What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Windows Server 2012 and 2012 R2 use a two-stage Active Directory deployment: first install the Active Directory Domain Services (AD DS) role in Server Manager, then promote the server to a domain controller with the AD DS Configuration Wizard.
This procedure is useful for a lab or for maintaining a legacy system. However, Windows Server 2012 and 2012 R2 reached the end of extended support on October 10, 2023. Their final Extended Security Updates period ends October 13, 2026, so new production deployments should use a supported Windows Server release instead.
What you are installing
Active Directory Domain Services is the Windows Server role that provides directory services, authentication, authorization, and domain management. A server becomes a domain controller only after it has been promoted. Installing the role alone does not create a domain controller.
DNS is central to Active Directory because clients use it to locate domain controllers and services such as LDAP and Kerberos. DNS Server is commonly installed on domain controllers, especially in a new forest, although the exact DNS design depends on the environment.
#1 Best Overall
- Used Book in Good Condition
Server Manager also installs the management components used by tools such as Active Directory Users and Computers, Active Directory Sites and Services, and Group Policy Management.
Windows Server 2012 replaced the old graphical dcpromo.exe workflow with Server Manager and the ADDSDeployment PowerShell module. Do not use dcpromo.exe as the primary method on this operating system. See Microsoft’s AD DS installation changes.
Choose the deployment type first
The choices in the promotion wizard depend on whether an Active Directory environment already exists.
| Scenario | Use it when | Important requirement |
|---|---|---|
| New forest | No Active Directory forest exists | Creates the first domain and domain controller |
| Additional domain controller | You need redundancy, another site, or a recovery controller | The server must locate an existing domain controller through internal DNS |
| Child or tree domain | Your organization has a deliberate multi-domain forest design | Usually requires Enterprise Admin-level permissions |
| Read-only domain controller | A branch office has limited physical security or connectivity | Requires password-replication and delegated-administration planning |
For a small organization or lab, a new forest is normally the appropriate choice. Do not create child domains or an RODC simply because those options are available.
Prerequisites
Prepare the operating system
- Use a clean, fully patched Windows Server 2012 or Windows Server 2012 R2 installation where possible.
- Choose and configure the server name before promotion.
- Assign a static IP address. This is an operational best practice for domain controllers.
- Use NTFS for the volumes that contain the AD database, logs, and SYSVOL.
- Synchronize the system clock. Kerberos authentication is sensitive to time differences.
- For an existing domain, confirm connectivity to domain controllers, DNS, and required firewall ports.
- Do not place a domain controller behind unsuitable NAT or expose domain-controller services directly to the public Internet.
Configure DNS correctly
For an additional domain controller, configure the server’s preferred DNS server to an existing internal AD-aware DNS server before promotion. Verify that it can resolve the domain and its domain-controller service records.
For a new forest, the wizard can install DNS and configure the initial domain. Do not use an ISP or public DNS resolver as the server’s primary resolver for domain operations. Domain members should use internal AD-aware DNS servers; external lookups can be forwarded from those servers.
A DNS delegation warning may be expected when creating a new forest in an existing DNS hierarchy, but it should be investigated rather than ignored.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Decide the naming and recovery details
Before opening the wizard, decide:
- The fully qualified domain name, such as
corp.example.com. - The NetBIOS name, such as
CORP. - Forest and domain functional levels, based on the oldest domain controller you must support.
- Whether DNS will be installed on this controller.
- Whether it will be a Global Catalog.
- The AD database, log, and SYSVOL locations.
- The Active Directory site in which the server belongs.
- A Directory Services Restore Mode (DSRM) password.
Do not automatically choose a .local namespace. Use a namespace your organization controls, or a carefully planned internal namespace, while considering Microsoft 365, Microsoft Entra ID, certificates, split DNS, and future migrations.
Rank #2
Use appropriate credentials
- New forest: local Administrator credentials are sufficient to begin creating the forest.
- New child or tree domain: Enterprise Admin-level permissions are generally required.
- Additional domain controller: Domain Admin-level permissions are generally required, unless equivalent delegated permissions have been designed.
- RODC: requires appropriate domain permissions plus RODC-specific password-replication and delegation settings.
Microsoft documents the deployment-specific requirements in its AD DS installation guide.
Stage 1: Install the AD DS role with Server Manager
- Sign in with local administrative rights.
- Open Server Manager.
- Select Manage and then Add Roles and Features.
- On Before you begin, select Next.
- Choose Role-based or feature-based installation.
- Select the destination server.
- On Server Roles, select Active Directory Domain Services.
- Accept the prompt to add the required management tools and features.
- Select Next through the Features and AD DS information pages.
- On Confirmation, select Install.
- When installation completes, select Promote this server to a domain controller.
The role installation normally does not require a reboot in the standard Server Manager path. At this point, the computer is still a member server, not a domain controller.
If you close the wizard, refresh Server Manager and open the notification or task area to find the promotion link again. The role can also be verified with:
Get-WindowsFeature AD-Domain-ServicesStage 2: Promote the server
Create a new forest
- On Deployment Configuration, select Add a new forest.
- Enter the root domain name, for example
corp.example.com. - On Domain Controller Options, select forest and domain functional levels appropriate for the oldest controller you intend to support.
- Leave Domain Name System (DNS) server selected unless you have a documented alternative DNS design.
- Leave Global Catalog (GC) selected for the first domain controller.
- Set and securely record the DSRM password.
- Review DNS Options, including any delegation warning.
- On Additional Options, verify the proposed NetBIOS name.
- Review the database, log, and SYSVOL paths.
- Use Review Options to check the configuration.
- Run the Prerequisites Check and resolve every failure.
- Select Install and allow the server to restart.
The process creates a forest, forest-root domain, DNS configuration if selected, AD database, and SYSVOL structure. Once the actual promotion phase starts, it cannot be canceled safely. The server reboots automatically when promotion completes.
Add a domain controller to an existing domain
- On Deployment Configuration, select Add a domain controller to an existing domain.
- Enter or select the existing domain and provide suitable credentials.
- On Domain Controller Options, choose whether to install DNS and whether the server should be a Global Catalog.
- Select a replication-source domain controller when appropriate.
- Set the DSRM password.
- Review the database, log, and SYSVOL locations.
- Run the prerequisite checks and correct all failures.
- Select Install and allow the restart.
A second controller improves availability, but it is not automatically a complete resilience plan. DNS, replication, site links, time, backups, network paths, and FSMO-role recovery must also be considered.
Install a read-only domain controller
For an RODC, select Add a domain controller to an existing domain and enable the read-only controller option when presented. Configure delegated installation and the password-replication policy, including which credentials may be cached.
An RODC is designed for particular branch-office and physical-security scenarios. It is not an equivalent replacement for a writable domain controller and has administrative and credential-caching limitations.
Free tools Windows power users keep installed
One-click scans. No signup required.
Functional levels: do not simply choose the highest value
Forest and domain functional levels control supported domain-controller operating systems and available AD DS capabilities. They are not the same thing as the Windows Server version shown in the wizard.
Choose a level compatible with the oldest domain controller and the upgrade plan. Raising a functional level is a forest- or domain-wide decision and may prevent older controllers from operating in the environment. Consult Microsoft’s functional-level documentation before making the choice.
Validate the domain controller after reboot
Do not stop at a successful restart. Sign in and verify the basic directory, DNS, sharing, and replication functions.
PowerShell checks
Get-ADDomain
Get-ADForest
Get-ADDomainController -Filter *Confirm that the expected forest and domain names are returned and that the new server appears as a domain controller.
Services and shares
Confirm that Active Directory Domain Services, DNS Server when installed, and Netlogon are running. From Command Prompt, run:
net shareThe SYSVOL and NETLOGON shares should be present.
Diagnostics
dcdiag /v
dcdiag /test:dnsIn an environment with multiple domain controllers, also run:
repadmin /replsummary
repadmin /showreplA clean dcdiag result is useful, but it does not prove that every application, DNS delegation, firewall rule, site link, or backup process is correct.
Review logs
For promotion failures, inspect:
%SystemRoot%debugdcpromo.log
%SystemRoot%debugdcpromoui.logAlso check the Directory Service, DNS Server, System, and DFS Replication event logs where applicable. Active Directory Web Services should also be running if remote management tools depend on it.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →PowerShell alternative
The Server Manager wizard and PowerShell use the same AD DS deployment architecture. PowerShell is preferable for repeatable deployments, Server Core, automation, and documented configuration.
Rank #4
- 【Perfectly Fit in Server Aprons】: Our black server book size is 8.15" x 5.12" x 0.59", which can hold a regular guest checkbook and is handy to be carried in a server apron pocket, won’t be too tight or too big, efficiency as a server money holder.
- 【Stay Organized All in Needs】: 9 compartments and 1 pen holder in one serving book, with a zipper pocket to store your coins, changes, and money. Multi-functional pockets to organize checkbooks, cash, ticket books, server pads, credit cards, coupons, or any other paper documents, nice waitress accessories partner for servers.
- 【Waterproof Leather Material】: The waitress book is made of premium sturdy and longevity PU leather, Eco-friendly and odorless, features excellent workmanship and tight stitching, easy to clean. Plus an elastic pen loop to be a nice waitstaff organizer to help you hold the pen that is always away from home and improve the service speed.
- 【Portable and Long-lasting】: Our server books for the waiter are lightweight to carry around, and sturdy as a guest checkbook holder, premium material makes them sturdy and longevity and won’t easily deform or press the belly when bent over.
- 【100% Satisfaction Guarantee】: We hope you love your server book wallet and place your order with confidence, all of our men’s & women’s server books are backed by a full replacement guarantee. Any questions will be answered within 24 hours.
Install the role
Install-WindowsFeature AD-Domain-Services -IncludeManagementToolsCreate a new forest
Install-ADDSForest `
-DomainName "corp.example.com" `
-DomainNetbiosName "CORP" `
-InstallDnsThe command prompts for the DSRM password unless additional parameters are supplied.
Add a domain controller
Install-ADDSDomainController `
-DomainName "corp.example.com" `
-InstallDns `
-Credential (Get-Credential)Create a child domain
Install-ADDSDomain `
-NewDomainName "child" `
-ParentDomainName "corp.example.com" `
-InstallDns `
-Credential (Get-Credential)-NoRebootOnCompletion can suppress the automatic reboot, but this is an exception for controlled automation, not a recommended normal operating procedure. The controller needs to restart to operate correctly.
Troubleshoot common failures
The promotion link is missing
Refresh Server Manager, check Notifications and Tasks, and confirm that the correct destination server was selected. Verify the role with:
Get-WindowsFeature AD-Domain-ServicesA pending restart or servicing operation may also prevent the link from appearing. Reopen Server Manager after addressing it.
DNS prerequisite checks fail
Common causes include an incorrect preferred DNS server, unreachable existing DNS, multiple network adapters with inconsistent settings, missing DNS delegation, or a name that already exists.
ipconfig /all
nslookup existing-domain.example.com
nslookup -type=SRV _ldap._tcp.dc._msdcs.existing-domain.example.comCorrect the internal DNS configuration and connectivity before rerunning the wizard. Do not bypass the checks with public DNS or by disabling networking controls indiscriminately.
Time or Kerberos errors appear
Check the time source and status:
w32tm /query /status
w32tm /query /source
w32tm /resyncVirtual machines can drift when both the hypervisor and the domain hierarchy attempt to control time. Design a consistent domain time hierarchy instead of repeatedly changing the clock by hand.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsPermissions are insufficient
Check that the account matches the deployment type: local Administrator for a new forest, appropriate enterprise privileges for a new domain, and appropriate domain privileges for an additional controller. Do not use -skipprechecks to work around a permissions or readiness problem; bypassing prerequisite checks can cause partial promotion or forest damage.
Best Value
- 100% Satisfaction Warranty – Our servers book for waitress organization are handcrafted with elegant stitching that lasts. We take pride in offering our customers a waitress book made to exceptional quality standards. To ensure satisfaction, every waiters checkbook is backed by a 1-YEAR WARRANTY. If you are not 100% SATISFIED for any reason we will send you a replacement. No Questions Asked
- Holds up under Pressure – When you're taking orders the last thing you need is a flimsy waiter book that keeps bending. Our 8”x5” server books for waitress organization is the only one with a premium reinforced dual inner core. Providing an unmatched sturdy reliable writing surface that will last for years
- On Another Level – Halt the endless cycle of replacing your cheap thin black server book that barely lasts a week. This serving book for waitresses can become your permanent partner. Crafted with overwhelmingly strong attention to detail, the waiter checkbook offers an unparalleled value that you won’t regret investing in
- Scribble In Style – Impression is everything. You’re making a statement when you bring out this sleek vegan leather serving book. Our serving books have no logos or images and exquisite stitching for a professional feel your colleagues will envy
- Stay Calm and Collected – Whether you have 1 table or 7, organization is key. This server checkbook has 9 versatile pockets including a durable metal zipper to keep your cash secure. Stay on top of everything with this deluxe server book organizer and bring superior service to every customer
Promotion fails or leaves an uncertain state
- Record the exact error and inspect
dcpromo.loganddcpromoui.log. - Review Directory Service, DNS, System, and DFS Replication events.
- Do not manually delete the AD database or SYSVOL files.
- Determine whether the server was actually promoted.
- Use the supported demotion procedure if removal is required.
- In an existing forest, consult an experienced AD administrator before forced demotion or metadata cleanup.
For a disposable new lab forest, rebuilding may be safer than improvised repair. In production, preserve evidence and follow a documented recovery plan.
Virtual machines, backups, and single-controller risk
AD DS works well in virtual machines when virtual hardware and storage are stable and time synchronization is controlled. Do not treat VM snapshots as an Active Directory backup strategy. Maintain System State-capable backups, keep at least one copy off the host, and test restoration procedures.
A lab may use one controller. Production environments should normally plan for multiple controllers, independent DNS availability, replication monitoring, FSMO-role recovery, and tested backups. Replication is not a backup: it also replicates deletions and many configuration mistakes.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Should you still deploy Windows Server 2012?
Use this procedure for training, compatibility work, or carefully managed legacy maintenance—not as the default for a new production deployment. Windows Server 2012 and 2012 R2 ended extended support on October 10, 2023. The final ESU coverage period ends October 13, 2026, and ESUs provide defined security updates rather than normal product support or new features.
For an existing installation, treat ESUs, Azure migration, or Azure Arc enrollment as time-limited risk-reduction options while planning an upgrade or migration. On-premises ESUs are not a substitute for moving to a supported platform. Eligible Azure migrations may receive ESUs at no additional charge above Azure costs, while ordinary cloud hosting still incurs compute, storage, networking, backup, and management charges.
For a new deployment, evaluate a currently supported Windows Server release, a managed service such as Microsoft Entra Domain Services where its limitations fit, or a migration plan that removes the dependency on traditional AD DS. Any production design should budget for licensing, CALs, virtualization or cloud costs, DNS, backups, monitoring, and recovery operations.
See Microsoft’s lifecycle record and ESU overview for current coverage details.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
