Installing Active Directory on Windows Server 2012 R2

Installing Active Directory on Windows Server 2012 R2 Russian (AD+DNS+DHCP):

step 0 (cmd):

tzutil.exe /s "Ekaterinburg Standard Time"
netsh interface ipv4 set address name=Ethernet source=static address=192.168.200.2/24 gateway=192.168.200.1 store=persistent
netsh dns set dnsservers name=Ethernet source=static address=127.0.0.1
netsh interface ip delete arpcache

step 1 (powershell):

# Disable IPv6
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\services\TCPIP6\Parameters' -name "DisabledComponents" -Value 255;
# Enable RDP
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -name "fDenyTSConnections" -Value 0;
Enable-NetFirewallRule -DisplayGroup "Дистанционное управление рабочим столом";
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "UserAuthentication" -Value 1;
# Rename PC
Rename-Computer -NewName DC1 -Restart -Force

step 2 (powershell):

Import-Module ServerManager
Import-Module ADDSDeployment
Add-WindowsFeature –Name AD-Domain-Services –IncludeAllSubFeature –IncludeManagementTools
Install-ADDSForest -CreateDnsDelegation:$false -DatabasePath "C:\Windows\NTDS" -DomainMode "Win2012" -DomainName "corp.mycompany.ru" -DomainNetbiosName "CORP" -ForestMode "Win2012" -InstallDns:$true -LogPath "C:\Windows\NTDS" -NoRebootOnCompletion:$false -SysvolPath "C:\Windows\SYSVOL" -Force:$true -SafeModeAdministratorPassword (convertto-securestring "P@ssw0rd" -asplaintext -force)

step 3 (powershell):

Import-Module ServerManager
# create reverse dns zone
Add-DnsServerPrimaryZone -DynamicUpdate NonsecureAndSecure -NetworkId '192.168.200.0/24' -ReplicationScope Domain
Add-DnsServerResourceRecordPtr -Name "2" -ZoneName "200.168.192.in-addr.arpa" -AgeRecord -PtrDomainName "$env:COMPUTERNAME.corp.mycompany.ru"
# dhcp
Add-WindowsFeature –Name DHCP –IncludeManagementTools
Add-DHCPServerSecurityGroup -ComputerName $env:COMPUTERNAME
Restart-Service dhcpserver
Add-DhcpServerInDC -DnsName $env:COMPUTERNAME -IPAddress 192.168.200.2
$User  = "$env:USERDOMAIN\$env:USERNAME"
$PWord = ConvertTo-SecureString -String "P@ssw0rd" -AsPlainText -Force
$Credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $User, $PWord
Set-DHCPServerDnsCredential -ComputerName $env:COMPUTERNAME -Credential $Credential
Add-DHCPServerv4Scope -Name Office -StartRange 192.168.200.100 -EndRange 192.168.200.254 -SubnetMask 255.255.255.0 -State Active
Set-DHCPServerv4OptionValue -ComputerName $env:COMPUTERNAME -DnsServer 192.168.200.2 -DnsDomain corp.mycompany.ru -Router 192.168.200.1
Set-DHCPServerv4OptionValue -ComputerName $env:COMPUTERNAME -ScopeId 192.168.200.0 -DnsServer 192.168.200.2 -DnsDomain corp.mycompany.ru -Router 192.168.200.1
Set-ItemProperty -Path registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\Roles\12 -Name ConfigurationState -Value 2
Restart-Computer -Force