Install AD Forest + DC in Azure Only in ARM (aka v2) in 30 min

Context:

Install a cloud only AD Forest + DC. (with HA)

Install:

·         With HA: https://azure.microsoft.com/en-us/documentation/templates/active-directory-new-domain-ha-2-dc/

·        Single VM install (for quick testing): https://github.com/Azure/azure-quickstart-templates/tree/master/active-directory-new-domain worked for me. It saves stuff in a data disk, puts the vm behind an alb, installs the forest via a vm extension, etc..

Note it takes a long time to complete the installation.

The deployment in portal looks like:

 (yes event after the installation is successful, so don’t get alarmed.)

But, when you dig in to the deployment, you will see a busy icon though, currently its “green”…I captured after the install. A busy symbol is what you are looking for….

Verify the installation:

However, after the install the template will show successful:

 

Also, in resources.azure.com, you should see success messages.

 

References:

·         http://social.technet.microsoft.com/wiki/contents/articles/22622.building-your-first-domain-controller-on-2012-r2.aspx

·         https://msdn.microsoft.com/library/azure/jj156090.aspx

·         https://azure.microsoft.com/en-us/documentation/articles/active-directory-new-forest-virtual-machine/ (in classic/ASM)

·         https://technet.microsoft.com/library/jj574166.aspx

·         http://blogs.msdn.com/b/rds/archive/2015/07/13/10627643.aspx (though its setting up RDS)

Troubleshooting/tips:

·         If the deployment fails, delete all its content including the resource group. Because, each deployment doesn’t create a set of unique assets even if the parameters are uniquely named, ALB for instance is not. You can certainly modify the template for your need.

·         Parameter verification: Don’t rely on the template check to validate the uniqueness of your parameter, e.g. “a” in storage account comes back as available….