Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a single
domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server
2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You reconfigure DC2 as a member server in the domain.
You need to add DC2 as the first domain controller in a new domain in the forest.
Which cmdlet should you run?

A.
Add-AdPrincipalGroupMembership

B.
Install-AddsDomainController

C.
Install WindowsFeature

D.
Install AddsDomain

E.
Rename-AdObject

F.
Set AdAccountControl

G.
Set-AdGroup

H.
Set-User

Explanation:
Since a member server does not have Active Directory Domain Services installed, you must install
this role before you can configure the new Domain Controller (which would require you to run
Install-ADDSForest).

Show Hint

← Previous question

Next question →

Leave a Reply to chaserZX Cancel reply13

Nikita

Why not Install-ADDSDomain? https://technet.microsoft.com/en-us/library/jj574105.aspx

chaserZX

Correct answer should be C

Before you can even run the Install-AddsDomainController command, you need to install the active directory domain services first via “roles and features”, basically provide the binaries.

This is done using the “Install WindowsFeature” command.

So steps are:
– install server 2012
– install ADDS in roles and features
– promote the server to a domaincontroller using install-addsdomaincontroller

Leanne

Cribb

Only Microsoft would give you a scenario where you have a DC and then make it not a DC…then take it back to a DC….

I wonder if it meant reconfigure dc1 as a member server. In that case there is already a forest

Kampai

This question leads u 2 believe that the ADDS feature is already installed on DC2 , if so the next step is B , but if the feature is not yet installed then the answer is C

JoeBob

This is D because it is the first domain controller in a child or tree domain since the forest already exists

Jeff Doty

Leann, JoeBob, and Cribb are correct. You have a domain member server in an existing domain so you need to create the new domain first. So the answer is D.

Reference:
http://blogs.technet.com/b/poshchap/archive/2015/03/13/create-ad-child-domain-with-powershell.aspx

Dimitar Dimitrov

I find this link: https://technet.microsoft.com/en-us/library/jj574104.aspx
and produce the situation in my lab. I think it depends on the procedure for demoting the domain controller DC2. If you use the GUI for demoting, you must first install ADDS, so use Install WindowsFeature, but if you demote the controller with powershell, you must use;
Uninstall-addsdomaincontroller
Uninstall-windowsfeature

Here, I only demote DC2 with Uninstall-addsdomaincontroller, and I have member server DC2 with installed ADDS. Now I install the new domain with Install AddsDomain.
If you follow all the procedure from technet the answer is: Install WindowsFeature
but if you only demote the controller the answer is: Install AddsDomain

Did someone know what is the correct from answer for the exam?