!"#$ &'( !"#$%& !"#$%&' )*+,*+ -.

/-
!"#$ &'()*+,-".*'(

MlcrosofL CorporaLlon
ubllshed: SepLember 10, 2012

"#$%&'(%
1hls MlcrosofL 1esL Lab Culde (1LC) provldes sLep-by-sLep lnsLrucLlons Lo creaLe Lhe
Wlndows Server 2012 8ase ConflguraLlon LesL lab, uslng compuLers runnlng Wlndows
Server 2012 and Wlndows 8. WlLh Lhe resulLlng LesL lab envlronmenL, you can bulld LesL
labs based on oLher Wlndows Server 2012-based 1LCs from MlcrosofL, 1LC exLenslons ln
Lhe 1echneL Wlkl, or a LesL lab of your own deslgn LhaL can lnclude MlcrosofL or non-
MlcrosofL producLs. lor a LesL lab based on physlcal compuLers, you can lmage Lhe
drlves for fuLure LesL labs. lor a LesL lab based on vlrLual machlnes, you can creaLe
snapshoLs of Lhe base conflguraLlon vlrLual machlnes. 1hls enables you Lo easlly reLurn
Lo Lhe base conflguraLlon LesL lab, where mosL of Lhe rouLlne lnfrasLrucLure and
neLworklng servlces have already been conflgured, so LhaL you can focus on bulldlng a
LesL lab for Lhe producL, Lechnology, or soluLlon of lnLeresL.




)*+,&-./% 012*&3'%-*1
1hls documenL ls provlded for lnformaLlonal purposes only and MlcrosofL makes no
warranLles, elLher express or lmplled, ln Lhls documenL. lnformaLlon ln Lhls documenL,
lncludlng u8L and oLher lnLerneL Web slLe references, ls sub[ecL Lo change wlLhouL
noLlce. 1he enLlre rlsk of Lhe use or Lhe resulLs from Lhe use of Lhls documenL remalns
wlLh Lhe user. unless oLherwlse noLed, Lhe example companles, organlzaLlons, producLs,
domaln names, e-mall addresses, logos, people, places, and evenLs deplcLed hereln are
flcLlLlous, and no assoclaLlon wlLh any real company, organlzaLlon, producL, domaln
name, e-mall address, logo, person, place, or evenL ls lnLended or should be lnferred.
Complylng wlLh all appllcable copyrlghL laws ls Lhe responslblllLy of Lhe user. WlLhouL
llmlLlng Lhe rlghLs under copyrlghL, no parL of Lhls documenL may be reproduced, sLored
ln or lnLroduced lnLo a reLrleval sysLem, or LransmlLLed ln any form or by any means
(elecLronlc, mechanlcal, phoLocopylng, recordlng, or oLherwlse), or for any purpose,
wlLhouL Lhe express wrlLLen permlsslon of MlcrosofL CorporaLlon.

MlcrosofL may have paLenLs, paLenL appllcaLlons, Lrademarks, copyrlghLs, or oLher
lnLellecLual properLy rlghLs coverlng sub[ecL maLLer ln Lhls documenL. LxcepL as
expressly provlded ln any wrlLLen llcense agreemenL from MlcrosofL, Lhe furnlshlng of
Lhls documenL does noL glve you any llcense Lo Lhese paLenLs, Lrademarks, copyrlghLs,
or oLher lnLellecLual properLy.

2012 MlcrosofL CorporaLlon. All rlghLs reserved.
uaLe of lasL updaLe: SepLember 10, 2012
MlcrosofL, Wlndows, AcLlve ulrecLory, lnLerneL Lxplorer, and Wlndows Server are elLher
reglsLered Lrademarks or Lrademarks of MlcrosofL CorporaLlon ln Lhe unlLed SLaLes
and/or oLher counLrles.

All oLher Lrademarks are properLy of Lhelr respecLlve owners.



)*1%41%$
lnLroducLlon ........................................................................................................................ 3
ln Lhls gulde ..................................................................................................................... 3
1esL lab overvlew ............................................................................................................ 6
Pardware and sofLware requlremenLs ............................................................................ 7
Changes from Lhe Wlndows Server 2008 82 8ase ConflguraLlon .................................... 8
SLeps for Conflgurlng Lhe CorpneL SubneL ......................................................................... 8
SLep 1: Conflgure uC1 ..................................................................................................... 8
lnsLall Lhe operaLlng sysLem on uC1 ............................................................................ 9
Conflgure 1C/l properLles on uC1 ............................................................................ 9
Conflgure uC1 as a domaln conLroller and unS server .............................................. 10
lnsLall and conflgure uPC on uC1 ............................................................................ 12
CreaLe a user accounL ln AcLlve ulrecLory on uC1 ..................................................... 13
SLep 2: Conflgure A1 .................................................................................................. 14
lnsLall Lhe operaLlng sysLem on A1 ......................................................................... 14
Conflgure 1C/l properLles on A1 ........................................................................ 14
!oln A1 Lo Lhe CC8 domaln .................................................................................. 13
lnsLall Lhe Web Server (llS) role on A1 ................................................................... 13
CreaLe a shared folder on A1 ................................................................................. 16
SLep 3: Conflgure CLlLn11 ............................................................................................. 17
lnsLall Lhe operaLlng sysLem on CLlLn11 .................................................................... 17
user accounL conLrol .................................................................................................. 17
!oln CLlLn11 Lo Lhe CC8 domaln .............................................................................. 17
1esL access Lo resources from Lhe CorpneL subneL .................................................... 18
SLeps for Conflgurlng Lhe lnLerneL SubneL ....................................................................... 18
SLep 1: Conflgure LuCL1 ............................................................................................... 19
lnsLall Lhe operaLlng sysLem on LuCL1 ...................................................................... 19
Conflgure 1C/l properLles on LuCL1 ...................................................................... 19
!oln LuCL1 Lo Lhe CC8 domaln ................................................................................ 20
SLep 2: Conflgure lnL11 ................................................................................................. 21
lnsLall Lhe operaLlng sysLem on lnL11 ....................................................................... 21
Conflgure 1C/l properLles on lnL11 ....................................................................... 22
8ename Lhe compuLer Lo lnL11 ................................................................................. 23
lnsLall Lhe unS Server and Web Server (llS) server roles on lnL11 ............................ 23
Conflgure Lhe nCSl web slLe on lnL11 ....................................................................... 26
1esL access Lo lnLerneL resources from Lhe lnLerneL subneL ...................................... 27
SnapshoL Lhe ConflguraLlon .............................................................................................. 28


AddlLlonal 8esources ........................................................................................................ 28
Appendlx ........................................................................................................................... 29
SeL uAC behavlor of Lhe elevaLlon prompL for admlnlsLraLors ..................................... 29
asLlng LexL Lo Pyper-v guesLs someLlmes resulLs ln garbled characLers ..................... 29


5
01%&*56(%-*1
1esL Lab Culdes (1LCs) allow you Lo geL hands-on experlence wlLh new producLs and
Lechnologles uslng a pre-deflned and LesLed meLhodology LhaL resulLs ln a worklng
conflguraLlon. When you use a 1LC Lo creaLe a LesL lab, lnsLrucLlons Lell you whaL servers Lo
creaLe, how Lo conflgure Lhe operaLlng sysLems and plaLform servlces, and how Lo lnsLall and
conflgure any addlLlonal producLs or Lechnologles. A 1LC experlence enables you Lo see all of
Lhe componenLs and Lhe conflguraLlon sLeps on boLh Lhe fronL-end and back-end LhaL go lnLo a
slngle- or mulLl-producL or Lechnology soluLlon.
A challenge ln creaLlng useful 1LCs ls Lo enable Lhelr reusablllLy and exLenslblllLy. 8ecause
creaLlng a LesL lab can represenL a slgnlflcanL lnvesLmenL of Llme and resources, your ablllLy Lo
reuse and exLend Lhe work requlred Lo creaLe LesL labs ls lmporLanL. An ldeal LesL lab
envlronmenL would enable you Lo creaLe a baslc lab conflguraLlon, save LhaL conflguraLlon, and
Lhen bulld ouL mulLlple LesL labs ln Lhe fuLure by sLarLlng wlLh LhaL baslc conflguraLlon.
1he purpose of Lhls 1LC ls Lo enable you Lo creaLe Lhe Wlndows Server 2012 8ase ConflguraLlon
LesL lab, upon whlch you can bulld a LesL lab based on oLher Wlndows Server 2012-based 1LCs
from MlcrosofL, 1LC exLenslons ln Lhe 1echneL Wlkl, or a LesL lab of your own deslgn LhaL can
lnclude MlcrosofL or non-MlcrosofL producLs. See Wlndows Server 2012 1esL Lab Culdes for more
lnformaLlon.
uependlng on how you deploy your LesL lab envlronmenL, you can lmage Lhe drlves for Lhe
Wlndows Server 2012 8ase ConflguraLlon LesL lab lf you are uslng physlcal compuLers or you
can creaLe snapshoLs of Lhe LesL lab vlrLual machlnes. 1hls enables you Lo easlly reLurn Lo
basellne conflguraLlon where mosL of Lhe rouLlne cllenL, server, and neLworklng servlces have
already been conflgured so LhaL you can focus on bulldlng ouL a LesL lab for Lhe producLs or
Lechnologles of lnLeresL. lor Lhls reason, make sure LhaL you perform a dlsk lmage on each
compuLer lf you're uslng physlcal compuLers, or perform vlrLual machlne snapshoLs lf you are
uslng vlrLual machlnes afLer compleLlng all Lhe sLeps ln Lhls 1LC.
1he Wlndows Server 2012 8ase ConflguraLlon 1LC ls [usL Lhe beglnnlng of Lhe LesL lab
experlence. CLher Wlndows Server 2012-based 1LCs or LesL lab exLenslons focus on MlcrosofL
producLs or plaLform Lechnologles, buL all of Lhem use Lhls Wlndows Server 2012 8ase
ConflguraLlon 1LC as a sLarLlng polnL. lor a descrlpLlon of Lhe dlfferenL Lypes of 1LC conLenL,
see 1esL Lab Culdes.
01 %/-$ .6-54
1hls documenL conLalns lnsLrucLlons for seLLlng up Lhe Wlndows Server 2012 8ase
ConflguraLlon LesL lab by deploylng four server compuLers runnlng Wlndows Server 2012
SLandard and one cllenL compuLer runnlng Wlndows 8 LnLerprlse. 1he resulLlng conflguraLlon
slmulaLes a prlvaLe lnLraneL and Lhe lnLerneL.


6
Important!
1he followlng lnsLrucLlons are for conflgurlng Lhe Wlndows Server 2012 8ase
ConflguraLlon LesL lab. lndlvldual compuLers are needed Lo separaLe Lhe servlces
provlded on Lhe neLwork and Lo clearly show Lhe deslred funcLlonallLy. 1hls
conflguraLlon ls nelLher deslgned Lo reflecL besL pracLlces nor does lL reflecL a deslred or
recommended conflguraLlon for a producLlon neLwork. 1he conflguraLlon, lncludlng l
addresses and all oLher conflguraLlon parameLers, ls deslgned only Lo work on a
separaLe LesL lab neLwork. lor lnformaLlon abouL deploylng Wlndows Server 2012 ln a
plloL or producLlon envlronmenL, see lnsLall and ueploy Wlndows Server 2012.
Note:
lf you are able Lo work from a compuLer-based copy of Lhls documenL durlng Lhe lab
exerclses and you are runnlng vlrLual machlnes ln Pyper-v, use Lhe followlng
lnsLrucLlons Lo leverage Lhe Pyper-v cllpboard lnLegraLlon feaLure Lo pasLe
commands. 1hls wlll mlnlmlze poLenLlal errors wlLh mlsLyped command sLrlngs.

1. PlghllghL and rlghL-cllck a command from Lhls documenL llsLed ln bo|d LexL.
2. Cllck Copy.
3. lrom Lhe vlrLual machlne menu bar, cllck C||pboard, and Lhen cllck 1ype
c||pboard text.

74$% 8'# *94&9-4:
1he Wlndows Server 2012 8ase ConflguraLlon LesL lab conslsLs of Lhe followlng:
Cne compuLer runnlng Wlndows Server 2012 SLandard named uC1 LhaL ls conflgured as an
lnLraneL domaln conLroller, uomaln name SysLem (unS) server, and uynamlc PosL
ConflguraLlon roLocol (uPC) server.
Cne lnLraneL member server runnlng Wlndows Server 2012 SLandard named A1 LhaL ls
conflgured as a general appllcaLlon and web server.
Cne member cllenL compuLer runnlng Wlndows 8 LnLerprlse named CLlLn11 LhaL wlll
swlLch beLween lnLerneL and lnLraneL subneLs.
Cne lnLraneL member server runnlng Wlndows Server 2012 SLandard named LuCL1 LhaL ls
conflgured as an lnLerneL edge server.
Cne sLandalone server runnlng Wlndows Server 2012 SLandard named lnL11 LhaL ls
conflgured as an lnLerneL unS server, web server, and uPC server.
1he Wlndows Server 2012 8ase ConflguraLlon LesL lab conslsLs of Lwo subneLs LhaL slmulaLe Lhe
followlng:
A prlvaLe lnLraneL, referred Lo as Lhe CorpneL subneL (10.0.0.0/24).
1he lnLerneL, referred Lo as Lhe lnLerneL subneL (131.107.0.0/24), separaLed from Lhe
CorpneL subneL by LuCL1.
CompuLers on each subneL connecL uslng a physlcal hub, swlLch, or vlrLual swlLch. See llgure 1
for Lhe conflguraLlon of Lhe Wlndows Server 2012 8ase ConflguraLlon LesL lab.


7

I|gure 1 W|ndows Server 2012 8ase Conf|gurat|on test |ab
1hls documenL descrlbes how Lo bulld ouL Lhe Wlndows Server 2012 8ase ConflguraLlon LesL lab
ln Lwo secLlons:
SLeps for conflgurlng Lhe CorpneL subneL (uC1, A1, and CLlLn11)
SLeps for conflgurlng Lhe lnLerneL subneL (LuCL1 and lnL11)
1here are some 1LCs LhaL requlre only Lhe CorpneL subneL. Powever, lL ls sLrongly
recommended LhaL you bulld ouL boLh subneLs lf you ever plan Lo LesL Lechnologles, producLs,
or soluLlons LhaL lnclude access Lo CorpneL servers and servlces from Lhe lnLerneL. 1he
Wlndows Server 2012 8ase ConflguraLlon LesL lab envlronmenL conslsLlng of boLh subneLs can
be saved and reused for oLher 1LCs. 8y bulldlng ouL boLh Lhe CorpneL and lnLerneL subneLs, you
wlll have a reusable snapshoL of Lhe enLlre Wlndows Server 2012 8ase ConflguraLlon LesL lab
LhaL can be used for many 1LCs, whlch have Lhls sLarLlng LesL lab ln a unlfled and conslsLenL
sLaLe.
;'&5:'&4 '15 $*2%:'&4 &4<6-&4341%$
1he followlng are Lhe mlnlmum requlred componenLs of Lhe LesL lab:


8
1he producL dlsc or flles for Wlndows Server 2012 SLandard. lor a Lrall verslon, see
uownload Wlndows Server 2012.
1he producL dlsc or flles for Wlndows 8 LnLerprlse. lor a Lrall verslon, see uownload Wlndows
8 LnLerprlse LvaluaLlon.
lour compuLers LhaL meeL Lhe mlnlmum hardware requlremenLs for Wlndows Server 2012
SLandard. Cne of Lhese compuLers (LuCL1) has Lwo neLwork adapLers lnsLalled.
Cne compuLer LhaL meeLs Lhe mlnlmum hardware requlremenLs for Wlndows 8 LnLerprlse.
lf you wlsh Lo deploy Lhe Wlndows Server 2012 8ase ConflguraLlon LesL lab ln a vlrLuallzed
envlronmenL, your vlrLuallzaLlon soluLlon musL supporL Wlndows Server 2012 64-blL vlrLual
machlnes. 1he server hardware musL supporL Lhe amounL of 8AM requlred Lo run Lhe
vlrLual operaLlng sysLems lncluded ln Lhe Wlndows Server 2012 8ase ConflguraLlon LesL lab
and any oLher vlrLual machlnes LhaL may be requlred by addlLlonal 1LCs.
Important
8un Wlndows updaLe on all compuLers or vlrLual machlnes elLher durlng Lhe lnsLallaLlon or
lmmedlaLely afLer lnsLalllng Lhe operaLlng sysLems. AfLer runnlng Wlndows updaLe, you can
lsolaLe your physlcal or vlrLual LesL lab from your producLlon neLwork.
)/'1.4$ 2&*3 %/4 =-15*:$ >4&94& ?@@A B? C'$4 )*12-.6&'%-*1
1he followlng are Lhe changes from Lhe prevlous 1esL Lab Culde: 8ase ConflguraLlon, whlch uses
compuLers runnlng Wlndows Server 2008 82 and Wlndows 7:
1he conflguraLlon of a slmpllfled publlc key lnfrasLrucLure (kl) has been removed. ?ou can
add Lhls wlLh Lhe 8aslc kl for Lhe Wlndows Server 2012 8ase ConflguraLlon 1LC mlnl-module.
Wlndows owerShell command equlvalenLs are now avallable ln addlLlon Lo Lhe ul-based
procedures.
>%4+$ 2*& )*12-.6&-1. %/4 )*&+14% >6#14%
1here are Lhree sLeps Lo seLLlng up Lhe CorpneL subneL of Lhe Wlndows Server 2012 8ase
ConflguraLlon LesL lab.
1. Conflgure uC1.
2. Conflgure A1.
3. Conflgure CLlLn11.
Note
?ou musL be logged on as a member of Lhe uomaln Admlns group or a member of Lhe
local AdmlnlsLraLors group on each compuLer Lo compleLe Lhe Lasks descrlbed ln Lhls
gulde.
1he followlng secLlons provlde deLalls abouL how Lo perform Lhese sLeps.
>%4+ DE )*12-.6&4 F)D
uC1 provldes Lhe followlng servlces:


9
A domaln conLroller for Lhe corp.conLoso.com AcLlve ulrecLory uomaln Servlces (Au uS)
domaln
A unS server for Lhe corp.conLoso.com unS domaln
A uPC server for Lhe CorpneL subneL
uC1 conflguraLlon conslsLs of Lhe followlng:
lnsLall Lhe operaLlng sysLem
Conflgure 1C/l
lnsLall AcLlve ulrecLory and unS
lnsLall uPC
CreaLe a user accounL ln AcLlve ulrecLory
01$%'88 %/4 *+4&'%-1. $,$%43 *1 F)D
llrsL, lnsLall Wlndows Server 2012 SLandard as a sLandalone server.
1o |nsta|| the operat|ng system on DC1
1. SLarL Lhe lnsLallaLlon of Wlndows Server 2012 SLandard.
2. lollow Lhe lnsLrucLlons Lo compleLe Lhe lnsLallaLlon, speclfylng Wlndows Server 2012
SLandard (full lnsLallaLlon) and a sLrong password for Lhe local AdmlnlsLraLor accounL.
Log on uslng Lhe local AdmlnlsLraLor accounL.
3. ConnecL uC1 Lo a neLwork LhaL has lnLerneL access and run Wlndows updaLe Lo lnsLall
Lhe laLesL updaLes for Wlndows Server 2012.
4. ConnecL uC1 Lo Lhe CorpneL subneL.
)*12-.6&4 7)GH0G +&*+4&%-4$ *1 F)D
nexL, conflgure Lhe 1C/l proLocol wlLh a sLaLlc l address of 10.0.0.1 and Lhe subneL mask of
233.233.233.0.
uo Lhls sLep uslng Wlndows owerShell


10
1o conf|gure 1C]I on DC1
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Lthernet ln Lhe roperLles Llle. noLe LhaL Lhe "LLherneL" lnLerface name may be
dlfferenL on your compuLer.
Note
1he llnk may noL lmmedlaLely appear. WalL for Lhe neLwork lnLerfaces Lo be
enumeraLed.
2. ln Network Connect|ons, rlghL-cllck Lthernet, and Lhen cllck ropert|es.
3. Cllck Internet rotoco| Vers|on 4 (1C]Iv4), and Lhen cllck ropert|es.
4. SelecL Use the fo||ow|ng I address. ln I address, Lype 10.0.0.1. ln Subnet mask, Lype
2SS.2SS.2SS.0. SelecL Use the fo||ow|ng DNS server addresses. In referred DNS
server, type 127.0.0.1.
3. Cllck Ck and Lhen close Lhe LLherneL roperLles dlalog.
6. Close Lhe Network Connect|ons wlndow.
7. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Computer name ln Lhe roperLles Llle.
8. Cn Lhe Computer Name Lab of Lhe SysLem roperLles dlalog, cllck Change.
9. ln Computer name, Lype DC1, cllck Ck Lwlce, and Lhen cllck C|ose. When you are
prompLed Lo resLarL Lhe compuLer, cllck kestart Now.
10. AfLer resLarLlng, logon uslng Lhe local AdmlnlsLraLor accounL.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability. Note that the "Ethernet" interface name may be different on your computer. Use the ipconfig /all
command to list the interfaces.

New-NetIPAddress 10.0.0.1 -InterfaceAlias "Ethernet" -PrefixLength 24
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses 127.0.0.1
Rename-Computer DC1
Restart-Computer

)*12-.6&4 F)D '$ ' 5*3'-1 (*1%&*884& '15 FI> $4&94&
nexL, conflgure uC1 as a domaln conLroller and unS server for Lhe corp.conLoso.com domaln.
uo Lhls sLep uslng Wlndows owerShell


11
1o conf|gure DC1 as a doma|n contro||er and DNS server
1. Launch Server Manager.
2. Cn Lhe Dashboard screen, under Conf|gure th|s |oca| server, cllck Add ro|es and
features.
3. Cllck Next Lhree Llmes Lo geL Lo Lhe server role selecLlon screen.
4. ln Lhe Se|ect Server ko|es dlalog, selecL Act|ve D|rectory Doma|n Serv|ces. Cllck
Add Ieatures when prompLed, and Lhen cllck Next.
3. ln Lhe Se|ect features dlalog, cllck Next.
6. ln Lhe Act|ve D|rectory Doma|n Serv|ces dlalog, cllck Next.
7. ln Lhe Conf|rm |nsta||at|on se|ect|ons dlalog, cllck Insta||. WalL for Lhe
lnsLallaLlon Lo compleLe.
8. ln Lhe Insta||at|on rogress dlalog, cllck Lhe romote th|s server to a Doma|n
Contro||er llnk.
Note: lf you close Lhe "lnsLallaLlon rogress" dlalog before lL presenLs Lhe
promoLlon llnk, cllck Lhe gray 1asks flag ln Lhe upper rlghL secLlon of Server
Manager. When Lhe lnsLallaLlon ls compleLe you wlll see Lhe romote th|s server
to a Doma|n Contro||er llnk.
9. ln Lhe Dep|oyment Conf|gurat|on dlalog, selecL Add a new forest. ln Lhe koot
doma|n name fleld, Lype corp.contoso.com. Cllck Next.
10. ln Lhe Doma|n Contro||er Cpt|ons dlalog, leave Lhe defaulL values, speclfy a
sLrong uS8M password Lwlce, and Lhen cllck Next four Llmes Lo accepL defaulL
seLLlngs for unS, neL8lCS, and dlrecLory paLhs.
11. ln Lhe kev|ew Cpt|ons dlalog, revlew your selecLlons and Lhen cllck Next.
Note: ?ou can also cllck Lhe V|ew scr|pt buLLon Lo revlew and save Lhe
owerShell commands LhaL Server Manager wlll run durlng uC romoLlon.
12. ln Lhe rerequ|s|tes Check dlalog, allow Lhe valldaLlon Lo compleLe and verlfy
LhaL no errors are reporLed. Slnce Lhls ls Lhe flrsL unS server deploymenL ln Lhe
foresL, you can safely lgnore all warnlngs regardlng unS delegaLlon. Cllck Insta||
Lo sLarL Lhe domaln conLroller promoLlon. Allow Lhe lnsLallaLlon Lo compleLe.
13. Allow Lhe domaln conLroller Lo resLarL. AfLer Lhe server resLarLs, logon uslng Lhe
CC8\AdmlnlsLraLor credenLlals.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure.

Install-WindowsFeature AD-Domain-Services -IncludeManagementTools
Install-ADDSForest -DomainName corp.contoso.com



12
Note
Wlndows owerShell ln Wlndows Server 2012 lmplemenLs dynamlc module loadlng. uslng
Lhe Import-Modu|e cmdleL ls no longer requlred, lnsLead, slmply lnvoklng Lhe cmdleL, allas,
or funcLlon auLomaLlcally loads Lhe module. 1o see loaded modules, use Lhe Get-Modu|e
cmdleL.
01$%'88 '15 (*12-.6&4 F;)G *1 F)D
nexL, conflgure uC1 as a uPC server so LhaL CLlLn11 can auLomaLlcally conflgure lLself when lL
connecLs Lo Lhe CorpneL subneL.
uo Lhls sLep uslng Wlndows owerShell
1o |nsta|| and conf|gure the DnC server ro|e on DC1
1. ln Lhe Dashboard console of Server Manager, under Conf|gure th|s |oca| server,
cllck Add ro|es and features.
2. Cllck Next Lhree Llmes Lo geL Lo Lhe server role selecLlon screen.
3. ln Lhe Se|ect server ro|es dlalog, selecL DnC Server, cllck Add Ieatures when
prompLed, and Lhen cllck Next.
4. ln Lhe Se|ect features dlalog, cllck Next.
3. Cllck Next on Lhe uPC Server screen, and Lhen cllck Insta||.
6. Allow Lhe lnsLallaLlon Lo compleLe, and Lhen ln Lhe 8esulLs wlndow, cllck Lhe llnk
for Comp|ete DnC conf|gurat|on.
7. ln Lhe uPC osL-lnsLall conflguraLlon wlzard, cllck Next, and Lhen cllck Comm|t.
8. Cn Lhe Summary page, cllck C|ose.
9. ln Lhe Add 8oles and leaLures Wlzard, cllck C|ose.
10. lrom Lhe Start screen, cllck DnC.
11. ln Lhe uPC console Lree, expand dc1.corp.contoso.com, and cllck Iv4. 8lghL-
cllck Iv4, and cllck New Scope.
12. Cllck Next ln Lhe new Scope Wlzard.
13. 1ype Corpnet for scope name, and Lhen cllck Next.
14. nexL Lo Start I Address, Lype 10.0.0.100, nexL Lo Lnd I Address, Lype
10.0.0.200, and nexL Lo Subnet Mask, Lype 2SS.2SS.2SS.0.
13. Cllck Next elghL Llmes Lo accepL all scope opLlon defaulL seLLlngs, and Lhen cllck
I|n|sh.
16. Close Lhe uPC Manager console.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability.



13
Install-WindowsFeature DHCP -IncludeManagementTools
Add-DhcpServerv4Scope -name "Corpnet" -StartRange 10.0.0.100 -EndRange 10.0.0.200 -
SubnetMask 255.255.255.0
Set-DhcpServerv4OptionValue -DnsDomain corp.contoso.com -DnsServer 10.0.0.1
Add-DhcpServerInDC -DnsName dc1.corp.contoso.com
)&4'%4 ' 6$4& '((*61% -1 "(%-94 F-&4(%*&, *1 F)D
nexL, creaLe a user accounL ln AcLlve ulrecLory LhaL wlll be used when logglng ln Lo CC8
domaln member compuLers.
uo Lhls sLep uslng Wlndows owerShell
1o create a user account |n Act|ve D|rectory
1. lrom Lhe Start screen, cllck Act|ve D|rectory Adm|n|strat|ve Center.
2. ln Lhe console Lree, cllck Lhe arrow Lo expand corp (|oca|), and Lhen double-cllck
Users. 1hls adds users as a recenL navlgaLlon llnk ln Lhe console Lree.
3. ln Lhe 1asks pane, cllck New, and Lhen cllck User.
4. ln Lhe CreaLe user dlalog, Lype User1 nexL Lo Iu|| name and Lype User1 nexL Lo
User SamAccountName |ogon: corp\.
3. ln assword, Lype Lhe password LhaL you wanL Lo use for Lhls accounL, and ln
Conf|rm password, Lype Lhe password agaln.
6. under assword opLlons, selecL Cther password opt|ons, and selecL assword
never exp|res.
7. Scroll down Lo access Lhe Member of secLlon of Lhe CreaLe user dlalog, and cllck
Add. 1ype Doma|n Adm|ns, Lnterpr|se Adm|ns, and Lhen cllck Ck.
8. Cllck Ck Lo close Lhe CreaLe user dlalog.
9. LxlL Lhe AcLlve ulrecLory AdmlnlsLraLlve CenLer.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability. Note that the first command results in a prompt to supply the User1 account password.

New-ADUser -SamAccountName User1 -AccountPassword (read-host "Set user password" -
assecurestring) -name "User1" -enabled $true -PasswordNeverExpires $true -
ChangePasswordAtLogon $false
Add-ADPrincipalGroupMembership -Identity
"CN=User1,CN=Users,DC=corp,DC=contoso,DC=com" -MemberOf "CN=Enterprise
Admins,CN=Users,DC=corp,DC=contoso,DC=com","CN=Domain
Admins,CN=Users,DC=corp,DC=contoso,DC=com"




14
>%4+ ?E )*12-.6&4 "GGD
A1 provldes web and flle sharlng servlces. A1 conflguraLlon conslsLs of Lhe followlng:
lnsLall Lhe operaLlng sysLem.
Conflgure 1C/l.
!oln Lhe compuLer Lo Lhe domaln.
lnsLall Lhe Web Server (llS) role.
CreaLe a shared folder.
01$%'88 %/4 *+4&'%-1. $,$%43 *1 "GGD
1o |nsta|| the operat|ng system on A1
1. SLarL Lhe lnsLallaLlon of Wlndows Server 2012 SLandard.
2. lollow Lhe lnsLrucLlons Lo compleLe Lhe lnsLallaLlon, speclfylng a sLrong password for
Lhe local AdmlnlsLraLor accounL. Log on uslng Lhe local AdmlnlsLraLor accounL.
3. ConnecL A1 Lo a neLwork LhaL has lnLerneL access and run Wlndows updaLe Lo
lnsLall Lhe laLesL updaLes for Wlndows Server 2012.
4. ConnecL A1 Lo Lhe CorpneL subneL.
)*12-.6&4 7)GH0G +&*+4&%-4$ *1 "GGD
uo Lhls sLep uslng Wlndows owerShell
1o conf|gure 1C]I propert|es on A1
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo Lthernet
ln Lhe roperLles Llle. noLe LhaL Lhe "LLherneL" lnLerface name may be dlfferenL on
your compuLer.
2. ln Network Connect|ons, rlghL-cllck Lthernet, and Lhen cllck ropert|es.
3. Cllck Internet rotoco| Vers|on 4 (1C]Iv4), and Lhen cllck ropert|es.
4. SelecL Use the fo||ow|ng I address. ln I address, Lype 10.0.0.3. ln Subnet mask, Lype
2SS.2SS.2SS.0.
3. SelecL Use the fo||ow|ng DNS server addresses. ln referred DNS server, Lype
10.0.0.1.
6. Cllck Ck, and Lhen cllck C|ose. Close Lhe Network Connect|ons wlndow.
7. lrom Lhe Start screen, Lype cmd, and Lhen press LN1Lk.
8. 1o check name resoluLlon and neLwork communlcaLlon beLween A1 and uC1, Lype
p|ng dc1.corp.contoso.com ln Lhe command prompL wlndow and press LN1Lk.
9. verlfy LhaL Lhere are four replles from 10.0.0.1.
10. Close Lhe Command rompL wlndow.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command


15
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability. Note that the "Ethernet" interface name may be different on your computer. Use ipconfig /all to
list the interfaces.

New-NetIPAddress 10.0.0.3 -InterfaceAlias "Ethernet" -PrefixLength 24
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses 10.0.0.1


J*-1 "GGD %* %/4 )KBG 5*3'-1
uo Lhls sLep uslng Wlndows owerShell
1o [o|n A1 to the CCk doma|n
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Computer name ln Lhe roperLles Llle.
2. ln Lhe System ropert|es dlalog box, on Lhe Computer Name Lab, cllck Change.
3. ln Computer Name, Lype A1. under Member of, cllck Doma|n, and Lhen Lype
corp.contoso.com.
4. Cllck Ck.
3. When you are prompLed for a user name and password, Lype User1 and lLs
password, and Lhen cllck Ck.
6. When you see a dlalog box welcomlng you Lo Lhe corp.conLoso.com domaln,
cllck Ck.
7. When you are prompLed LhaL you musL resLarL Lhe compuLer, cllck Ck.
8. Cn Lhe System ropert|es dlalog box, cllck C|ose.
9. When you are prompLed Lo resLarL Lhe compuLer, cllck kestart Now.
10. AfLer Lhe compuLer resLarLs, cllck Lhe Sw|tch User arrow |con, Lhen cllck Cther
User and log on Lo Lhe CC8 domaln wlLh Lhe User1 accounL.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Note that you must supply the User1 account
domain credentials after entering the Add-Computer command.

Rename-Computer -NewName APP1
Add-Computer -DomainName corp.contoso.com
Restart-Computer


01$%'88 %/4 =4# >4&94& L00>M &*84 *1 "GGD
nexL, lnsLall Lhe Web Server (llS) role Lo make A1 a web server.


16
uo Lhls sLep uslng Wlndows owerShell
1o |nsta|| the Web Server (IIS) server ro|e
1. ln Lhe Dashboard console of Server Manager, cllck Add ro|es and features.
2. Cllck Next Lhree Llmes Lo geL Lo Lhe server role selecLlon screen.
3. ln Lhe Se|ect Server ko|es dlalog, selecL Web Server (IIS), and Lhen cllck Next.
4. Cllck Next Lhree Llmes Lo accepL Lhe defaulL Web Server role seLLlngs, and Lhen
cllck Insta||.
3. Allow Lhe lnsLallaLlon Lo compleLe, and Lhen cllck C|ose.

Windows PowerShell equivalent commands
The following Windows PowerShell command, run at an administrator-level Windows PowerShell command
prompt, performs the same function as the preceding procedure.

Install-WindowsFeature Web-WebServer -IncludeManagementTools


)&4'%4 ' $/'&45 2*854& *1 "GGD
nexL, creaLe a shared folder and a LexL flle wlLhln Lhe folder.
uo Lhls sLep uslng Wlndows owerShell
1o create a shared fo|der
1. lrom Lhe Start screen, cllck Computer, and Lhen double-cllck Loca| D|sk (C:).
2. 8lghL-cllck ln Lhe deLalls pane, polnL Lo New, and Lhen cllck Io|der.
3. 1ype I||es, and Lhen press LN1Lk. Leave Lhe Loca| D|sk wlndow open.
4. lrom Lhe Start screen, Lype Notepad. 8lghL-cllck Notepad, and Lhen cllck kun as
adm|n|strator.
3. ln Lhe Unt|t|ed - Notepad wlndow, Lype 1h|s |s a shared f||e.
6. Cllck I||e, cllck Save, double-cllck Computer, double-cllck Loca| D|sk (C:), and
Lhen double-cllck Lhe I||es folder.
7. ln I||e name, Lype Lxamp|e.txt, and Lhen cllck Save. Close Lhe noLepad wlndow.
8. ln Lhe Loca| D|sk wlndow, rlghL-cllck Lhe I||es folder, polnL Lo Share w|th, and
Lhen cllck Spec|f|c peop|e.
9. Cllck Share, and Lhen cllck Done.
10. Close Lhe Loca| D|sk wlndow.

Windows PowerShell equivalent commands


17
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure.

New-Item -path c:\files -type directory
Write-Output "This is a shared file." | out-file c:\files\example.txt
New-SmbShare -name files -path c:\files -changeaccess CORP\User1


>%4+ NE )*12-.6&4 )O0PI7D
CLlLn11 conflguraLlon conslsLs of Lhe followlng:
lnsLall Lhe operaLlng sysLem
!oln CLlLn11 Lo Lhe CC8 domaln
1esL access Lo lnLraneL resources on Lhe CorpneL subneL
01$%'88 %/4 *+4&'%-1. $,$%43 *1 )O0PI7D
1o |nsta|| the operat|ng system on CLILN11
1. SLarL Lhe lnsLallaLlon of Wlndows 8 LnLerprlse.
2. When you are prompLed for a C name, Lype CLILN11.
3. When you are prompLed by Lhe SeLLlngs dlalog, cllck Use express sett|ngs.
4. AL Lhe Log on prompL, cllck Don't want to s|gn |n w|th a M|crosoft account? Cllck
Loca| account.
3. When you are prompLed for a user name, Lype User1. 1ype a sLrong password
Lwlce, Lype a password hlnL, and Lhen cllck I|n|sh.
6. ConnecL CLlLn11 Lo a neLwork LhaL has lnLerneL access and run Wlndows updaLe
Lo lnsLall Lhe laLesL updaLes for Wlndows 8.
7. ConnecL CLlLn11 Lo Lhe CorpneL subneL. Cllck es, turn on shar|ng and connect
to dev|ces when prompLed.
Q$4& '((*61% (*1%&*8
When you conflgure Lhe Wlndows 8 operaLlng sysLem, you are requlred Lo cllck Cont|nue or es
ln Lhe User Account Contro| (uAC) dlalog box for some Lasks. Several of Lhe conflguraLlon Lasks
requlre uAC approval. When you are prompLed, always cllck Cont|nue or es Lo auLhorlze Lhese
changes. AlLernaLlvely, see Lhe Appendlx of Lhls gulde for lnsLrucLlons abouL how Lo seL Lhe uAC
behavlor of Lhe elevaLlon prompL for admlnlsLraLors.
J*-1 )O0PI7D %* %/4 )KBG 5*3'-1
uo Lhls sLep uslng Wlndows owerShell
1o [o|n CLILN11 to the CCk doma|n
1. lrom Lhe Start screen, rlghL-cllck Computer, and Lhen cllck ropert|es.
2. Cn Lhe System page, cllck Advanced system sett|ngs.


18
3. ln Lhe System ropert|es dlalog box, on Lhe Computer Name Lab, cllck Change.
4. ln Lhe Computer Name]Doma|n Changes dlalog box, cllck Doma|n, Lype
corp.contoso.com, and Lhen cllck Ck.
3. When you are prompLed for a user name and password, Lype Lhe user name and
password for Lhe user1 domaln accounL, and Lhen cllck Ck.
6. When you see a dlalog box LhaL welcomes you Lo Lhe corp.conLoso.com domaln, cllck
Ck.
7. When you see a dlalog box LhaL prompLs you Lo resLarL Lhe compuLer, cllck Ck.
8. ln Lhe System ropert|es dlalog box, cllck C|ose. Cllck kestart Now when prompLed.
9. AfLer Lhe compuLer resLarLs, cllck Lhe Sw|tch User arrow |con, and Lhen cllck Cther
User. Log on Lo Lhe CC8 domaln wlLh Lhe User1 accounL.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Note that you must supply the User1 account
domain credentials after entering the Add-Computer command.

Add-Computer -DomainName corp.contoso.com
Restart-Computer


74$% '((4$$ %* &4$*6&(4$ 2&*3 %/4 )*&+14% $6#14%
nexL, verlfy LhaL lnLraneL web and flle share resources on A1 can be accessed by CLlLn11.
1o test access to resources from CLILN11
1. lrom Lhe Start screen, cllck Lhe Internet Lxp|orer lcon.
2. ln Lhe Address bar, Lype http:]]app1.corp.contoso.com], and Lhen press LN1Lk.
?ou should see Lhe defaulL llS 8 web page for A1.
3. lrom Lhe Start screen or Lhe deskLop Laskbar, cllck Lhe I||e Lxp|orer lcon.
4. ln Lhe address bar, Lype \\app1\I||es, and Lhen press LN1Lk.
3. ?ou should see a folder wlndow wlLh Lhe conLenLs of Lhe llles shared folder.
6. ln Lhe I||es shared folder wlndow, double-cllck Lhe Lxamp|e.txt flle. ?ou should
see Lhe conLenLs of Lhe Lxample.LxL flle.
7. Close Lhe examp|e.txt - Notepad and Lhe I||es shared folder wlndows.
>%4+$ 2*& )*12-.6&-1. %/4 01%4&14% >6#14%
1here are Lwo sLeps Lo seLLlng up Lhe lnLerneL subneL of Lhe Wlndows Server 2012 8ase
ConflguraLlon LesL lab.
1. Conflgure LuCL1.


19
2. Conflgure lnL11.
>%4+ DE )*12-.6&4 PFRPD
LuCL1 conflguraLlon conslsLs of Lhe followlng:
lnsLall Lhe operaLlng sysLem.
Conflgure 1C/l.
!oln Lhe compuLer Lo Lhe domaln.
LuCL1 musL have Lwo neLwork adapLers lnsLalled. ConnecL one adapLer Lo Lhe physlcal or
vlrLual swlLch for Lhe CorpneL subneL, and connecL Lhe second adapLer Lo Lhe physlcal or vlrLual
swlLch for Lhe lnLerneL subneL.
01$%'88 %/4 *+4&'%-1. $,$%43 *1 PFRPD
llrsL, lnsLall Wlndows Server 2012 SLandard as a sLandalone server.
1o |nsta|| the operat|ng system on LDGL1
1. SLarL Lhe lnsLallaLlon of Wlndows Server 2012 SLandard.
2. lollow Lhe lnsLrucLlons Lo compleLe Lhe lnsLallaLlon, speclfylng Wlndows Server
2012 SLandard (full lnsLallaLlon) and a sLrong password for Lhe local
AdmlnlsLraLor accounL. Log on uslng Lhe local AdmlnlsLraLor accounL.
3. ConnecL LuCL1 Lo a neLwork LhaL has lnLerneL access and run Wlndows updaLe
Lo lnsLall Lhe laLesL updaLes for Wlndows Server 2012.
4. ConnecL one neLwork adapLer Lo Lhe CorpneL subneL and Lhe oLher Lo Lhe
lnLerneL subneL.
)*12-.6&4 7)GH0G +&*+4&%-4$ *1 PFRPD
Conflgure Lhe 1C/l proLocol wlLh sLaLlc l addresses on boLh lnLerfaces.
uo Lhls sLep uslng Wlndows owerShell
1o conf|gure 1C]I propert|es on the Corpnet adapter
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Lthernet ln Lhe roperLles Llle.
2. ln Network Connect|ons, rlghL-cllck Lhe neLwork connecLlon LhaL ls connecLed Lo Lhe
CorpneL subneL, and Lhen cllck kename.
3. 1ype Corpnet, and Lhen press LN1Lk.
4. 8lghL-cllck Corpnet, and Lhen cllck ropert|es.
3. Cllck Internet rotoco| Vers|on 4 (1C]Iv4), and Lhen cllck ropert|es.
6. SelecL Use the fo||ow|ng I address. ln I address, Lype 10.0.0.2. ln Subnet mask, Lype
2SS.2SS.2SS.0.
7. SelecL Use the fo||ow|ng DNS server addresses. ln referred DNS server, Lype
10.0.0.1.
8. Cllck Advanced, and Lhen Lhe DNS Lab.
9. ln DNS suff|x for th|s connect|on, Lype corp.contoso.com, and Lhen cllck Ck Lhree


20
Llmes Lo close Lhe neLwork properLles dlalog.
10. ln Lhe Network Connect|ons wlndow, rlghL-cllck Lhe neLwork connecLlon LhaL ls
connecLed Lo Lhe lnLerneL subneL, and Lhen cllck kename.
11. 1ype Internet, and Lhen press LN1Lk.
12. 8lghL-cllck Internet, and Lhen cllck ropert|es.
13. Cllck Internet rotoco| Vers|on 4 (1C]Iv4), and Lhen cllck ropert|es.
14. SelecL Use the fo||ow|ng I address. ln I address, Lype 131.107.0.2. ln Subnet mask,
Lype 2SS.2SS.2SS.0.
13. Cllck Advanced. Cn Lhe I Sett|ngs Lab, cllck Add under I Addresses. ln Lhe 1C]I
Address secLlon, Lype 131.107.0.3 ln I address, Lype 2SS.2SS.2SS.0 ln Subnet mask,
and Lhen cllck Add.
16. Cllck Lhe DNS Lab.
17. ln DNS suff|x for th|s connect|on, Lype |sp.examp|e.com, and Lhen cllck Ck Lhree
Llmes Lo close Lhe neLwork properLles dlalog.
18. Close Lhe Network Connect|ons wlndow.
19. lrom Lhe Start screen, Lype cmd, and Lhen press LN1Lk.
20. 1o check name resoluLlon and neLwork communlcaLlon beLween LuCL1 and uC1, Lype
p|ng dc1.corp.contoso.com ln Lhe command prompL wlndow and press LN1Lk.
21. verlfy LhaL Lhere are four responses from 10.0.0.1.
22. Close Lhe Command rompL wlndow.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Prior to executing these commands, rename
the network connections to Corpnet and Internet according to their associated subnets.

New-NetIPAddress 10.0.0.2 -InterfaceAlias "Corpnet" -PrefixLength 24
Set-DnsClientServerAddress -InterfaceAlias "Corpnet" -ServerAddresses 10.0.0.1
Set-DnsClient -InterfaceAlias "Corpnet" -ConnectionSpecificSuffix corp.contoso.com
New-NetIPAddress 131.17.0.2 -InterfaceAlias "Internet" -PrefixLength 24
New-NetIPAddress 131.107.0.3 -InterfaceAlias "Internet" -PrefixLength 24
Set-DnsClient -InterfaceAlias "Internet" -ConnectionSpecificSuffix isp.example.com


J*-1 PFRPD %* %/4 )KBG 5*3'-1
uo Lhls sLep uslng Wlndows owerShell
1o [o|n LDGL1 to the CCk doma|n
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Computer name ln Lhe roperLles Llle.
2. ln Lhe System ropert|es dlalog box, on Lhe Computer Name Lab, cllck Change.


21
3. ln Computer Name, Lype LDGL1. under Member of, cllck Doma|n, and Lhen Lype
corp.contoso.com.
4. Cllck Ck.
3. When you are prompLed for a user name and password, Lype User1 and lLs
password, and Lhen cllck Ck.
6. When you see a dlalog box welcomlng you Lo Lhe corp.conLoso.com domaln,
cllck Ck.
7. When you are prompLed LhaL you musL resLarL Lhe compuLer, cllck Ck.
8. Cn Lhe System ropert|es dlalog box, cllck C|ose.
9. When you are prompLed Lo resLarL Lhe compuLer, cllck kestart Now.
10. AfLer Lhe compuLer resLarLs, cllck Lhe Sw|tch User arrow |con, Lhen cllck Cther
User and log on Lo Lhe CC8 domaln wlLh Lhe User1 accounL.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Note that you must supply the User1 account
domain credentials after entering the Add-Computer command.

Rename-Computer -NewName EDGE1
Restart-Computer
Add-Computer -DomainName corp.contoso.com
Restart-Computer


>%4+ ?E )*12-.6&4 0IP7D
lnL11 conflguraLlon conslsLs of Lhe followlng:
lnsLall Lhe operaLlng sysLem
Conflgure 1C/l
8ename Lhe compuLer
lnsLall Lhe Web Server (llS) and unS server roles
CreaLe unS records
lnsLall uPC
Conflgure Lhe nCSl web slLe
1esL CLlLn11 access Lo lnLerneL resources from Lhe lnLerneL subneL
01$%'88 %/4 *+4&'%-1. $,$%43 *1 0IP7D
1o |nsta|| the operat|ng system on INL11
1. SLarL Lhe lnsLallaLlon of Wlndows Server 2012 SLandard.
2. lollow Lhe lnsLrucLlons Lo compleLe Lhe lnsLallaLlon, speclfylng a sLrong password


22
for Lhe local AdmlnlsLraLor accounL. Log on uslng Lhe local AdmlnlsLraLor
accounL.
3. ConnecL lnL11 Lo a neLwork LhaL has lnLerneL access and run Wlndows updaLe
Lo lnsLall Lhe laLesL updaLes for Wlndows Server 2012.
4. ConnecL lnL11 Lo Lhe lnLerneL subneL.
)*12-.6&4 7)GH0G +&*+4&%-4$ *1 0IP7D
uo Lhls sLep uslng Wlndows owerShell
1o conf|gure 1C]I propert|es on INL11
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Lthernet ln Lhe roperLles Llle.
2. ln Lhe Network Connect|ons wlndow, rlghL-cllck Lthernet, and Lhen cllck
ropert|es.
3. Cllck Internet rotoco| Vers|on 4 (1C]Iv4), and Lhen cllck ropert|es.
4. SelecL Use the fo||ow|ng I address. ln I address, Lype 131.107.0.1. ln Subnet
mask, Lype 2SS.2SS.2SS.0. ln referred DNS server, Lype 127.0.0.1.
3. Cllck Advanced, and Lhen cllck Lhe DNS Lab.
6. ln DNS suff|x for th|s connect|on, Lype |sp.examp|e.com, and Lhen cllck Ck.
7. Cllck Ck Lwlce Lo close Lhe Lthernet ropert|es dlalog box.
8. Close Lhe Network Connect|ons wlndow.
9. lrom Lhe Start screen, Lype cmd, and Lhen press LN1Lk.
10. 1o verlfy neLwork connecLlvlLy beLween lnL11 and LuCL1, Lype p|ng 131.107.0.2
ln Lhe command prompL and press LN1Lk.
11. verlfy LhaL Lhere are four fallures from 131.107.0.2 lndlcaLlng LhaL Lhe requesL
Llmed ouL. 1he reason ls LhaL Wlndows llrewall wlLh Advanced SecurlLy on
LuCL1 blocks Lhe lncomlng plng messages. AL Lhe command prompL, run Lhe arp
-g command and conflrm LhaL a hys|ca| Address ls assoclaLed wlLh Lhe Internet
Address of 131.107.0.2. 1hls conflrms reachablllLy of 131.107.0.2.
12. Close Lhe Command rompL wlndow.
13. 8lghL-cllck Lhe neLwork lcon ln Lhe deskLop SysLem noLlflcaLlon Area and selecL
Cpen Network and Shar|ng Center.
14. ln Lhe Network and Shar|ng Center wlndow, cllck Change advanced shar|ng
sett|ngs.
13. ln Lhe Advanced shar|ng sett|ngs wlndow, cllck 1urn on f||e and pr|nter shar|ng,
and Lhen cllck Save changes.
16. Close Lhe Network and Shar|ng Center wlndow.

Windows PowerShell equivalent commands


23
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability. Note that the "Ethernet" interface name may be different on your computer. Use ipconfig /all to
list the interfaces.

New-NetIPAddress 131.107.0.1 -InterfaceAlias Ethernet -PrefixLength 24
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses 127.0.0.1
Set-DnsClient -InterfaceAlias "Ethernet" -ConnectionSpecificSuffix isp.example.com
netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=yes
B41'34 %/4 (*3+6%4& %* 0IP7D
uo Lhls sLep uslng Wlndows owerShell
1o rename the computer to INL11
1. ln Server Manager, cllck Loca| Server ln Lhe console Lree. Cllck Lhe llnk nexL Lo
Computer name ln Lhe roperLles Llle.
2. ln Lhe System ropert|es dlalog box, on Lhe Computer Name Lab, cllck Change.
3. ln Computer Name, Lype INL11. Cllck Ck.
4. When you are prompLed LhaL you musL resLarL Lhe compuLer, cllck Ck.
3. Cn Lhe System ropert|es dlalog box, cllck C|ose.
6. When you are prompLed Lo resLarL Lhe compuLer, cllck kestart Now.
7. AfLer Lhe compuLer resLarLs, log on wlLh Lhe local admlnlsLraLor accounL.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure.

Rename-Computer -NewName INET1
Restart-Computer


01$%'88 %/4 FI> >4&94& '15 =4# >4&94& L00>M $4&94& &*84$ *1 0IP7D
nexL, lnsLall role servlces for lnL11, whlch wlll acL as an lnLerneL web and unS server for
compuLers LhaL are connecLed Lo Lhe lnLerneL subneL.
uo Lhls sLep uslng Wlndows owerShell
1o |nsta|| the IIS and DNS server ro|es
1. Cn Lhe Server Manager Dashboard screen, under Conf|gure th|s |oca| server,
cllck Add ro|es and features.
2. Cllck Next Lhree Llmes Lo geL Lo Lhe server role selecLlon screen.
3. Cn Lhe Se|ect Server ko|es page, selecL DNS Server and cllck Add Ieatures when
prompLed.


24
4. SelecL Web Server (IIS) and Lhen cllck Next.
3. Cllck Next four Llmes Lo accepL Lhe defaulL unS server and web server seLLlngs,
and Lhen cllck Insta||.
6. verlfy LhaL Lhe lnsLallaLlons were successful, and Lhen cllck C|ose.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure.

Install-WindowsFeature DNS -IncludeManagementTools
Install-WindowsFeature Web-WebServer -IncludeManagementTools


)&4'%4 FI> &4(*&5$ *1 0IP7D
nexL, creaLe unS records for Lhe lnL11 and LuCL1 lv4 addresses on Lhe lnLerneL subneL and
for Lhe neLwork ConnecLlvlLy SLaLus lndlcaLor (nCSl).
uo Lhls sLep uslng Wlndows owerShell
1o create A records
1. lrom Lhe Start screen, cllck DNS.
2. ln Lhe console Lree of unS Manager, expand INL11, and cllck Iorward Lookup 2ones.
3. 8lghL-cllck Iorward Lookup 2ones, cllck New 2one, and Lhen cllck Next.
4. Cn Lhe 2one 1ype page, cllck Next.
3. Cn Lhe 2one Name page, Lype |sp.examp|e.com, and Lhen cllck Next.
6. Cllck Next Lwlce Lo accepL defaulLs for zone flle and dynamlc updaLe, and Lhen cllck
I|n|sh.
7. ln Lhe console Lree, expand Iorward Lookup 2ones, rlghL cllck |sp.examp|e.com, and
Lhen cllck New nost (A or AAAA).
8. ln Name, Lype INL11. ln I address, Lype 131.107.0.1. Cllck Add nost.
9. Cllck Ck, and Lhen cllck Done.
10. ln Lhe console Lree, rlghL-cllck Iorward Lookup 2ones, cllck New 2one, and Lhen cllck
Next.
11. Cn Lhe 2one 1ype page, cllck Next.
12. Cn Lhe 2one Name page, Lype contoso.com, and Lhen cllck Next.
13. Cllck Next Lwlce Lo accepL defaulLs for zone flle and dynamlc updaLe, and Lhen cllck
I|n|sh.
14. ln Lhe console Lree, rlghL cllck contoso.com, and Lhen cllck New nost (A or AAAA).
13. ln Name, Lype LDGL1. ln I address, Lype 131.107.0.2.
16. Cllck Add nost. Cllck Ck, and Lhen cllck Done.


25
17. ln Lhe console Lree, rlghL-cllck Iorward Lookup 2ones, cllck New 2one, and Lhen cllck
Next.
18. Cn Lhe 2one 1ype page, cllck Next.
19. Cn Lhe 2one Name page, Lype msftncs|.com, and Lhen cllck Next.
20. Cllck Next Lwlce Lo accepL defaulLs for zone flle and dynamlc updaLe, and Lhen cllck
I|n|sh.
21. ln Lhe console Lree, rlghL cllck msftncs|.com, and Lhen cllck New nost (A or AAAA).
22. ln Name, Lype www. ln I address, Lype 131.107.0.1.
23. Cllck Add nost. Cllck Ck.
23. ln Name, Lype dns. ln I address, Lype 131.107.2SS.2SS. Cllck Add nost. Cllck Ck. Cllck
Done.
24. Close Lhe unS Manager console.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability.

Add-DnsServerPrimaryZone -Name isp.example.com -ZoneFile isp.example.com.dns
Add-DnsServerResourceRecordA -ZoneName isp.example.com -Name inet1 -IPv4Address
131.107.0.1
Add-DnsServerPrimaryZone -Name contoso.com -ZoneFile contoso.com.dns
Add-DnsServerResourceRecordA -ZoneName contoso.com -Name edge1 -IPv4Address
131.107.0.2
Add-DnsServerPrimaryZone -Name msftncsi.com -ZoneFile msftncsi.com.dns
Add-DnsServerResourceRecordA -ZoneName msftncsi.com -Name www -IPv4Address
131.107.0.1
Add-DnsServerResourceRecordA -ZoneName msftncsi.com -Name dns -IPv4Address
131.107.255.255

01$%'88 '15 (*12-.6&4 F;)G *1 0IP7D
nexL, conflgure lnL11 as a uPC server so LhaL CLlLn11 can auLomaLlcally conflgure lLself when
connecLlng Lo Lhe lnLerneL subneL.
uo Lhls sLep uslng Wlndows owerShell
1o |nsta|| and conf|gure the DnC server ro|e on INL11
1. Cn Lhe Server Manager Dashboard screen, under Conflgure Lhls local server, cllck
Add ro|es and features.
2. Cllck Next Lhree Llmes Lo geL Lo Lhe server role selecLlon screen.
3. ln Lhe SelecL Server 8oles dlalog, selecL DnC Server, cllck Add Ieatures when
prompLed, and Lhen cllck Next.
4. ln Lhe SelecL feaLures dlalog, cllck Next.
3. Cllck Next on Lhe lnLroducLlon screen, and Lhen cllck Insta||.


26
6. Allow Lhe lnsLallaLlon Lo compleLe, and Lhen ln Lhe lnsLallaLlon progress wlndow,
cllck Lhe llnk for Comp|ete DnC conf|gurat|on.
7. ln Lhe uPC osL-lnsLall conflguraLlon wlzard, cllck Comm|t, and Lhen cllck C|ose.
8. ln Lhe lnsLallaLlon progress wlndow, cllck C|ose.
9. lrom Lhe Start screen, cllck DnC.
10. ln Lhe uPC console Lree, expand INL11. 8lghL-cllck Iv4, and cllck New Scope.
11. Cllck Next ln Lhe new Scope Wlzard.
12. 1ype Internet for scope name, and Lhen cllck Next.
13. nexL Lo Start I Address, Lype 131.107.0.100, nexL Lo Lnd I Address, Lype
131.107.0.1S0, and nexL Lo Subnet Mask, Lype 2SS.2SS.2SS.0.
14. Cllck Next four Llmes Lo accepL defaulL seLLlngs for excluslons, delay and lease
duraLlon.
13. Cn Lhe kouter (Defau|t Gateway) dlalog, Lype 131.107.0.1. Cllck Add, and Lhen
cllck Next.
16. Cn Lhe Doma|n Name and DNS Servers page, nexL Lo arent doma|n, Lype
|sp.examp|e.com. under l address, Lype 131.107.0.1. Cllck Add, and Lhen cllck
Next.
17. Cn Lhe WlnS Servers page, cllck Next.
18. Cn Lhe AcLlvaLe Scope page, cllck Next, and Lhen cllck I|n|sh.
19. Close Lhe uPC Manager console.

Windows PowerShell equivalent commands
The following Windows PowerShell commands, run at an administrator-level Windows PowerShell command
prompt, perform the same function as the preceding procedure. Long command lines are indented for
readability.

Install-WindowsFeature DHCP -IncludeManagementTools
Add-DhcpServerv4Scope -name "Internet" -StartRange 131.107.0.100 -EndRange
131.107.0.150 -SubnetMask 255.255.255.0
Set-DhcpServerv4OptionValue -DnsDomain isp.example.com -DnsServer 131.107.0.1 -
Router 131.107.0.1


)*12-.6&4 %/4 I)>0 :4# $-%4 *1 0IP7D
Wlndows cllenLs aLLempL Lo connecL Lo Lhe u8L hLLp://www.msfLncsl.com/ncsl.LxL and resolve
Lhe name dns.msfLncsl.com Lo deLermlne lf Lhey have lnLerneL connecLlvlLy. ln Lhe followlng
procedure, you creaLe Lhe ncsl.LxL flle and place lL ln Lhe WWW8CC1 dlrecLory on lnL11.
uo Lhls sLep uslng Wlndows owerShell
1o conf|gure the NCSI web s|te on INL11
1. Cn lnL11, launch I||e Lxp|orer, and Lhen navlgaLe Lo C:\|netpub\wwwroot.


27
2. ln Lhe deLalls pane, rlghL cllck an empLy area, polnL Lo New, and Lhen cllck 1ext
Document.
3. 8ename Lhe documenL Lo ncs|.
4. uouble-cllck on ncs|.
3. ln Lhe Notepad wlndow, Lype M|crosoft NCSI and do !"# press LN1Lk Lo add a new
llne.
6. Cllck I||e, and Lhen cllck Lx|t. ln Lhe Notepad dlalog box, cllck Save.
7. Close Lhe llle Lxplorer wlndow.

Windows PowerShell equivalent commands
The following PowerShell commands perform the same steps to write the Ncsi.txt file without a new line after
the "Microsoft NCSI" string:

$filename = "C:\inetpub\wwwroot\ncsi.txt"
$text = "Microsoft NCSI"
[System.IO.File]::WriteAllText($fileName, $text)


74$% '((4$$ %* 01%4&14% &4$*6&(4$ 2&*3 %/4 01%4&14% $6#14%
nexL, connecL CLlLn11 Lo Lhe lnLerneL subneL and LesL connecLlvlLy Lo resources on lnL11.
1o test access to Internet resources from CLILN11 when connected to the Internet subnet
1. Move CLlLn11 from CorpneL subneL Lo Lhe lnLerneL subneL. noLe LhaL afLer
neLwork deLecLlon ls compleLe, Lhe warnlng symbol on Lhe neLwork lcon ln Lhe
sysLem noLlflcaLlon area no longer appears. Pover over Lhe neLwork lcon ln Lhe
sysLem noLlflcaLlon area and noLlce LhaL lL lndlcaLes $!#%&!%# ())%**. When
prompLed, cllck es, turn on shar|ng and connect to dev|ces.
2. lrom Lhe Start screen, cllck Lhe lnLerneL Lxplorer lcon.
3. ln Lhe Address bar, Lype http:]]|net1.|sp.examp|e.com], and Lhen press LN1Lk.
?ou should see Lhe defaulL lnLerneL lnformaLlon Server 8 web page.
4. Close Lhe lnLerneL Lxplorer wlndow.
3. lrom Lhe Start screen, Lype command, and Lhen cllck Command rompt.
6. 1ype p|ng |net1.|sp.examp|e.com and press LN1Lk. ?ou should see four
responses from 131.107.0.1. 1ype p|ng edge1.contoso.com and press LN1Lk.
?ou should see four fallures for 131.107.0.2 lndlcaLlng LhaL Lhe requesL Llmed
ouL. 8ecall LhaL Wlndows llrewall wlLh Advanced SecurlLy on LuCL1 blocks Lhe
plng messages. AL Lhe command prompL, run Lhe arp -g command and conflrm
LhaL a hys|ca| Address ls assoclaLed wlLh Lhe Internet Address of 131.107.0.2.
7. Move CLlLn11 from Lhe lnLerneL subneL Lo Lhe CorpneL subneL.
8. lrom Lhe command prompL wlndow, Lype p|ng |net1.|sp.examp|e.com, and Lhen


28
press LN1Lk. ?ou should see a could noL flnd hosL lneL1" message and no
responses. 1ype p|ng 131.107.0.1, and Lhen press LN1Lk. ?ou should see
LransmlL falled" messages and no responses. 1hls lndlcaLes LhaL Lhere ls no
connecLlvlLy beLween Lhe CorpneL subneL and Lhe lnLerneL subneL.
AlLhough LuCL1 ls connecLed Lo boLh Lhe lnLerneL and CorpneL subneLs, lL ls noL
provldlng any rouLlng, address LranslaLlon, or proxylng servlces Lo allow
compuLers on Lhe CorpneL subneL Lo access resources on Lhe lnLerneL subneL. An
addlLlonal LesL lab gulde wlll conflgure lnLerneL subneL access from Lhe CorpneL
subneL as needed.
>1'+$/*% %/4 )*12-.6&'%-*1
1hls compleLes Lhe Wlndows Server 2012 8ase ConflguraLlon LesL lab. 1o save Lhls conflguraLlon
for addlLlonal LesL labs, do Lhe followlng:
1. Cn all physlcal compuLers or vlrLual machlnes ln Lhe LesL lab, close all wlndows and Lhen
perform a graceful shuLdown.
2. lf your lab ls based on vlrLual machlnes, save a snapshoL of each vlrLual machlne and name
Lhe snapshoLs W|ndows Server 2012 8ase Conf|gurat|on. lf your lab uses physlcal
compuLers, creaLe dlsk lmages Lo save Lhe Wlndows Server 2012 8ase ConflguraLlon.
Important
unllke prevlous verslons of Wlndows Server, lL ls permlsslble ln Wlndows Server 2012 Lo
resLore snapshoLs on domaln conLrollers wlLhouL fear of uSn 8ollback blocklng furLher
repllcaLlon. uC vlrLuallzaLlon deLalls are demonsLraLed ln Lhe 1esL Lab Culde: uemonsLraLe
Wlndows Server "8" vlrLuallzed uomaln ConLroller (vuC).
"55-%-*1'8 B4$*6&(4$
lor more lnformaLlon abouL Wlndows Server 2012, see Lhe Wlndows Server 2012 producL page.
lor a llsL of all of Lhe Wlndows Server 2012 1LCs, see Wlndows Server 2012 1esL Lab Culdes ln Lhe
1echneL Wlkl.
1o provlde Lhe auLhors of Lhls gulde wlLh feedback or suggesLlons for lmprovemenL, send an
emall message Lo Llgfb[mlcrosofL.com.
1o submlL your quesLlons abouL Lhls LesL lab or Wlndows Server 2012, see Lhe Wlndows Server
2012 Ceneral lorum.
MlcrosofL sLrongly encourages you Lo develop and publlsh your own 1LC conLenL for Wlndows
Server 2012, elLher ln Lhe 1echneL Wlkl (example: 1esL Lab Culde: uemonsLraLe 8emoLe Access
vns) or ln your own publlshlng forum (example: 1esL Lab Culde (arL 1) - uemonsLraLe 1MC 1,
L21/lsec and SS1 8emoLe Access vn Server). lf you wanL Lo publlsh your 1LC conLenL ln Lhe
1echneL wlkl, see Lhe Pow Lo conLrlbuLe serles of 1LC blog posLs for lnformaLlon abouL Lhe Lypes of
conLenL you can creaLe and for llnks Lo LemplaLes, guldance, and examples.
lor a llsL of addlLlonal MlcrosofL 1LCs, see 1esL Lab Culdes ln Lhe 1echneL Wlkl.


29
"++415-S
1hls appendlx descrlbes how Lo change Lhe defaulL user AccounL ConLrol (uAC) behavlor and
how Lo work around garbled LexL ln when pasLlng ln Pyper-v guesLs.
>4% Q") #4/'9-*& *2 %/4 4849'%-*1 +&*3+% 2*& '53-1-$%&'%*&$
8y defaulL, uAC ls enabled ln Wlndows Server 2012 and Wlndows 8. 1hls servlce wlll prompL for
permlsslon Lo conLlnue durlng several of Lhe conflguraLlon Lasks descrlbed ln Lhls gulde. ln all
cases, you can cllck Cont|nue ln Lhe uAC dlalog box Lo granL Lhls permlsslon, or you can use Lhe
followlng procedure Lo change Lhe uAC behavlor of Lhe elevaLlon prompL for admlnlsLraLors.
1o set UAC behav|or of the e|evat|on prompt for adm|n|strators
1. lrom Lhe Start screen, Lype secpo|.msc, and press LN1Lk.
2. ln Lhe console Lree, open Loca| o||c|es, and Lhen cllck Secur|ty Cpt|ons.
3. ln Lhe conLenLs pane, double-cllck User Account Contro|: 8ehav|or of the e|evat|on
prompt for adm|n|strators |n Adm|n Approva| Mode.
4. Cllck L|evate w|thout prompt|ng ln Lhe llsL, and Lhen cllck Ck.
1. 6. Close Lhe Loca| Secur|ty o||cy wlndow.

G'$%-1. %4S% %* ;,+4&TU .64$%$ $*34%-34$ &4$68%$ -1 .'&#845 (/'&'(%4&$
When uslng a Pyper-v vlrLual Machlne ConnecLlon console Lo a runnlng Wlndows Server 2012
guesL and Lhen uslng 1ype C||pboard 1ext menu opLlon, Lhe characLers pasLed may appear ouL
of order or garbled. 1hls makes copylng and pasLlng Wlndows owerShell commands dlfflculL.
1o work around Lhls lssue:
use Lhe mstsc.exe 8u cllenL Lo connecL dlrecLly Lo vlrLual machlnes. noLe LhaL Lhls
requlres aLLachlng your cllenL compuLer Lo your organlzaLlon neLwork, Lyplcally uslng an
addlLlonal neLwork adapLer on each vlrLual machlne
lncrease Lhe keyboard class buffer slze ln Lhe vlrLual machlne
ulsable Lhe synLheLlc keyboard ln Lhe vlrLual machlne Lo force uslng Lhe emulaLed
keyboard
1o Increase the keyboard c|ass buffer s|ze |n the v|rtua| mach|ne
1. Logon Lo a runnlng vlrLual machlne as a member of Lhe AdmlnlsLraLors group.
2. lrom Lhe Start page, Lype reged|t, and press LN1Lk.
3. LocaLe and Lhen cllck Lhe followlng reglsLry enLry:
nkL_LCCAL_MACnINL\SS1LM\CurrentContro|Set\Serv|ces\kbdc|ass\arameter
s
4. ln Lhe deLalls page, double cllck:
keyboardDataueueS|ze
3. SelecL Dec|ma| and Lype a va|ue data of:
1024


30
6. Cllck Ck. Close Lhe 8eglsLry LdlLor and resLarL Lhe vlrLual machlne.
1o d|sab|e the synthet|c keyboard for a v|rtua| mach|ne
1. Logon Lo a runnlng vlrLual machlne as a member of Lhe AdmlnlsLraLors group.
2. lrom Lhe Start page, Lype devmgmt.msc, and Lhen press LN1Lk.
3. Cllck keyboards, rlghL cllck M|crosoft nyper-V V|rtua| keyboard and cllck D|sab|e.
4. Close Lhe uevlce Manager snap-ln.
Note
Cn Wlndows Server 2012 Core, download uevCon.exe from Lhe Wlndows urlver klL
Lo dlsable Lhls drlver uslng Lhe command-llne.