Join to this amazing webinar organized by Altaro Software. In this webinar you’ll learn Hyper-V troubleshooting basics and solutions to common problems represented by Andy Syrewicze (@asyrewicze) and Didier van Hoye (@WorkingHardInIT)
Sign up now to join us on February 25th, 2016 at 4pm CET / 10am EST
(30-45mins + live Q&A!) for some tales from the trenches!
Sign up here:
Hi there,
Continuing a series of blog posts with ADDS installation and configuration, how to setup OUs, Security groups and how to join all installed VMs to the AD domain. To remind you, below is the picture with all VMs on the laptop.
As we can assume, on the DC01 I’ll install ADDS role. Installation of ADDS is pretty stride forward.
Here we are done with a initial installation of Active Directory. Before we go further I’d like to mention one big important things, that is Time synchronization integration service and how to setup Time Server on the Domain Controller.
Uncheck Time synchronization under DC vm Settings.
then follow instructions how to configure an authoritative time server, on this link or you can follow instructions below. My recommendation is to use an external time source and fix to yourself.
”Let me fix it myself
To configure an internal time server to synchronize with an external time source, follow these steps:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\Parameters\Type
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\Config\AnnounceFlags
3. Enable NTPServer. To do this, follow these steps:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\TimeProviders\NtpServer
4. Specify the time sources. To do this, follow these steps:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\Parameters
Note Peers is a placeholder for a space-delimited list of peers from which your computer obtains time stamps. Each DNS name that is listed must be unique. You must append ,0x1 to the end of each DNS name. If you do not append ,0x1 to the end of each DNS name, the changes that you make in step 5 will not take effect.
5. Select the poll interval. To do this, follow these steps:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval
Note TimeInSeconds is a placeholder for the number of seconds that you want between each poll. A recommended value is 900 (decimal). This value configures the Time Server to poll every 15 minutes.
6. Configure the time correction settings. To do this, follow these steps:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\Config\MaxPosPhaseCorrection
Note
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\W32Time\Config\MaxNegPhaseCorrection
7. Close Registry Editor.
8. At the command prompt, type the following command to restart the Windows Time service, and then press Enter:
net stop w32time && net start w32time
Next step is preparation of Active Directory Users and Computers. As you can see on the pictures below, I’ve created few additional Organizational Units, Groups and Users as well.
On this Domain Controller I have installed DNS and DHCP too!
The next step is joining all virtual machines what I’ve installed to the domain. We have two possibility for that, one by one or with a PowerShell all together. I chose PowerShell.
#add VMs to the domain Set-Item WSMan:\localhost\Client\TrustedHosts -Value hvnode01, hvnode02, hvnode03, hvnode04, router
-Concatenate $LocalCredential = Get-Credential administrator $DomainCredential = Get-Credential mlinar.local\romeo Add-Computer -ComputerName hvnode01, hvnode02, hvnode03, hvnode04, router
-DomainName mlinar.local -Credential $DomainCredential -LocalCredential $LocalCredential
-Restart -PassThru
We’re done with the essential requirements! The next step in this scenario is the preparation of storage (Storage Spaces Direct), installation and configuration of Failover Clustering feature etc.
Until then enjoy in holidays with your family!
I wish you Merry Christmas and Happy New Year 
Cheers,
Romeo
Hi there,
As promised in my previous post, here I’ll show you how to install and configure Remote Access role in one Virtual Machine on laptop. Why do we need router between Laptop and virtual machines? For virtual machines in lab environment I need isolated network segment, different from other networks, my production network, home network etc. but the most important thing is because I don’t want to switch virtual network adapters (wired and wireless), on every virtual machine every time when I am on a different network. For example; when I’m at the Office have been using wired network, when I’m at home have been using wi-fi, when I’m speaker at conferences have been using mixed network connections. In this case I need switch virtual network adapters only on one virtual machine (“Router”).
As you can see here I have three virtual network adapters created. The first is RomeLabInt for all virtual machines inside Lab network. The second is WiFivLan which I have been using on WiFi network and the third is WiredvLanv when I have been using on wired network.
Next step in this configuration is installation of “Router” virtual machine. OS is WS2016 TP4. Virtual machine has two virtual network adapters, one External and one Internal. Internal adapter has a fixed IP address, in my case this is network subnet 10.10.20.0/8, Router’s IP is 10.10.20.1 and other virtual machines will be use that IP address as a default gateway. External adapter has IP assigned by local DHCP.
Now we are ready to install Remote Access role on Router virtual machine what’s simple as that. Only what you need is to follow pictures below 
.
Remote Access role is installed and now we need to configure RRAS. Follow the pictures again.
We are done with RRAS and now can access to outside world from Internal network and from the our Hyper-V virtualized hosts as well.
The network stack is set up and now we can go further. The next step in this scenario is installation of Active Directory and will be installed on virtual machine in one of Hyper-V virtualized hosts.
In the previous post I explained how to enable nested virtualization on Hyper-V virtual machine and already have VM installed as well as I have VM promoted as a primary domain controller. Domain controller is the DNS and DHCP server.
So, what’s the next step? In the next post we will see how to prepare Active Directory domain, how to setup Organizational Units with security groups, how to add Hyper-V hosts in that group, how to prepare virtualized Hyper-V hosts and whole infrastructure for the High Availability etc.
Until then, stay tuned
Cheers,
Romeo
