[Autogenerated] we're back on D. C. We're
gonna use this computer to quit. I
installed for Mediaset that will use to
launch a brand new redoing domain
controller. So if we minimize Power Shell
and I've got a come from shock up here on
the desktop, just gonna right click that
and say, runners Administrator Well, just
bet that little bit bigger. So from this
command, prompt, we want to use their
utility called nts futile. So it's typing
and tedious youto and press. I know the
next command seems a bit weird. At first
it's called activate Instance NTS. It
turns out that demand controller can have
multiple directory service is we're done
there. You can have the main actor
director dare best as well as perhaps
lightweight delivery service is so by
typing activate instance anti gs where
tell Auntie Sutil. But it's the 1,000,000
NT D s database I wanna work with. The
next command is I f n on I FM will take us
to the install from media problem. If we
take the question mark here and press
enter here, we can see the different
commands used to create different types of
I f m sets so create Full, for example,
will create an insult for Mediaset will
help us deploy a full demand controller
create our d. C will allow us to create,
and I offense set for a read on demand
controller. And then we have the cyst,
bowlful and sinful our D. C. These
commands would include the sys file folder
as part of our offense set. Remember, sit
file folder where we find our group
policies. You also options include no
defect. These will prevent the eye of him
process from defragment in the database
first. Now we need to create an I FM set
for a read on demand controller. So to
create the arrow D c I f m set create our
D C than a file path they're from set were
placed in this path. Now I've already
created a folder called I FM on the C
drive. So it should be a case of just
pressing enter on my I FM set for my
allergy. See, she betrayed so we can see
the process creating a snapshot first, and
it from that snapshot that the I FM set
will be created now. This can take some
time, so I'll do. He was Paul's video
until the offense has been created back in
the command prompt. We can see that I FM
set is being successfully created. We can
see, the FM said, If we never get the
directory we created even through command
prompt offer Explorer. So I'm inside. See,
I FM. We could see it's created after Dr
Folder and inside there we could see a
copy of anti Death Doctor. We would also
see a couple of sis fall if it included
sis follows part of I f. M set. It's the
contents of this accidentally folder that
we now need to ship them outside. How you
do that, it's up to you. You're probably
gonna move this removable media. Make sure
that it's encrypted in transit, choose a
secure transit method and then copy this
directory and locally to the server that
you want to become your new domain
controller. Back on my desktop, I'm inside
served manager. I'm going to see D. C and
D. C, too. I've got 1/3 cervical DC three
that want ad served manager. So if I write
the cold service and say at service on
Dennis, we can add DC three. This will
take a second to find DC three and then
I'll add it to my old service list. So D C
three is a server car deployment off
server 2019 data center. And if this
machine that wants promote I've already
copied the I FM set to DC three. Andi,
I've already installed at the director
Domain Service's role. So now we need to
promote DC three to be a read on demand
controller. So DC three selected we
construct the exclamation on select
remotely served to be a different
controller on a familiar wizard should be
displayed again. Here, we're gonna add a
demand control to existing domain on the
name coming up PR eyes. I was selected. We
need to provide credentials for promotion.
Swell. Include my name, house demand. I've
been rights on computer P Ally, but say
next, Where now asked about our
deployment. Do I want this d c. To be a
dinner server on? Do I want this d c. To
be a global catalog server? The answer is
probably yes. Others from what site? We
probably need Liam resolution on if people
gonna be logging in and they're gonna be
doing searches. They will need access to
global catalog server. We don't want to be
in a situation where our one link goes
down and we have a local D. C. But no D n
s our global colleagues. Okay, Police. So
we'll leave Bertha's tick boxes selected.
We're also gonna take the box, read on the
demand control. So the promotion process
knows that I want this machine to be in
our d. C. One more thing to note here
because I'm making this domain controller
a read on demand controller. Both the
Global Carlos Service. Andi, the active
directory in Great Dina soon will also be
read only just like out over two
promotions. We have to input password for
directory service First armored. Well,
then we say next. Now this next screens a
bit different from before. It only appears
when my deploying of redoing divine
controller and it's asking us about
password replication. So stand at the box
of bomb. These are groups of users whose
passwords are part off the denied our d C
replication group. Members of these groups
are so important that their credentials
can never be cast on. We don't have any
controls. We then have a box. Don't
include groups. Who's passwords? Our
allowed to be cashed in a re. Don't even
controller. And this includes a group Cold
allowed our d C password replication. This
group is empty because the group is entity
no uses. Our computers will be capped by
default. At the top, we have delegated
administrator account option. This would
be the name of a usual group that have
admin rights on this domain controller.
Now, again, I'm gonna leave that empty
right now. So I say next we've seen the
screen before when we're deploying our
second d c d c too. We spoke about the
replication options on the fact that we
can choose to replicate from any server
off a specific D. C. But I don't want to
do that right now. This domain controller
is that remote site, and I have created FM
set specifically so it can promote itself
locally. So hey, I'm gonna choose install
for media and then provide a path where
the I FM set could be found. Local. We can
choose verify to verify that path exists
and importantly, that the installed for
media set is there. The verification
process won't take long. As long as it
doesn't for a penny. Areas we could
continue. The path section is the same. I
have a view. Options the same. So I'm
after those options. So next we'll fast
the prophetic checks again. We get
warnings, have a read through the
warnings, any of that relevant for your
particular deployment address. And then
when the previous check again. If you have
with these we saying stall so the
sensation will take a few minutes
installing locally the machine will be
boot. It will then choose a replication
partner replicate any changes that are
being made since the offense that was
created. So there you can see the server
was promoted successfully. So if I close
the screen down again DC three should our
Michael restart. If it doesn't give it a
restart, wait a few minutes and then we conveyor five insulation