Configuring the Network Environment

Before you create virtual machine instances, you need to create the VPC network and configure it to host a Microsoft Active Directory environment.

Create the VPC network:

You create your VPC network with subnets in two different regions.

Your Vision, Our Expertise

Elevating Your Software Product Engineering Journey with Vast Edge

Create the domain controller firewall rule:

Create the DNS firewall rule:

Create the Remote Desktop firewall rule:

Create the Cloud DNS private forwarding zone

Launching the Domain Controller Instances:

Launch the initial domain controller instance in us-central1:

Launch the second domain controller instance in us-east4:

Connecting to an instance using IAP for TCP Forwarding

Establish the RDP connection to dc-1:

Promoting the Initial Domain Controller

After connecting to dc-1, you can work in your RDP windows to enable the local administrator account, install Active Directory Domain Services, and configure the instance as a domain controller in a new Active Directory Forest.

Enable the local administrator user

Install Active Directory Domain Services:

Configure dc-1 as a domain controller:

Configuring Active Directory sites and replication

In this section, you reconnect to dc-1 to configure Active Directory sites and replication, this time using domain administrator credentials.

Configure Active Directory sites:

Configure site links for Active Directory replication:

Configure subnets for Active Directory sites

Add dc-1 to the appropriate site (GCP-us-central1)

Promoting Additional Domain Controllers

Configure dc-2 as a domain controller:

Testing the Active Directory Configuration

Test the domain controller configuration by launching a new test instance into the environment and joining it to the domain.

Launch the test instance us-central1

Connect to the Test Instance:

In this section, you get credentials for a local user on test-1 and then connect to the test instance server.

Connect to the test instance server test-1

a. At your local command prompt, start a tunnel using IAP and the gcloud CLI:

As the g-cloud CLI initializes the tunnel for TCP forwarding, you see output similar to the following