Since everyone is going to Window 10 workstations we need Server 2019 domain controller to get all the newest, coolest Group Policy Objects, right?<\/p>\n\n\n\n
Microsoft recommends that you add new domain controllers instead of upgrading the OS on your existing domain controllers. Probably because that means you need to buy more licenses.<\/p>\n\n\n\n
Steps:<\/p>\n\n\n\n
install windows 2019 on a VM, remember to install the vmware tools latest version.<\/p>\n\n\n\n
install all updates, then install new Edge browser, and Windows Admin Center (its cool)<\/p>\n\n\n\n
*make sure you log in with an account that has Enterprise admin and schema admin group membership for this next step<\/p>\n\n\n\n
then you are ready to add roles, Active Directory Domain services, DHCP and DNS. DNS will auto replicate to all DCs but DHCP will take more manual intervention.<\/p>\n\n\n\n
more info https:\/\/www.manageengine.com\/products\/active-directory-audit\/kb\/how-to\/how-to-add-a-domain-controller-to-an-existing-domain.html<\/p>\n\n\n\n
you will get a warning about DC’s allowing NT4 encryption protocols, create this registry key and that will be solved next reboot. https:\/\/docs.microsoft.com\/en-us\/services-hub\/health\/remediation-steps-ad\/disable-the-allownt4crypto-setting-on-all-affected-domain-controllers<\/p>\n\n\n\n
<\/p>\n\n\n\n
*Don’t forget to add the section on how to do the DHCP replication… zzzzzzzzz<\/p>\n","protected":false},"excerpt":{"rendered":"
Since everyone is going to Window 10 workstations we need Server 2019 domain controller to get all the newest, coolest Group Policy Objects, right? Microsoft recommends that you add new…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[146,3,21],"class_list":["post-1013","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-dc","tag-smb","tag-windows"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/1013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1013"}],"version-history":[{"count":4,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/1013\/revisions"}],"predecessor-version":[{"id":1017,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/1013\/revisions\/1017"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}