See also: Additional Domain Controllers

See also: Active Directory Password Management

https://ittutorials.net/microsoft/windows-server-2016/setting-up-active-directory-ad-in-windows-server-2016/

1. Configure host name
2. Configure networking with a static IP
3. Verify Windows is activated

Using the Server Manager:

1. Install the Active Directory Domain Services role
2. Install the .NET Framework 3.5 and .NET Framework 4.6 features
3. Select Promote this server to a domain controller once the installation finishes
4. Most SMB admins can accept the defaults for most options
5. Choose an AD domain name
   • Microsoft recommends using fully qualified DNS subdomains like corp.yourinternetdomain.tld
   • You'll use the first part as the 'short' (NETBIOS) domain name like corp
6. SMB admins can generally Ignore the DNS delegation warning

Create users and groups: Active Directory Users and Computers (ADUC)

Manage group policy: Start → Run → gpmc.msc

Edit local policy: Start → Run → gpedit.msc

See: Windows Timekeeping Configuration

See: Windows Home Directories

See: Shared Printers

See: Login Scripts

See: Roaming Profiles

See: Folder Redirection

See: Windows Group Policy

and: Install Network Printers Automatically at Login using Group Policy