Cybersecurity Lab

Active Directory Domain Controller Setup

Building a Windows Server 2022 domain controller from scratch — starting with static IP addressing on the Parallels shared network and a standards-based server rename to HNH-DC01.

In Progress2026Intermediate

Objective

Prepare a Windows Server 2022 virtual machine for the Active Directory Domain Services role: give it a fixed IP that survives reboots, point DNS at itself ahead of the AD DS install, and rename the host to a real-world domain controller naming convention.

Tools Used

Windows Server 2022Parallels DesktopServer ManagerCommand Prompt

Steps Performed

  • Ran `ipconfig` to capture the baseline network configuration before making changes — IPv4 10.211.55.17, subnet mask 255.255.255.0, gateway 10.211.55.1.
  • Opened Network Connections directly with `ncpa.cpl` instead of navigating Control Panel.
  • Opened the Ethernet adapter properties and selected Internet Protocol Version 4 (TCP/IPv4) → Properties.
  • Switched to "Use the following IP address" and re-entered the DHCP-assigned values as static: 10.211.55.17 / 255.255.255.0 / 10.211.55.1.
  • Set the preferred DNS server to 127.0.0.1 so the server resolves against itself once the AD DS DNS role is installed.
  • Verified outbound connectivity with `ping google.com` — 4 replies received, 0% packet loss, average 31ms.
  • Opened System Properties with `sysdm.cpl` → Change and renamed the computer to HNH-DC01.
  • Accepted the mandatory restart to apply the new computer name.

Key Findings

  • The VM sits on the Parallels shared network (10.211.55.x), so copying a generic 192.168.0.x address from a textbook would have broken outbound internet access.
  • Reusing the existing DHCP lease values as the static assignment avoids IP conflicts and keeps the gateway path intact.
  • Pointing DNS at 127.0.0.1 before installing AD DS avoids a reconfiguration step later — name resolution still worked because the AD DS DNS role had not yet taken over.
  • A computer rename is not applied until the machine restarts; under ARM emulation this reboot takes noticeably longer than on bare metal.
  • DC01 is a standard naming convention — the site/organisation prefix plus a numbered role makes the host self-describing in documentation.

Screenshots

Windows Command Prompt showing ipconfig output with IPv4 address 10.211.55.17, subnet mask 255.255.255.0, and default gateway 10.211.55.1
Baseline `ipconfig` — DHCP-assigned address before changes
Internet Protocol Version 4 (TCP/IPv4) Properties dialog with a static IP address, subnet mask, default gateway, and preferred DNS server set to 127.0.0.1
Static IPv4 configuration with DNS pointed at 127.0.0.1
Command Prompt showing four successful ping replies from google.com with 0% packet loss and 31ms average round trip time
Connectivity verified — `ping google.com` after the change
Computer Name/Domain Changes dialog with the computer name set to HNH-DC01 and a prompt stating the computer must be restarted to apply the changes
Server renamed to HNH-DC01 — restart required

Lessons Learned

  • Always capture the real network configuration before setting a static address — the correct values come from the environment, not from a tutorial.
  • Static addressing is a prerequisite for a domain controller because clients locate the domain through DNS records tied to a fixed address.
  • Documenting the "before" state gives a clean rollback path and makes the write-up verifiable.

Future Improvements

  • Install the Active Directory Domain Services role and promote HNH-DC01 to a domain controller.
  • Create the forest root domain and verify DNS zone creation.
  • Join a Windows client VM to the domain and test authentication.
  • Build organisational units, users, and group policy objects for a realistic directory structure.

References

  • Microsoft Learn — Install Active Directory Domain Services
  • Microsoft Learn — Configure TCP/IP settings on Windows Server
  • Parallels Desktop networking documentation