Deploying and Managing Active Directory with Windows PowerShell: Tools for cloud-based and hybrid environments

Streamline and modernize the way you manage Active Directory Use Windows PowerShell to simplify and accelerate Active Directory domain controller management, whether you’re running Active Directory entirely in the cloud, on-premises, or in a hybrid environment. In this concise reference, Microsoft MVP Charlie Russel presents the commands, tested scripts, and best-practice advice you need to deploy and run Active Directory in a modern environment and to migrate smoothly to cloud or hybrid deployments wherever they offer more value. Supercharge your productivity as an Active Directory administrator Get proven scripts that leverage the power of Windows Server 2012 and Windows Management Framework 4.0 and 5.0 Deploy forests and Active Directory Domain Services (AD DS) Manage DNS and DHCP Create and manage users and groups Deploy additional domain controllers, read-only domain controllers (RODCs), and domains Implement and manage fine-grained password policies Perform fast, reliable backups and restores Quickly extend on-premises Active Directory deployments to the cloud Efficiently manage roles and sites

Table of Contents:
Introduction     xi  Chapter 1: Deploy your first forest and domain     1  Before you start     2  Prerequisites     2  Versions     2  Code     2  Deploy your first forest     2  Configure the server IP address     3  Set the server name     6  Install Active Directory Domain Services     6  Create the forest (dcpromo)      7  Summary     14  Chapter 2: Manage DNS and DHCP     15  Manage DNS zones     16  Manage primary zones     17  Manage secondary zones     22  Manage stub zones     24  Configure conditional forwards     25  Manage zone delegation     26  Manage DNS records     26  Create name (A and AAAA) resource records     28  Create CNAME resource records     33  Create MX resource records     34 Create additional resource records     34  Configure zone scavenging and aging     35  Configure record options including Time To Live (TTL) and weight     36  Manage DHCP     37  Deploy DHCP     37  Configure IPv4     38  Configure IPv6     40  Summary     41  Chapter 3: Create and manage users and groups     43  Create users     43  Create a single user     44  Add users in a batch     48  Create and manage groups     51  Create a new group     52  Add users to a group     52  Manage groups     54  Create and manage OUs     56  Create an OU     57  Add computers and users to an OU     58  Summary     62  Chapter 4: Deploy additional domain controllers     63  Deploy domain controllers     64  Configure networking     64  Install the Active Directory role on the server     67  Join the server to the domain     68  Promote a server to domain controller     68  Clone a domain controller     72  Verify the environment     72  Prepare the source domain controller     73  Create the cloned domain controller     77 Manage FSMO roles     79  Transfer FSMO roles     80  Seize FSMO roles     82  Summary     83  Chapter 5: Deploy read-only domain controllers (RODCs)      85  Prepare the forest and domain     86  Staged deployment of an RODC     87  Prepare the RODC account     87  Prepare the RODC target server     89  Deploy the RODC target server     91  Non-staged deployment of an RODC     94  Prepare the RODC target server     94  Deploy the non-staged RODC target server     97  Summary     100  Chapter 6: Deploy additional domains and forests     101  Create a child domain     102  Prepare the server     102  Install the Active Directory Domain Services role     105  Create the new domain     105  Create a tree domain     108  Prepare the server     108  Install the Active Directory Domain Services role     111  Create the new domain     112  Create a new forest     114  Configure networking     114  Test the promotion to domain controller     114  Deploy the new forest     116  Create a trust     117  Create a shortcut trust     118  Create a forest trust     120  Summary     120 Chapter 7: Configure service authentication and account policies     121  Manage service authentication     122  Create service accounts     122  Configure managed service accounts (MSAs)      126  Configure group managed service accounts (gMSAs)      129  Configure virtual accounts     135  Configure account policies     135  Configure domain user password policy     136  Configure password settings objects (PSOs)      137  Summary     142  Chapter 8: Back up and restore AD DS     143  Back up Active Directory     144  Windows Server Backup     144  Create offline media     152  Configure Active Directory snapshots     153  Restore Active Directory     155  Perform a non-authoritative restore     155  Perform an authoritative restore     157  Restore an object by using the Active Directory Recycle Bin     162  Restore an object by using Active Directory snapshots     164  Summary     166  Chapter 9: Manage sites and replication     167  Configure sites     168  Create a new site     168  Create a replication subnet     169  Rename a site     173  Remove a site     174  Configure Universal Group Membership Caching (UGMC)      175  Create a site link     176 Manage replication     178  Set the replication schedule     179  Change the replication server     181  Summary     182  Chapter 10: Deploy Active Directory in the cloud     183  Sidebar: Types of Active Directory in the cloud     185  Install the Windows PowerShell Azure model     185  Install the Windows PowerShell Azure module     186  Load the Windows PowerShell Azure module     187  Connect to an Azure account     195  Authenticate to your Azure account     195  Set the current subscription     199  Create a VPN     199  Create self-signed certificates     199  Create a point-to-site VPN     201  Create a virtual machine     210  Connect to the subscription     210  Set a location     211  Provision a service     212  Provision a storage account     212  Create a virtual machine     213  Configure the domain controller     218  Summary     219  Index     221