Microsoft AD Deployment
Deploy Microsoft AD
To simulate DNS on-premise, we will use the AWS Directory Service to deploy AWS Managed Microsoft Active Directory in two private subnets created by CloudFormation as shown below:
-
Log in to AWS Console and access the Directory Service console through the search box and search for Directory Services.
- Make sure you have selected the correct Region. Check the top left corner of the AWS Console and select the Region you need (Here we are selecting ap-southeast-1)
-
If this is your first time accessing Directory Services in this region, you will be directed to the initial welcome screen. Expand the left sidebar and select Directories.
- Select Set up directory.
-
Select Directory types, choose AWS Managed Microsoft AD.
Select Getting started with AWS Managed Microsoft AD, choose Create new AWS managed AD domain.
-
On the Enter Directory Information page, enter the following information:
-
For Edition: select Standard Edition.
-
For Directory DNS name:
onprem.example.com(this DNS name must be unique among your directories). -
For Directory NetBIOS name:
onprem(this NetBIOS name must be unique among your directories).
-
-
Continue configuration:
-
For Directory Description:
This is to simulate the on-prem AD. -
For Admin Password: Use a password you can remember. Please note the password complexity requirements stated on the screen.
-
For Confirm password: Enter the password again.
-
Select Next.
-
-
In Choose VPC and subnets, select VPC Hybrid-DNS-VPCStack that we created earlier and two private subnets Private subnet 1A and Private subnet 2A. Then, select Next.
-
On the Review & create screen, review the settings and select Create Directory.
-
The directory will take about 20 minutes to create. During this time, AWS will provision two Windows servers and promote them to Active Directory domain controllers for the AD forest you specified. This AD forest will be a new AD forest. The process will be complete when you see the status change to Active.
-
When the directory has been created, you can view details by clicking on the Directory ID. The two DNS IP addresses listed are the IP addresses of elastic network interfaces (ENI) that have been placed in your availability zone to communicate with AWS Managed Microsoft AD Domain Controllers.
