IT Professionals

Create A Child Domain In Windows Server 2008

Posted by on Nov 19, 2007 | 4 Comments

If you are familiar with Active Directory, you probably know that you can create multiple domains within a single forest. Multiple domains form trees within a forest. A tree can be defined as a hierarchical arrangement of domains within a forest.

A tree is established when a child domain is added to the hierarchy under an existing parent domain. When you add a new domain as a child domain, it inherits a portion of its namespace from its parent. When you create a new tree within a forest you are establishing a new namespace.

You can create a new child domain under Windows Server 2008 using the steps below:

  1. Click Start and then click Server Manager.
  2. In Roles Summary, click Add Roles.
  3. Review the information on the Before You Begin page and then click Next.
  4. On the Select Server Roles page, click the Active Directory Domain Services check box, and then click Next.
  5. Review the information on the Active Directory Domain Services page and then click Next.
  6. On the Confirm Installation Selections page, click Install.
  7. On the Installation Results page, click Close this wizard and launch the Active Directory Domain Services Installation Wizard (dcpromo.exe).
  8. On the Welcome to the Active Directory Domain Services Installation Wizard page, click Next.
  9. If you select the Use advanced mode installation check box, the wizard displays the Domain NetBIOS Name page and the Source Domain Controller page. On the Domain NetBIOS Name page, you can change the NetBIOS name that the wizard generates by default. On the Source Domain Controller page, you can choose a specific domain controller to use for sending and receiving domain data during the installation.
  10. On the Choose a Deployment Configuration page, click Existing forest and Create a new domain in an existing forest. Click Next.
  11. On the Network Credentials page, type the name of any existing domain in the forest where you plan to install a new domain. Under Specify the account credentials to use to perform the installation, click My current logged on credentials or click Alternate credentials, and then click Set. In the Windows Security dialog box, provide the user name and password for an account that can install the new domain. Click Next.
  12. On the Name the New Domain page, type the fully qualified domain name (FQDN) of the parent domain and the single-label name of the child domain. Click Next.
  13. On the Domain NetBIOS Name page, change the name, if necessary, and then click Next.
  14. On the Set Domain Functional Level page, select the domain functional level that accommodates the domain controllers that you plan to install anywhere in the domain. Click Next.
  15. On the Select a Site page, select a site from the list or select the option to install the domain controller in the site that corresponds to its IP address. Click Next.
  16. On the Additional Domain Controller Options page, select any additional options for the domain controller. Click Next.
  17. On the Source Domain Controller page, select Any writable domain controller or select This specific domain controller to specify a domain controller from which to replicate the configuration and schema directory partitions. Click Next.
  18. On the Location for Database, Log Files, and SYSVOL page, type or browse to the volume and folder locations for the database file, the directory service log files, and the SYSVOL files. Click Next.
  19. On the Directory Services Restore Mode Administrator Password page, type and confirm the restore mode password, and then click Next.
  20. On the Summary page, review your selections. Click Back to change any selections, if necessary.
  21. When you are sure that your selections are accurate, click Next to install AD DS.
  22. On the Completing the Active Directory Domain Services Installation Wizard page, click Finish.
  23. You can either select the Reboot on completion check box to have the server restart automatically or you can restart the server to complete the AD DS installation when you are prompted to do so.
  • Kevin

    Hi Diana,

    I got a question! We are using Windows 2003 AD. Can I add create another Child domain using windows 2008 under the 2003 forest?

    I am using pcpromo wizard to add a new Child DC. after typing the new domain name, the system pop up “…you must first prepare the forest using “adprep/forestprep”…”. Do I need to run this utility in the Widows 2003 DC? I try to not touch our current 2003 DC. Is any suggestion? Thanks!

  • Kevin

    Hi Diana,

    We have 2003 AD. Could I add a new windows 2008 as a child domain under the 2003 AD?

    Do I have to run “adprep /forestprep” in 2003 DC?

  • http://keshavrajak55@yahoo.com keshav rajak

    If you are familiar with Active Directory, you probably know that you can create multiple domains within a single forest. Multiple domains form trees within a forest. A tree can be defined as a hierarchical arrangement of domains within a forest.

    A tree is established when a child domain is added to the hierarchy under an existing parent domain. When you add a new domain as a child domain, it inherits a portion of its namespace from its parent. When you create a new tree within a forest you are establishing a new namespace.

    You can create a new child domain under Windows Server 2008 using the steps below:

    Click Start and then click Server Manager.
    In Roles Summary, click Add Roles.
    Review the information on the Before You Begin page and then click Next.
    On the Select Server Roles page, click the Active Directory Domain Services check box, and then click Next.
    Review the information on the Active Directory Domain Services page and then click Next.
    On the Confirm Installation Selections page, click Install.
    On the Installation Results page, click Close this wizard and launch the Active Directory Domain Services Installation Wizard (dcpromo.exe).
    On the Welcome to the Active Directory Domain Services Installation Wizard page, click Next.
    If you select the Use advanced mode installation check box, the wizard displays the Domain NetBIOS Name page and the Source Domain Controller page. On the Domain NetBIOS Name page, you can change the NetBIOS name that the wizard generates by default. On the Source Domain Controller page, you can choose a specific domain controller to use for sending and receiving domain data during the installation.
    On the Choose a Deployment Configuration page, click Existing forest and Create a new domain in an existing forest. Click Next.
    On the Network Credentials page, type the name of any existing domain in the forest where you plan to install a new domain. Under Specify the account credentials to use to perform the installation, click My current logged on credentials or click Alternate credentials, and then click Set. In the Windows Security dialog box, provide the user name and password for an account that can install the new domain. Click Next.
    On the Name the New Domain page, type the fully qualified domain name (FQDN) of the parent domain and the single-label name of the child domain. Click Next.
    On the Domain NetBIOS Name page, change the name, if necessary, and then click Next.
    On the Set Domain Functional Level page, select the domain functional level that accommodates the domain controllers that you plan to install anywhere in the domain. Click Next.
    On the Select a Site page, select a site from the list or select the option to install the domain controller in the site that corresponds to its IP address. Click Next.
    On the Additional Domain Controller Options page, select any additional options for the domain controller. Click Next.
    On the Source Domain Controller page, select Any writable domain controller or select This specific domain controller to specify a domain controller from which to replicate the configuration and schema directory partitions. Click Next.
    On the Location for Database, Log Files, and SYSVOL page, type or browse to the volume and folder locations for the database file, the directory service log files, and the SYSVOL files. Click Next.
    On the Directory Services Restore Mode Administrator Password page, type and confirm the restore mode password, and then click Next.
    On the Summary page, review your selections. Click Back to change any selections, if necessary.
    When you are sure that your selections are accurate, click Next to install AD DS.
    On the Completing the Active Directory Domain Services Installation Wizard page, click Finish.
    You can either select the Reboot on completion check box to have the server restart automatically or you can restart the server to complete the AD DS installation when you are prompted to do so.

  • Jsandoval_89

    I have a problem, i am doing a test installation of this particular situation, everything is fine until the summary where i click the install but then it says that “replication access was denied”