1, test preparation
three good clone a virtual machine, planning of the domain name, 17net1.com
- One of the two computers will be renamed
- And set ip address
- DC ip address 192.168.20.1
- DNS ip address 12.168.20.2
- ip address of the client is 192.168.20.3
Computer renamed
IP address settings
Attention must turn off the firewall in advance 
preparatory work has already done the basic experiment, followed by the installation of the DNS server
A, DNS server, the installation
1, open Server Manager
2. Click on the Roles tab, click on the "Add role" 
4. Select the DNS server to be installed 
after 5, select the server you want to install, installation wizard appears, follow the prompts to install 
the default installation.
6. Click the "Start" menu - "Administrative Tools" - "DNS Server" 
7, expand the drop-down list of DNS, right-click Forward Lookup Zones, select "New Zone." 
8, the new area in step 
click '' complete ', a region now created.
9, adding an own DNS A record in the zone
10. After you create an A record, but also to modify the SOA and NS records. 
Modify the SOA record as the host name + domain name 
fully qualified domain name server fill in the DNS server host name + domain name, ip address fill in the DNS itself address 
11, DNS set up complete
Second, detailed steps to build the DC
1, modify the host name 
2, fill in the appropriate segment of the ip address, and DNS address previously planned.
3, turn off the firewall 
4, set up the server, open the "Server Manager" 
5, click on the "role" - "Add Role" 
6, the detailed steps to install AD 
will pop up an option box when selecting a domain controller services, select "Add must the function " 
by default, click Next to install successfully.
7, after the installation of a domain controller services, the need for secondary configuration
press Windows + R key combination to
enter the dcpromo 
8, the following window will pop up, in the following screenshot does not appear in accordance with the default option click the "Next" button 
Note certainly the "DNS" this option removed 
when an error message appears, click "Yes" to 
the password when setting a password, be sure to remember the set. You would not forget downgrade of DNS, the domain can not be deleted. 
9 After the installation is complete, do not worry restart, to look at whether firewalls are already in the "off" state, we found that there is a domain firewall is not turned off, click "Close", restart the computer. 
10, after a reboot, you will find in the forward lookup zone will appear in the following several record 
11, Which shows that build success.
Third, the client authentication stage
before a client to test, you need to modify the host name of the place, add the domain, and then enter the user name and password (domain controller domain administrative account and password) 
In this way, the whole experiment came to an end.