> For the complete documentation index, see [llms.txt](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/zyberlab/02-active-directory-basics/install-active-directory-domain-services.md).

# Install Active Directory Domain Services

## Objective

Install the **Active Directory Domain Services (AD DS)** server role on `DC01`.

At this stage we are only installing the role. The server will become a domain controller in the next lab.

## Open Server Manager

1. Sign in to `DC01` with the local Administrator account.
2. Open **Server Manager**.
3. Select **Manage** → **Add Roles and Features**.

## Add the Role

1. On **Before you begin**, select **Next**.
2. Select **Role-based or feature-based installation**.
3. Select `DC01` from the server pool.
4. In **Server Roles**, select **Active Directory Domain Services**.
5. When prompted, select **Add Features**.
6. Select **Next** through the Features page.
7. Review the AD DS information page.
8. Select **Next**.
9. Select **Install**.

Wait for the installation to complete.

You do not normally need to restart the server just for the role installation.

## What Was Installed?

AD DS provides the core services used by a Windows domain, including the directory database that stores objects such as:

* users
* computers
* groups
* organizational units
* security-related attributes

The server is not yet a domain controller. It must still be **promoted**.

## Verify

In Server Manager, confirm that **AD DS** appears in the left navigation.

You should also see a notification flag indicating that post-deployment configuration is required.

The notification normally includes:

```
Promote this server to a domain controller
```

Do not promote it until you are ready to complete the next page.

## Security Relevance

Active Directory becomes a central identity and authentication service. Because of that, domain controllers are high-value systems and should be treated as sensitive infrastructure.

Later labs will examine security events generated when users authenticate or when privileged groups and directory objects change.

## Checkpoint

Before continuing, confirm:

* the server name is `DC01`
* `DC01` has a static IPv4 address
* AD DS is installed successfully
* the promotion notification is visible