How to Deploy an Active Directory Domain Controller on Windows Server Core

Windows Server Core is a compact platform for hosting an Active Directory domain controller, with fewer resource requirements, updates, and potential security exposure. Installation and promotion are primarily PowerShell-based.

Prepare and install AD DS

Before promotion, configure the computer name, static IP address, gateway, DNS, time zone, and system time. Correct DNS supports domain discovery and replication. Install the role:

Install-WindowsFeature AD-Domain-Services -IncludeManagementTools

The ADDSDeployment module supports creating a new forest, creating a domain in an existing forest, or adding a controller to an existing domain. Use the scenario matching the directory design.

Promote and restart

Run the appropriate deployment cmdlet with the domain name, domain-admin credentials, and, when required, the target site and storage paths for the database, logs, and SYSVOL. Provide the DSRM password securely; never embed a real password in a script. Review prerequisite checks, then restart after promotion.

Validate the controller

• Use Get-ADDomainController -Discover to confirm site discovery.
• Check AD DS, KDC, Netlogon, and DNS with Get-Service.
• Confirm SYSVOL and NETLOGON shares.
• Run dcdiag and repadmin /replsummary for health and replication.
• Use Netdom /query FSMO to view FSMO placement.

Practical takeaway: stabilize networking and DNS first, then document site placement, services, shares, and replication results. RSAT and Windows Admin Center support remote administration.