Minimum Requirements to Install Windows Server 2022
- Processor: 1.4 GHz 64-bit processor (compatible with x64 architecture)
- RAM: Minimum 512 MB (2 GB for Server with Desktop Experience)
- Disk Space: Minimum 32 GB
- Network: Ethernet adapter capable of at least gigabit throughput
- Display: Super VGA (1024 x 768) or higher-resolution monitor
What is Domain Controller?
English: A Domain Controller (DC) is a server in a Windows domain that is responsible for allowing host access to domain resources. It authenticates users, enforces security policies, and stores user account information.
Hindi: डोमेन कंट्रोलर (DC) एक ऐसा सर्वर होता है जो डोमेन संसाधनों तक पहुँच की अनुमति देता है। यह उपयोगकर्ताओं को प्रमाणित करता है, सुरक्षा नीतियों को लागू करता है, और उपयोगकर्ता खाता जानकारी को संग्रहीत करता है।
Key Responsibilities:
- User authentication and authorization
- Enforcing security policies for domain users and computers
- Maintaining the Active Directory database
- Providing replication of data between domain controllers
- Managing trust relationships between domains
Step-by-Step Guide to Create a Domain Controller
Prerequisites:
- Windows Server 2022 installed
- Static IP address configured
- Properly named server (hostname)
- Administrator privileges
Steps:
- Install Active Directory Domain Services (AD DS):
- Open Server Manager → Add roles and features
- Select Role-based or feature-based installation
- Choose your server
- Select Active Directory Domain Services and install
- Promote Server to Domain Controller:
- Click “Promote this server to a domain controller”
- Choose “Add a new forest” and enter domain name (e.g., cloudfox.local)
- Set Directory Services Restore Mode (DSRM) password
- Accept defaults for DNS and NetBIOS
- Review and install, server will reboot
- Verification: Log in with domain credentials and open Active Directory Users and Computers.
Difference Between DC, ADC, and RODC
| Component | Description (English) | विवरण (हिंदी) |
|---|---|---|
| DC (Domain Controller) | Primary server that authenticates and authorizes users within a domain | मुख्य सर्वर जो यूज़र्स को प्रमाणित और अधिकृत करता है |
| ADC (Additional Domain Controller) | Backup server that shares the role of the primary DC and provides redundancy | प्राथमिक DC का बैकअप जो उसकी भूमिका साझा करता है और सुरक्षा प्रदान करता है |
| RODC (Read-Only Domain Controller) | Domain controller that holds a read-only copy of the Active Directory database | एक ऐसा डोमेन कंट्रोलर जो Active Directory का केवल पढ़ने योग्य कॉपी रखता है |
Differentiate: Domain, Tree, Forest
| Feature | Domain | Tree | Forest |
|---|---|---|---|
| Definition | Logical group of AD objects / AD | Hierarchical collection of domains | Collection of trees |
| Namespace | Unique name like jetking.local | Contiguous namespace like delhi.jetking.local | Different namespaces allowed like jetking.local & cloudfox.com |
| Trusts | Can be established manually | Auto parent-child trust | Auto trust between trees |
| Example | jetking.local | jetking.local, delhi.jetking.local | jetking.local and cloudfox.com |
What is FSMO?
FSMO (Flexible Single Master Operations) are special roles in Active Directory assigned to specific domain controllers to prevent conflicts and ensure smooth operation.
Hindi: FSMO (Flexible Single Master Operations) Microsoft Active Directory में कुछ खास भूमिकाएँ (roles) होती हैं जिन्हें एक या एक से ज्यादा डोमेन कंट्रोलर (Domain Controller) को सौंपा जाता है, ताकि नेटवर्क में टकराव (conflict) से बचा जा सके और सिस्टम सुचारु रूप से चले।
Types of FSMO Roles
- Forest-wide Roles: Schema Master, Domain Naming Master
- Domain-wide Roles: RID Master, PDC Emulator, Infrastructure Master
FSMO Roles Summary (English & Hindi)
| FSMO Role | Scope | Description (English) | विवरण (हिंदी) |
|---|---|---|---|
| Schema Master | Forest | Controls all changes to the AD schema (structure). | AD की स्कीमा (structure) में बदलाव करने का अधिकार केवल इसे होता है। |
| Domain Naming Master | Forest | Manages domain additions/removals | डोमेन जोड़ने या हटाने का कार्य करता है |
| RID Master | Domain | Allocates RID pools to domain controllers, used in assigning unique SIDs to objects. | RID (Relative ID) बांटता है जिससे हर object को एक यूनिक ID मिलती है। |
| PDC Emulator | Domain | Handles time sync, password changes | समय सिंक्रोनाइज़ और पासवर्ड बदलता है |
| Infrastructure Master | Domain | Updates cross-domain references | एक डोमेन से दूसरे डोमेन के object की जानकारी को अपडेट करता है। |