Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You reconfigure DC2 as a member server in the domain.
You need to add DC2 as the first domain controller in a new domain in the forest.
Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You reconfigure DC2 as a member server in the domain.
You need to add DC2 as the first domain controller in a new domain in the forest.
Which cmdlet should you run?

A.
Add-AdPrincipalGroupMembership

B.
Install-AddsDomainController

C.
Install-WindowsFeature

D.
Install-AddsDomain

E.
Rename AdObject

F.
Set AdAccountControl

G.
Set-AdGroup

H.
Set-User

Explanation:
Installs a new Active Directory domain configuration
C:\PS>Install-ADDSDomain -Credential (Get-Credential CORP\EnterpriseAdmin1) –
NewDomainName child – ParentDomainName corp.contoso.com -InstallDNS –
CreateDNSDelegation -DomainMode Win2003 – ReplicationSourceDC
DC1.corp.contoso.com -SiteName Houston -DatabasePath “D:\NTDS” –SYSVOLPath
“D:\SYSVOL” -LogPath “E:\Logs” –NoRebootOnCompletion
References:
http://technet.microsoft.com/en-us/library/hh974722.aspx



Leave a Reply 14

Your email address will not be published. Required fields are marked *

19 + eighteen =


kurtis

kurtis

isnt the answer c. you need to install the add services role first

pietk

pietk

i think it also c

loxley

loxley

Role was already installed:
“The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.”

“You reconfigure DC2 as a member server in the domain.”

Can

Can

already said…”The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2″ they are domain controller.ou reconfigure DC2 as a member server in the domain.

Vietnam

Vietnam

But how do you reconfigure as member server? Uninstall ADDS. Because that´s definitely easiest way – because then you´d have to stop replication, stop service etc… which would cause much headache. SO i´d say it was configured as member server by demoting – therefore you need to install the ADDS again.

Ralf

Ralf

What is with “Uninstall-ADDSDomainController” ?
In this case we can directly use Install-ADDSDomain, or not ?

Vietnam

Vietnam

No you can´t. If you reconfigure the DC as member server then you demote it by remove ADcomputer and then Uninstall-WindowsFeature to remove ADDS. That´s what reconfigure as member server mean. When you want to put it back then you need to first install ADDS so that you can run the Install-ADDSdomain.

Oz

Oz

ADDS not installed in the member server so should be answer C first. Maybe?

Evgeniy

Evgeniy

ADDS was installed later, server was only reconfigured to member.
So, answer is D

Nick

Nick

You need ADDS installed to have the ADDS Module available to be able to run Install-AddsDomain.
You reconfigure DC2 as a member server in the domain.
You need to add DC2 as the first domain controller in a new domain in the forest. Is the installation of ADDS assumed?

Rpaxton

Rpaxton

Another good look at this
http://www.thegeekstuff.com/2014/12/install-windows-ad/
Member Server= no ADDS Services
Step 1. Install Windows Feature AD-Domain-Services
Step 2. Promote DC, many options here but in our example: ADDSDomain
So I still like answer C. but I don’t like these Assuming questions

Kuba

Kuba

The reconfiguring as a member server in this question is assumed to demote the domain controller first. Demoting itself does not remove the AD DS binaries from server. Look at this article -> https://technet.microsoft.com/en-us/library/jj574104.aspx. You have to demote DC first by Unistal-ADDSDomainController, and after this (and after reboting the server) you have opportunity remove AD DS by Unistall-WindowsFeature

carlo

carlo

Using the Server Manager to remove the ADDS role, it will ask first to demote the domain, the server is not on the Domain Controllers anymore once demoted which is it’s now in Computers OU. ADDS role is still installed after that process. So for this scenario, Install-AddsDomain will be the first step since the ADDS role is already installed.