

This blog post is intended for test lab development enviornments. IMPORTANT NOTE: For production use, always consult your organization’s security team for compliance and ensure that security best practices are followed. Don’t relax your security standards by using a weak domain admin password or not apply the recommended Microsoft security baselines for Domain Controllers. This blog post can also be used for Server 2016 since the Forest and Domain Functional levels are the same.įor a test or development lab environment, it’s recommended to apply the latest Windows Server updates and configure the recommended security settings. Building a development AD environment is also good to test Windows 10 group policy settings, newer Windows 10 releases, SCCM OSD, Azure cloud services and more. However, learning from the ground up helps to re-enforce Microsoft concepts and is a great way to learn and troubleshoot using a separate environment. Sure you can use a Hydration Kit or other tools to automatically create a domain, DNS, DHCP, and SCCM ConfigMgr server.

In addition, I will reference the security recommendations from Microsoft and StigViewer for new Domain Controllers that can be used for server security hardening. This Windows Server 2019 Active Directory installation beginners guide will provide step-by-step illustrated instructions to create a NEW AD forest, DNS and DHCP services.
