@reyloces]

tnx for the help

[@seekknowledge2010]

If you typed nslookup and did not see your server host name and address just disable ipv6. Simply uncheck ipv6. This video shows how to disable it kzbin.info/www/bejne/rHyVcp-YqbaKqZI

[@SalahUddin-xq1hk]

how to delegate active directory user to give permission to install software in client computer instead of administrator user and password. when we need to install any software in AD client machine then there is asking administrator user and password. so, we don't give AD administrator access to our IT Support users. we want to delegate permission to IT Support Group and IT support users will be member of IT Support group and delegate, user create, delete, modify permission along with software installation, IP Assign and others administrative activates where promotes or ask administrator id and password. pls help me in this regard.

[@nanakwame6208]

Thank you for this concise tutorial. I followed the steps carefully to complete the installation. But when I run Nslookup on one of my clients machine on the local Network name resolution fails. But when I change the preferred dns of the client to point to my dns server, name resolution complete successfully. What am I doing wrong? Kindly help i am a novice.

[@rdmvideos398]

Try disabling TCIP6

[@Piazzapower]

@@rdmvideos398 thanks that worked for me with a similar issue.

[@-AbhishekMathpati]

Thank You

[@nitro2k311]

And what is domain controller , I don't know , what Am I doing , I just follow you steps 😁

[@SuperF4KE]

Thanks. It Works for WSVR 2022 :)

[@adilabdu18]

thank you .

[@jonssonj]

Really informative videos and short and concise, Thankyou! 🙂

[@HaiTran-xy3lm]

Thank you so much for this video!

[@prasadreddy2487]

very nice and wonderful video.

[@MSFTWebCast]

Thank You.

[@omarmdz5174]

nice video bro

[@GaoussouTRAORE-og9zg]

good job

[@WrldTrndngTpcs]

why when i check in NSLOOKUP shows Default Server : UnKnown Address: ::1

[@MSFTWebCast]

Because IPv6 is enabled on your server. If you are not using IPv6 in your network, you can remove it from network adapter properties.

[@WrldTrndngTpcs]

@@MSFTWebCast Thank you for the fast response. I already fix the problem Thank you

[@henryosagie6142]

How is your computer still connected to the internet even after you altered the IP address because mine isn't connected no more to the internet.

[@anurag2508ravi]

Thanks

[@vishalsaxena5081]

pls share information type option videos how we can use that option identity and sensitive information type

[@cano__og]

Thank you, helped me to setup a new domain controller in a matter of minutes.

[@reallycooluleh]

Great video and tutorial series, thankyou for making these! I do have a question, after setting up Active Directory exactly per this video I now can't logon to the server from another PC on the LAN using Windows' Remote Desktop. Any idea what might have happened or any settings I should check? Thanks

[@MSFTWebCast]

1. Check whether remote desktop is enable? 2. Check fore Firewall settings (Allow Remote Desktop). Make sure firewall settings are as per your current profile (e.g. domain).

[@reallycooluleh]

@@MSFTWebCast Thankyou for your reply. What I found the problem to be was once I created the domain the username to log on from another computer changed. E.g. before domain was SERVER\Admin, now it's DOMAIN\Admin Thankyou again for replying to me!!

[@GurungBharat]

why dns server is same as IP address? Shouldn't it be different?

[@stefanwahl11]

Thank you very much. You helped a lot.

[@knowledgefactory6194]

Thanks 😘 we need such instructors

[@GreekBistro]

thank you for all your videos, they are very helpful

[@gegeinthehouse]

Im so happy it's working

[@juansmith6610]

Thank you for the video - helped me complete my Bachelor's Degree project. It had been a few years since i did active directory/networking

[@MSFTWebCast]

Glad it was helpful!

[@hezekiahochuodho5827]

Trust me, you did it like a pro, you're the best.

[@MSFTWebCast]

thank you!

[@odellpomary8814]

you didnt show how you install the member server

[@balajims_]

hey.... this vdo helps me.. thank you fr ur sevices man....

[@MSFTWebCast]

Glad to hear that

[@Craywilliams]

Thank you for a clear explanation, really helpful! What could be a reason to receive answer from NSLOOKUP - SERVER: UNKNOWN? Thank you!

[@MSFTWebCast]

Probably IPv6 is enabled on your server and IPv6 loopback address (::1) is configured as a preferred DNS server address.

[@jordanaldrich]

THANK YOU SO MUCH!!!

[@massarde9591]

I had to disable the IPv6 for it to work. other than that that everything went pretty smooth. many thanks

[@MSFTWebCast]

Compare to IPv4, IPv6 is taking more precedence.. System will try to use link local IPv6 address as well. Thats why I am not using IPv6 addresses in my test lab to avoid the confusion.

[@ТөрмөнхМөнхбаатар]

omg man. that was my problem. thank u for ur comment.

[@AlessandroTimmi]

Is there an alternative solution that doesn’t require to disable IPv6? Apparently ipv6 is an essential component of windows and should be kept enabled to avoid other issues.

[@saishainegeek1080]

This video is very helpful.

[@arthurchec]

What if my computer has Dual NIC, how do I configure static IP?

[@MSFTWebCast]

You can assign static IP address on one the NIC or you can configure NIC teaming and then assign the IP address to the Team interface.

[@revazzhvania3795]

When I assign static IP address, my internet on VM stops working until i configure it to use DHCP again. anyone had the same problem?

[@MSFTWebCast]

you need to assign static IP addressing as per your local network range. First find out the network IP range which is being used by DHCP server.

[@revazzhvania3795]

@@MSFTWebCast Thank you so much. I googled some stuff according to what you said and fixed it.

[@alaukiktandlekar114]

my windows server is configured with DHCP so IP is assigned automaticaly. Should I give static arbitrary IP ?

[@MSFTWebCast]

Yes, you should have to assign static IP address on Domain Controller.

[@mhusseinsaiyed11]

I'm updating myself with all your Windows Server 2019 videos.. Thank you . Please do suggest me a Textbook so that I can buy it

[@MSFTWebCast]

Generally I suggest MS cert guides (70-410, 70-411 and 70-412) for fundamental. You can easily get a pdf copy on google.

[@mohamedalibouabidi4398]

I did everything the same, correct but when I enter the command nslookup, it shows me Default Server: unkown Address: : :1 what can I do?

[@MSFTWebCast]

This is due to IPv6 taking precedence over IPv4. ::1 is the default loopback IPv6 address. At command type the domain name, it will work fine. If you are not using IPv6, then you can disable it from the NIC properties.

[@TheAnnoor]

thanks for your amazing tutorials, subscribed

[@MSFTWebCast]

Thanks for the sub!

[@abdullahiabdullahi2046]

Very informative bro. Keep up the good work. PS : IF YOU GET A 'DEFAULT SERVER: UNKNOWN' ERROR, turn off IPv6 in network adapter properties.

[@william-f1294]

you just saved my day btw

[@KelamHB]

Saved my skin! Legend!

[@TheEpicReapzz]

bro why my adress ::1 with nslookup, instead of 172.18.72.5 after editing preffered dns from 127.0.0.1 to 172.18.72.5?? i did everything the same

[@MSFTWebCast]

::1 is IPv6 loopback IP address. Once you installed DNS service on local server, the server change the preferred DNS servers IP address to loopback IP address. It is normal, you can change it back.

[@jeremyguiab]

when I click the active domain services, it also installs the DNS server. what would be the best practice? Active directory domain controller with the DNS server or should I remove the DNS server from the domain controller and then create a separate DNS server and make it the primary DNS. Thanks

[@MSFTWebCast]

Install and configure DNS server role on the same server as DNS is most important component of Active Directory Domain Services.

[@nobodymister5435]

When I disable IPV6 to get rid of the wrong data being displayed on powershell, I am no longer connected to the internet- although I never configured IPV6. Very strange. multiple reboots don't help.

[@nobodymister5435]

Now it works.......very strange...but ok ; )

[@Sallouma7806]

good job, very helpful

[@Deepakkumar-zw3xy]

very useful ..thank you.

[@erickmwambi6]

This is much appreciated Sir. Much thanks. I like the step by step clear practical guide

[@MSFTWebCast]

Glad it helped

[@imamhussainhanchanmani2786]

in virtual machine installed windows server 2019 on that i configured dns server i m getting issue default server: unknown error

[@MSFTWebCast]

Thats because of IPv6. On your server IPv6 is enabled and it is taking precedence when you run nslookup. If you do not need and you are not using it, then disable IPv6 from network adapter.

[@technotimecomputersystems2054]

Error in adding roll on windows server 2016, Error: 0x80073701. please help to resolve it.

[@MSFTWebCast]

I think there are some system files are missing. Take a look at the CBS logs for more information: %windir%\Logs\CBS\

[@danimoosakhan]

You also have to setup DNS forwarder to upstream DNS servers such as 8.8.8.8 or 1.1.1.1, so your DC can resolve external fqdn if it doesn't find the record from its own DNS record. 😀

[@MSFTWebCast]

Yes. But for internal names local dns server is enough.

[@douradavidboge6804]

nslookup is not working on external computers. how to resolve?

[@anuragsom09]

Excellent !!

[@MSFTWebCast]

Glad you like it!

[@asadrauf9889]

Very good presentation

[@roysocanalyst9172]

you saved my day. "SUBSCRIBED"

[@MSFTWebCast]

Thank you.

[@maskawathlatifturzo3731]

Excellent Tutorial !

[@kresimirpecar4925]

its not working, when i enter nslookup it says default server; unknown, Address: ::1

[@MSFTWebCast]

If IPv6 is enabled on your server than you will see ::1 while running nslookup command. If you are not using IPv6 on your server then disabled it and run nslookup command again.

[@crazaholic1968]

Can you add a video on how to install and configure Kerberos on an AD server?

[@olegp986]

Hello, I'm sorry I couldn't find your first name to address properly, I have the same problem that one of the participant have described before; wondering if you have a chance would be able to reply how did you resolved that issue because I am less than a beginner, so I am stuck in the same point, “I only have 3 white entries ( msdcs , and then SOA and NS ) I do not have a host A or any of the folders”. And I have followed all steps that you have suggested. Thank you.

[@blackhunt369]

Good teachers you are ...you doing great job ...

[@MSFTWebCast]

Thank you! 😃

[@ngngthuytrang]

many thanks for your tutorial. I would like to give you 1000 likes. :)

[@MSFTWebCast]

Wow, thanks!

[@shaneriley9727]

great explanation thanks

[@parasmehta1326]

Your videos are really helpful mate. Thanks. I've learnt a lot.

[@SAM7167]

Question : is it normal that at the end of the AD deployment wizard, when it restarts, to be logged back in without having to enter any password? When I logged off again, I can't log in with my password!

[@senseikems]

hey, i do all and when i verify on powershell i have "request timeout" and server 1 and server uknown

[@MSFTWebCast]

That because IPv6 is enabled on your server. IPv6 is taking precedence over IPv4. If you are not using IPv6, simply disable it. Otherwise there is no issue. From command prompt you can directly try to ping using your FQDN and check the result.

[@66560652]

It was a very clear ---that would be very helpful....thank you

[@Asallymusic]

Hey I'm trying to set up a domain controller active directory using an EC2 instance. The problem comes in when setting up my static IP to my private IP so it doesn't promote the server as a domain controller please help

[@MichaelPatterson-i3q]

I have a question. What if the record at 10:45 is missing? how do I get it back or recreate?

[@MSFTWebCast]

1. Restart the Sever once. 2. Manually create both forward lookup zone with domain name. (For exmaple: mylab.local and _msdcs.mylab.local, replace mylab.local with your domain name) 3. Again restart the server. 4. If DNS zone appears then change the zone type to integrated.

[@riccardo859]

Hi, I have a problem. At the minute 1:18 active directory domain services has disappeared from roles. I tried to install various versions but can't find the active directory domain servicies role. How can I do ? Thank you

[@ankushaglawe3439]

Thank you so much!! very helpful and informative

[@olegp986]

Hi there, one more question I would like to ask, considering the server stability and Domain Controller configuration complexity (in my case), should I downgrade it to Server 2012 for more stability? I would appreciate any suggestions. Thank you All.

[@felicityitsolutions5204]

Your tutorials are definitely the best i have followed the classes my server is working perfectly however im struggling to connect WiFi devices to the network may you please help me out with that.

[@davidclarke7154]

Super! Thank you! How to I find the "Next" video?

[@MSFTWebCast]

Check out the playlist: kzbin.info/aero/PLUZTRmXEpBy32NP6z_qvVBOTWUzdTZVHt

[@MuhammadWaqas-gr4gg]

Hi Bro, I just watched AD installation alongwith DNS on server 2016 video from your 2016 playlist. There you didnt select DNS feature alongwith ADDS role whereas here you selected that feature. can you please explain. Furthermore bro, as per i know, DNS feature is installed alongwith AD role automatically.....your comments plz.

[@MSFTWebCast]

I just want to cover both methods. You can install DNS server role while you install AD DS role or DNS role will be install automatically when you choose DNS on domain controller options page. If your server is first DC in domain then the DNS role selection checkbox will be grey-out and already selected. As we know that DNS is crucial for AD DS to work properly, we generally install DNS with AD DS. It up-to us that which we way we want to install DNS server role.

[@MuhammadWaqas-gr4gg]

@@MSFTWebCast I still didnt get Bro. Because this was the first DC in Domain and DNS checkbox was not greyed out as u said in above comment. Secondly what we normally do in and assume in our office culture that whn we check ADDSrole, it automatically install DNS Role/feature as well. But never seen separatly selecting DNS checkbox.....

[@MikeSanders55]

it's giving me an error that i dont have a static IP. although i did add the exact same IP and DNS you put. Please HELP :(

[@damiansimonak7955]

Can I configure DC on server where run our economy system and SQL ?

[@MSFTWebCast]

This is something new for me. I have never encountered this type of question. Microsoft does not recommended to install SQL and DC on the same server. If your server is already domain controller and you want to install SQL on it. You can install SQL on DC but with some limitations like "You cannot run SQL Server services on a domain controller under a local service account". But I dont have any idea what happen when we promote an existing SQL server to be a domain controller.

[@ReekoPC]

i follow you video step by step and it worked beautifully. But the user clients in windows 10 are loosing the network mapped drive, also when i change the password for them, it wont take from their end, they can only log in with the previous password. any ideas>? ... PS.. my router is the DHCP server is that ok?

[@DJ-ez8hn]

very informative 👍👍

[@sazger]

Can you rerun the Active Directory Domain Services Configuration Wizard? Or once you run it and select the type of "Deployment Operation" you must delete it?

[@rambalram2610]

6:20 Even in 2023, it does not have 2019 server option.. 😀😀

[@MSFTWebCast]

Yes, now Microsoft is focusing on Azure only.

[@weshwesh3450]

wow,thank you.

[@matts2581]

I am very new top this - thank you very much for sharing your time with walking us through this! :)

[@trigotima4685]

im using WS 2019 on hyper V. After instaling AD and DNS it ONLY shows me other user..what should i do?

[@MSFTWebCast]

This shouldnt happen. But click on other user and try entering domain admins UPN and password to sign in.

[@trigotima4685]

one way to fix it is just type Administrador on user name and then my password @@MSFTWebCast

[@vigneshp6432]

Any idea after restart server what password need to give i tried admin password it's not working

[@MSFTWebCast]

The same one. If still getting an error, use UPN address to sign in. for example: [e-mail].

[@hshshshunknown1377]

How long does it take to install the new forest though? Im using azure right now and I have VM's in there and I installed this and its taking a long time to process

[@olawumiolubukolaabolusoro2198]

thanks a bunch