menu
arrow_back

Deploying a Fault-Tolerant Microsoft Active Directory Environment

90m access · 60m completion
Connection Details

9 Credits

info_outline
This lab costs 9 Credits to run. You can purchase credits or a subscription under My Account.

01:30:00

Deploying a Fault-Tolerant Microsoft Active Directory Environment

GSP118

This lab is part of a series aimed at helping you deploy a highly available Windows architecture on Google Cloud Platform (GCP) with Microsoft Active Directory (AD), SQL Server, and Internet Information Services (IIS). In this tutorial, you set up a redundant pair of Windows Domain Controllers (DC) with AD using a new Virtual Private Cloud (VPC) network and multiple subnets.You can also use this lab to learn to set up an AD configuration for use in other architectures. Replicating a remote AD environment to the new GCP-based AD environment will not be covered, although this is possible with Cloud VPN and additional AD configuration.

Objectives

  • Create a custom mode VPC network with two subnets spanning two zones.
  • Create Windows Server virtual instances and enable AD Domain Services.
  • Configure a new domain with Active Directory.
  • Join the new Windows Server instances to the new domain.
  • Configure firewall rules to allow traffic to the virtual machines.
  • Test the configuration.

Architecture

Setup and Requirements

Qwiklabs setup

What you'll need

To complete this lab, you'll need:

  • Access to a standard internet browser (Chrome browser recommended).
  • Time. Note the lab's Completion time in Qwiklabs, which is an estimate of the time it should take to complete all steps. Plan your schedule so you have time to complete the lab. Once you start the lab, you will not be able to pause and return later (you begin at step 1 every time you start a lab).
  • You do NOT need a Google Cloud Platform account or project. An account, project and associated resources are provided to you as part of this lab.
  • If you already have your own GCP account, make sure you do not use it for this lab.
  • If your lab prompts you to log into the console, use only the student account provided to you by the lab. This prevents you from incurring charges for lab activities in your personal GCP account.

Start your lab

When you are ready, click Start Lab. You can track your lab's progress with the status bar at the top of your screen.

Find Your Lab's GCP Username and Password

To access the resources and console for this lab, locate the Connection Details panel in Qwiklabs. Here you will find the account ID and password for the account you will use to log in to the Google Cloud Platform:

If your lab provides other resource identifiers or connection-related information, it will appear on this panel as well.

Log in to Google Cloud Console

Using the Qwiklabs browser tab/window (preferably in Incognito mode) or the separate browser you are using for the Qwiklabs session, copy the Username from the Connection Details panel and click the orange "Open Google Console" button. Paste in the Username, and then the Password as prompted:

Accept the terms and conditions.

Since this is a temporary account, which you will only have access to for this one lab:

  • Do not add recovery options
  • Do not sign up for free trials

The Google Cloud Shell

Activate Google Cloud Shell

From the GCP Console click the Cloud Shell icon on the top right toolbar:

Then click "Start Cloud Shell":

It should only take a few moments to provision and connect to the environment:

This virtual machine is loaded with all the development tools you'll need. It offers a persistent 5GB home directory, and runs on the Google Cloud, greatly enhancing network performance and authentication. Much, if not all, of your work in this lab can be done with simply a browser or your Google Chromebook.

Once connected to the cloud shell, you should see that you are already authenticated and that the project is already set to your PROJECT_ID:

gcloud auth list

Command output

Credentialed accounts:
 - <myaccount>@<mydomain>.com (active)
gcloud config list project

Command output

[core]
project = <PROJECT_ID>

If it is not, you can set it with this command:

gcloud config set project <PROJECT_ID>

Command output

Updated property [core/project].

Join Qwiklabs to Read the Rest of this Lab...and More!

  • Get temporary access to the Google Cloud Console.
  • Nearly 100 labs from beginner to advanced levels.
  • Bite-sized so you can learn at your own pace.
Join to Start This Lab