Question

A Windows server apprentice with domain admin rights ran the command "Install-ADDSDomainController -InstallDNS -DomainName" to create an additional domain controller in a test lab. He gets an error message as seen in the below screenshot. What is the cause of this error?

A. He must be signed-in with Configuration Admin rights to be able to create an additional domain controller in the existing domain.
B. He must be signed-in with Schema Admin rights to be able to create an additional domain controller in the existing domain.
C. He must be signed-in with Enterprise Admin rights to be able to create an additional domain controller in the existing domain.
D. He must run "Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools" to install the Active Directory binaries or supporting files.

Answer 1

The error occurred because the apprentice needs to run "Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools" to install the Active Directory Domain Services role before promoting a server to a domain controller.

Correct option is D.

Step-by-step explanation:

When attempting to create an additional domain controller in a Windows server environment, a few prerequisites must be met before running the Install-ADDSDomainController cmdlet. In the scenario provided, the apprentice receives an error because the Active Directory Domain Services (AD DS) role has not been installed on the server where the command is being executed. Therefore, the correct cause of the error is:

D. He must run "Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools" to install the Active Directory binaries or supporting files.

This command installs the necessary binaries and management tools to promote the server to a domain controller. Having domain admin rights is necessary but not sufficient on its own; the actual AD DS role must be installed on the server.