Modifying settings for the "Promote server to domain controller" option for Active Directory forest recovery

Specify additional recovery option settings for the Promote server to domain controller option.

This recovery method is available only when using the Recover AD forest to new domain controllers recovery type. It promotes additional domain controllers from standard Windows Servers. Use this method after at least one domain controller in each AD domain has been restored from backup, to complete the AD infrastructure by promoting additional domain controllers from existing Windows Servers.

Go to the runbook

1. From the Command Center navigation pane, go to Protect > Active Directory.

   The Overview page appears.

2. On the Forests tab, click the forest.

   The forest page appears.

3. On the Runbooks tab, click the runbook.

   The runbook page appears.

Start the DC promo options wizard

1. On the Runbook settings tab, in the Promote server to domain controller tile, select the domain controllers to configure.

2. Click Configure DC Promo options.

   The Promote server to domain controller configuration dialog box appears.

3. For Destination VM to promote, select the client that hosts the clean Windows server you want to promote to a domain controller.

   Note

   • To each domain controller that is configured with the Promote server to domain controller option, you must assign a unique destination VM.

   • The destination VM must not have the Active Directory Domain Services AD DS role or the DNS role installed.

   • For each destination VM, you must do the following:

     • Install the Active Directory package. For instructions, see Discover the Active Directory Forest.

     • Add the VM to the server group for recovered domain controllers. For instructions, see Add DC Promotion Targets to the Server Group for Recovered Domain Controllers.

4. For Administrative account on the VM, enter a credential. This credential will that has privileged access to the destination VM. This account will rename and adjust the configuration of the server.

   Note

   • Enter a local account without any server name because the server is renamed during the recovery. For example, if you want to specify the local Administrator account on the destination VM, enter “administrator”.

   • Use passwords that meet the password complexity rules for the Windows Server version that you are creating to prevent VM provisioning failures. For more information, see Password must meet complexity requirements.

5. For New DSRM password for the domain controller, enter a credential. This credential will be used to set the directory services restore mode password on the domain controller. Only the password supplied in the credential is used – the account name is ignored.

6. Click Submit.