> For the complete documentation index, see [llms.txt](https://paul-gleason.gitbook.io/champlain-college-classes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://paul-gleason.gitbook.io/champlain-college-classes/labs/milestone-2-ad-and-vcenter.md).

# Milestone 2 - AD and vCenter

## Steps

Enable SSH

<figure><img src="https://lh3.googleusercontent.com/n1v6fUqwuqgAEP9g8pH2cGZ3SRv5V8i5MuCIxjLphfZpe8mo3K_DknFLzdzP_iMMdUelhYlIxreZsSba0ZMUUsAUgPYR0UgECNACZKm8fmKax9Yue-gc2BL8bfjb-fBHBwIrKpvYUGdD9KJmK7Nbfks" alt=""><figcaption></figcaption></figure>

SSH into ESXI from mgmt1 and go into vmfs/volumes

<figure><img src="https://lh5.googleusercontent.com/bj-W9bGQbUcw1v02eVZV5yrIzb40sJ9SyCqsjzHtRRN1RtjTuOcCiAoNQLGJJcyWydZuZR71z-MBbfjOP_UzWf4vncTUglV4CpFJdn4H_eDuSl2MMgE44BqAVVSTN7-j7Dw7d09Ktflo1qiqY2kgCxg" alt=""><figcaption></figcaption></figure>

The navigate into datastore2-super6/ISO<br>

Now wget SERVER 19 I already had vCenter ISO in my data store so I didn’t need to get that

<figure><img src="https://lh6.googleusercontent.com/e1Embsqj6tDqyJj43GosLjbY4rS-l2IywW3O7GQ2TagGGqoFDh58bxHJTbrUTmzTIyuJ6fWwmmJwk5Ml0ZvGvcfl-O-LYD_Xk9AdVVHaGmvTkAjfWy1SrRw69VKQAJpbOIB04TrQrdkogF0fUlw6d1g" alt=""><figcaption></figcaption></figure>

Make Server 19 vm

<figure><img src="https://lh3.googleusercontent.com/wD8RRNcbDzCBeCbMSYrMlizynt8k62y5URgVrkSYEIW6tcjiW1iDyhiasorPxG3dQCOcqEAjpGuv7tCwco2XWompYHAKry8_OQKUNRw2BjJUTyX8jlTFvCFMXk81pVqGBUM_oNlw0Dvfm-UXtnVT-4w" alt=""><figcaption></figcaption></figure>

<br>

Installing Server 19

<figure><img src="https://lh5.googleusercontent.com/G2ZmDd0u-u-Lusi9S6oxUh6txtLigW86HojsciNwLCPa4ibHm0IwKSdpcIGX4U_mniW6L7MG7GNXGrdf6hDzjoF66d2KMSGaKVO_4bWlPvSsgaYy9j7pXrLZZmOERnl185RkqbKswg0r5iFKizVPX9Q" alt=""><figcaption></figcaption></figure>

Custom install then select

<figure><img src="https://lh4.googleusercontent.com/9E_Cyj3QvUXGeg-YQdRHad9ZpUyY5nXH93PInPGBpYCACHEq-cqwqqiVBT4UNmSWyFtXYfKJHlYfudyke2SMym4RxDcgy-b3n80_Q0_ouFsRcdlh-pB5ojVoZMpmtdHqimAeGQUR40n4RCyUaZHftlw" alt=""><figcaption></figcaption></figure>

One you reach this screen press control+shift+f3 to enter audit mode

<figure><img src="https://lh3.googleusercontent.com/alvGLrYTzn24UZaLuFBJM0o1gNCOSO6ktTmOQpJHQjsmELHuqdpuZSruyg4OF4KEq38Eb2ceOj-2B2TJcnVB5A9VEjIKWbo7ofhOlNqGcgknb75JCc934Qza73QhIgujp_EmxDal5G1vEukuE--9k3I" alt=""><figcaption></figcaption></figure>

Open powershell and type sconfig

<figure><img src="https://lh6.googleusercontent.com/VhZFWe5d3DwBhfrzY8s1jb86e6bzlAJDTbHDf8Oub0Ojyb04MWf_2rBuFZYTOga51qLv3pSWAZ5mklWRaQ3wYh_yeZZA4l7Bgwq6P0-u-ScU0zHc-Asgj73F2hc0YMrSS-vsNPm8u0143YJX1EBHlgg" alt=""><figcaption></figcaption></figure>

Press 5 to set update pattern for windows and set them to manual once done. Then press 9 and set to eastern. After that press 6 and download updates. Now restart the machine and install vmware tools

<figure><img src="https://lh5.googleusercontent.com/Jq4cBwtEhIjIiEW6VuMS3zO1TDsZo1qQsTzpHZXZiXDJMI5pyp3vmjzIlQg_lS4s1WssqT69caraa_RkKvGe_ESr8IPdg-sYwWdcHm3oAduAhixDpukexCuPy8fSVr6jE3TmZTNvVt1SGPdvyChJVIk" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh3.googleusercontent.com/oiZW4DcWEPRahKzJno9jKr3Sz3dX6X0OkMfiwjoF2VY-FMuPj72DCBSmV_iGHsdBGVCBKq6h47LPgWj0yQQJ-Xht_edR6O6_ezuZxBR_Zyp4SKkfyzVxTzjiFfOqOsPx-lbbo-hMsUWyNYrDtzzQh4s" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh4.googleusercontent.com/bLR-S4R0nUZA95UGsLbBAPuC6mgkPyDfPQ9kBNZsGmgZkNJw12vysXL6Boeyvrgg6DznlPlYT1I6dL1vohFH06Y0iBsqeMIS6jRA_cMPz7usmZdkHnPm4E8qhXFzprF6Jaz70ii2VIrKr1sfpzlf7eQ" alt=""><figcaption></figcaption></figure>

Then do typical install

Next grab the sysprep script&#x20;

wget <https://raw.githubusercontent.com/gmcyber/480share/master/ssh-prep.ps1> -OutFile windows-prep.ps1

<figure><img src="https://lh6.googleusercontent.com/CcsWQDjxrM8aHU85xaSxyyaxiLNwqwQkdFF7_jp5tv9nKm8teVsIXPVvgL3ke4-f5VIXQIxW_KeGN1qDfXnVg8TZJhNUd9qlHr9HUf-Cs6LPfAr5TXrkiQDOY30e12mEQxedOx26jURmScRFmzGCZqA" alt=""><figcaption></figcaption></figure>

Take Base snapshot

<figure><img src="https://lh5.googleusercontent.com/c_uX2h5mH3yDHL1B7FypKqYgk-2zersSwWean8_QrumuFW8Hl1QGrxFHcjzTAkisde_jSRe0caS4SDi-QeSSdXCjygWNqZ6aSoY222z-GYNND3qjzxdclSE5ldkSRpRXGLnhzc7fCT-bzi5BF3kfx0A" alt=""><figcaption></figcaption></figure>

Name the snapshot base

Installing ADDS:\
Change the network adapter to 350-Internal

Set Admin passwd

Configure network

<figure><img src="https://lh4.googleusercontent.com/7e3tWR6mt3nLY6YlN5l63UNgYFFPGO4yVfLz6RrQb3jKwrvIJ0P5XYPijwdWX5kLFfLWSbMa2iEVv3DYG-I9WJxHmrxe_ifr2Bek16khlEquAxwnUhf0K_R00EtjB_DT7iSs39ftwr1Rnn9JK5QGjv8" alt=""><figcaption></figcaption></figure>

Rename Computer (Do this before forest install)

<figure><img src="https://lh3.googleusercontent.com/7BJVB8Gg13Tg20X1QlHY1eaAxBZ-30VwYrNUk1D36tzl52m9Fto7SjWsoQDtDKfk7EMDM17J4IyPb9tTo2UoKLhwq7P_3NzkQ467Fe8Mz0d_Ad1chdY5FI0aGmFsX-RsK25UTTkk-9wTSvUQCpDDMWI" alt=""><figcaption></figcaption></figure>

Reboot

Get-WindowsFeature - Will show all windows features are installed and can be installed

<figure><img src="https://lh4.googleusercontent.com/ikHwCHBL2Hh5HVzcZGic28dSs-Itt_khydMwZoInxMWu9WqNtL17hMz19UE6UsWf8C2LwmWtGxALctMek6ne1gMm2IywWoeaNZIexyKhW_Re7gE8nCAch4za_-gBRQz7ZvcPPKyqAsANBjuiGvco1kw" alt=""><figcaption></figcaption></figure>

Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools

<figure><img src="https://lh3.googleusercontent.com/HYxnNSNsAG3F5mdc9hoRCZ3bKztYevp6gAg3mlXt49cPLX-G9xyDXpxJDaRwBMl309ePuyjfm-QPEVnhPQtqy8V46MNbNoqKXkGe6wEPAkkMsQlqUb5JKWq6t3R6jmpEr35ISGHhWM_1Sfwe5M28c0o" alt=""><figcaption></figcaption></figure>

To view see available module commands you can run

Get-Command -Module ADDSDeployment

<figure><img src="https://lh4.googleusercontent.com/ehh6nNnPdrczxAP75gY5-Lq82EpR5aYirTsWNnBGWKmr9EJ8wnIzoAIPf8Dz2TnCdkPWeYP9cj49aZVniHqJF1KggJFpES9nDDug6iUZr9VaVDknIMrxzA9k9g_lM7fnkq--i2KMZsH1GzooMhxGa5Y" alt=""><figcaption></figcaption></figure>

Install Forest:

<figure><img src="https://lh6.googleusercontent.com/DUe7Qom6H1WO7BTRvjNDcdiyFXrArV9TuvrGD4K00cS8dwm8PCVBGBG8IMoMYa6IDrHZrv9ry4XXJDHh3orInsHQI1v83t_OlzngOshCZqIXOG2k4tYnynWlJcTjLolsV-wAtLCp0MjThYIXO4fHdBQ" alt=""><figcaption></figcaption></figure>

The machine will reboot after this

Showing domain is working

<figure><img src="https://lh4.googleusercontent.com/_OhJTRSxlXXxH0uphefYrXpx1DM061EXRNrEyv9_ffn61HDjJojUUo0Y9LIlTjcFs6NPo9quYRyE979nZEtjw58Q5OrT8KPbGZqG6U3DcHLw4UUR9PuJmXiHE4TxQjp1RL1QTu2oSeQbwVjlHCVvCyA" alt=""><figcaption></figcaption></figure>

New Domain Admin User:

$pw = Read-Host -Prompt 'Enter a Password for this user' -AsSecureString&#x20;

New-ADUser -Name paul-adm -AccountPassword $pw -Passwordneverexpires $true -Enabled $true

Add-ADGroupMember -Identity "Domain Admins" -Members paul-adm

<figure><img src="https://lh6.googleusercontent.com/Vysbcboo1XaSW9GjVxVcFuiDRmtpPhw_nsDyWWUr-MyalY3RX_AXooYRLk9AmUOLJB2owHfa9TBYoBZ9knjbpVHGWfz6thrLN8w0g3wYH4zwZtK8_5hE-VGmqYemtVQn0sEUkCQsQgxda0BxyDOWLP4" alt=""><figcaption></figcaption></figure>

Install DNS:

Get-WindowsFeature | where {($\_.name -like “DNS”)}

Install-WindowsFeature DNS -IncludeManagementTools

<figure><img src="https://lh6.googleusercontent.com/XO7L0SatR-XYYbq5H_RuFK7SMt3DtnrZRorW7OrXy-eq9nPBJTU1TWw4fZBWjSsG5-13ec0TaWcYqzZ5SgL7PYMyg_etBdK_1XTL0xeX6-EJnwhJfbhZsEvNB1YA9OKWTngrPLorv2gtgQzM_cYvTF8" alt=""><figcaption></figcaption></figure>

Reverse DNS Zone Creation:

Add-DnsServerPrimaryZone -NetworkId “10.0.17.0/24” -ReplicationScope “Domain”

<figure><img src="https://lh4.googleusercontent.com/5WTcSRiotL1PD0UziZpF0Mw9xXSKp6XcK7ohO5h_BTY1Fx7v3aNcYUAIAbm5C3RhXzAv5CGoaFpHUvt2xaTobpyIwNJj7mR41yFcTV976dpOY21WQbp7JKkTq-XPtRu_ToEicTREsgu_2MX7C2NvNfw" alt=""><figcaption></figcaption></figure>

Create A type with PTR:

Add-DnsServerResourceRecordPtr -Name "FW01-paul" -ZoneName "paul.local" -AllowUpdateAny -IPv4Address “10.0.17.2” -TimeToLive 01:00:00 -CreatePtr

<figure><img src="https://lh6.googleusercontent.com/PuHkrTXSIbMj8tYAlPdmwEANgiOE5nRUYVpJaJWEvrhnU2Brf38knwdt6JakjbaOyf5rWBE3ldlogDhGSPVAvRHrPp3dhZTXRkG0sisBX4Fg6KLSVsGz7of0NolRjI7TYU9sCnaEbVIcSzgwcVihjYc" alt=""><figcaption></figcaption></figure>

### Install vCenter:

Add iso to mgmt box

<figure><img src="https://lh6.googleusercontent.com/R4GZ-gVrd8ngkmrhaH2oMMCfxQjIeJN0wrZ_0bTSBhIvil7f_ZjnSO6KObRaQN37LUamTZQTBRn0f16Q1gSXmIBPD-lz0XysamVtKfwH3TNeu3sLoathNoJO6WRcSpDEj2EusaBzKcngs3wqRdnQ7FY" alt=""><figcaption></figcaption></figure>

Cd into media and go to the VMware VCSA directory then make your way to the installer

<figure><img src="https://lh3.googleusercontent.com/HjQwif-eC1yv6pSZJxTo9CZSJtylq3WmBUqtllDKyFzKnGh9bcMlEuLUUP94ZAPuWbHyXWSw4GIqT69gZhDRDSrAwFR59utGxWrzxWeOqanF8uJdVbCXNAiAnX1wkieJPyiQ8rwCCIF6uDWf9DzUGjI" alt=""><figcaption></figcaption></figure>

Stage 1:

<figure><img src="https://lh6.googleusercontent.com/uIe6Y_ZOOyg4oj1q3jK9AxbmK7Ydg9aVRrIT3NI2MFxfTaLIUfLhQ2T2zUxaMbb66mXp9u5KmoUYm7ndAGLCEzHhR2G1JJkjJqBr6IkhG3zOUuNdpsqhfj9jJ1RjvJ4zV3g844f11HrbJgA-XqfUycI" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh6.googleusercontent.com/0RIh3Q2MwiUM5Sv-FXqPsNhINWe6OsrvyFOsSWpeRAi1Dm0yM196ukRwCN353ALxGsZ3erutc6XZYLMC6CGvFfLcc6QuQwj1_BVZHYmfxvZdNamP3gaMsthdYehNAjVYUKJHFoRuAqY5R9bG1Jc9Ro4" alt=""><figcaption></figcaption></figure>

Click yes on ssl warning

<figure><img src="https://lh3.googleusercontent.com/kkOJ8q_hazlqhsyBVDjqsiqrGhPZWzzckAtoH5c6FRupTucrU6ab7mu7aogSO7nCdw5ZdggOTYfIsmLgX7W7kc6ZswZPlvUXlJA7pGwk3-VlxS77YBHpjQ5IjBJa2XocLcVxpBYxd5htjM2AIknrQPU" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh5.googleusercontent.com/DoSxKn7oeqk1FC5PsuSDUaonp-mJiu4MfnkwfZAxa8FuyMAC-1_aaHXglpy7GyVFPUcdiWfDGOVr_2uCZaQPWoo1__6NdnsAzzuoVeqZuUV5PCOYFC6douNR46GjX4LH6YhKlp8ENoXzyc0RCXAfd18" alt=""><figcaption></figcaption></figure>

Leave all default but select “Enable Thin Disk Mode”

<figure><img src="https://lh6.googleusercontent.com/iPBnoKDIUDKcMpqRBiGVR3iL9RVhVIFYlTNq5AH0DP9Om1JekBKH0sgjC6hycirVqOkzPaka3HxfEQHI_27-_E72E03U5syGxAhrDEDt6_ki6jxBY5AUtc6co1yE_Ce8-qw8W803YY8W_T9L5_i3rQw" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh3.googleusercontent.com/epKqdr7Vx3jbzz7mHwrEio2TtRTtXPt1G-P4HMxbpu2zKEhqUEX95nr66iFpQiwZgR-IuCMbhpK7RtSITTnmvVYwTHK8gOwVzPBDhm6tbgtooINcSqpDOdDaZJtIBrcJKcXFY8spa9ys6O1G-R0gSlA" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh3.googleusercontent.com/W9dDJMDRisuzC51XsrnRsS5E0D4aJsjuz7gEAIBCebh68-EXXXB50Ngypz4y4Tlse42bJCSaAYe9sGXloSfJPCu-MQGnYcKJN3b9VWma8fhHJ_9XSjWA7UNc6UuOjuCoRoioGkBgZ8CdHfpRa8s5DTw" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh6.googleusercontent.com/DNBWUkzDeP2tC0tFEWdtYNGpcpr8EtEyhrmDotMgk3vd1lB8i8BDRqev72310nCO5wjEMacGDK5sGpzPajSwY1jQTRC_GCfCVHN6mtlMfznP7A3vI_x_TA1itbkhCupo1YC0U7PU3AtdbGybw8sQVYs" alt=""><figcaption><p>I accidentally did sphere</p></figcaption></figure>

Add how to add datacenter

<figure><img src="https://lh4.googleusercontent.com/Y8VEMAmnBBxu0bPkOczuaT-3RHRBXKeqMz_SU4oeF6Txcy8s-5idJ6tRnjSfVVFrNDjDFF2JRG_p2t_x74P0Fa5PS_PrgtXUEIpdsfyLghaIvDSZmdlozYPXNntHk6mZ6Fj4jdRTOpBZiqSYs59WcQg" alt=""><figcaption></figcaption></figure>

Add how to add host

<figure><img src="https://lh5.googleusercontent.com/8mPzjFDtD_IqgR7kpuAg0-20oxDtI26rbVO3XlWLHmHDWHAMs_Krqei5YsCc2LoHo9m3kgv4RulWoeYkxPiq9I6BoF4c-wF_f3uP-7ZeC1-poWl-x89y47WfSmYLi8wr4dXNyWEe6FHOdS3ikST0Nsg" alt=""><figcaption></figcaption></figure>

Add ESXi IP

<figure><img src="https://lh4.googleusercontent.com/AHz_FMzzWmBviJ5kdAPAFz3T5F6Oy4Rl1-J4K3j_gxgoP26UHGWe20-E0t6F8nfhkZ1KdZAN66e1Dn5Se_kSdGUlaW_GaKZ-kyAndmr7fHIAPneBKK2tnirr0iU2WBfYBHXUCNOTCzwCZ99vBp98zW4" alt=""><figcaption></figcaption></figure>

Finish rest of steps

#### SSO Setup

Join Domain:

<figure><img src="https://lh6.googleusercontent.com/sjx7rVCWZE2DcXmxSLfBzRYpuHroihYRo0ri2V22wIZL-UHeI2xyLxoAfyWHRQ6T0E0g6U2eYBOJLEW135gkLsS8fNyo7OSQC0Z321v5O6jOymeh8Hqrm33CdcPxR9Hdkz88mZmBOAhXRz_oiJB7W6U" alt=""><figcaption></figcaption></figure>

After this reboot vcenter it will die for about 20 minutes…

<figure><img src="https://lh4.googleusercontent.com/N0swMeJclB7iwcFyrls_hSxCgyxR3cAN54PD0Vs5mkSFbJg_CzQtNQvvC0j68xKpgmfO7jvAjiqslE_hNXlDV1-iKoyLP43EVpaTjAxoVsU7rl-5QipWXUTa-SorLZlt1E0J_TMM-zjcHGDu4rBiWyg" alt=""><figcaption></figcaption></figure>

Set Domain as default

<figure><img src="https://lh6.googleusercontent.com/nca5IdOVrgMH2Se9-tk-bDX3ZVBh1N-lF7cYXrWG8y2H2pK7dnIMAG7CankUtwv848gLq93Prh47boN4MefQjl9e3JMBmkz9oVrSemHhF-6XGcwVhoGaRerCsRhPN7NgXasKBVINnjJEbyL9WveAv1Q" alt=""><figcaption></figcaption></figure>

Now add domain admins to the administrators group

<figure><img src="https://lh5.googleusercontent.com/qFDjzyEbHVDlVxf-c35TwbRQv36LALs18MFwANZ776cSP9i3dVzNd3tZEn9dnM2wRvEHVpBtg51f9cQTPckw6XDcxhtyx-ZGD26c1YnzSSesw8e7weLnybPaoaOnVKXXJDkF15t5YDfHnLE3eqox2RE" alt=""><figcaption></figcaption></figure>

<figure><img src="https://lh5.googleusercontent.com/6_0JEl42D21_g4iT5FPv8mYpmb7sl1xn7mBRsjOtpBUWNoWOb_gj0bwW9wZFKoJPQKGkuTyy5gToxSZNfjQaSdSaFb0AxRIYR1X3C-DNQLxpdDXW9Qe1fDWm62pajqE_GO1csjAWxZfyFQHmDrkXL94" alt=""><figcaption></figcaption></figure>