Initial commit

Vagrant/scripts/create-domain.ps1

@@ -0,0 +1,55 @@
+# Purpose: Creates the "windomain.local" domain
+# Source: https://github.com/StefanScherer/adfs2
+param ([String] $ip)
+
+$subnet = $ip -replace "\.\d+$", ""
+
+if ((gwmi win32_computersystem).partofdomain -eq $false) {
+
+  Write-Host 'Installing RSAT tools'
+  Import-Module ServerManager
+  Add-WindowsFeature RSAT-AD-PowerShell,RSAT-AD-AdminCenter
+
+  Write-Host 'Creating domain controller'
+  # Disable password complexity policy
+  secedit /export /cfg C:\secpol.cfg
+  (gc C:\secpol.cfg).replace("PasswordComplexity = 1", "PasswordComplexity = 0") | Out-File C:\secpol.cfg
+  secedit /configure /db C:\Windows\security\local.sdb /cfg C:\secpol.cfg /areas SECURITYPOLICY
+  rm -force C:\secpol.cfg -confirm:$false
+
+  # Set administrator password
+  $computerName = $env:COMPUTERNAME
+  $adminPassword = "vagrant"
+  $adminUser = [ADSI] "WinNT://$computerName/Administrator,User"
+  $adminUser.SetPassword($adminPassword)
+
+  $PlainPassword = "vagrant" # "P@ssw0rd"
+  $SecurePassword = $PlainPassword | ConvertTo-SecureString -AsPlainText -Force
+
+  # Windows Server 2016 R2
+  Install-WindowsFeature AD-domain-services
+  Import-Module ADDSDeployment
+  Install-ADDSForest `
+    -SafeModeAdministratorPassword $SecurePassword `
+    -CreateDnsDelegation:$false `
+    -DatabasePath "C:\Windows\NTDS" `
+    -DomainMode "7" `
+    -DomainName "windomain.local" `
+    -DomainNetbiosName "WINDOMAIN" `
+    -ForestMode "7" `
+    -InstallDns:$true `
+    -LogPath "C:\Windows\NTDS" `
+    -NoRebootOnCompletion:$true `
+    -SysvolPath "C:\Windows\SYSVOL" `
+    -Force:$true
+
+  $newDNSServers = "8.8.8.8", "4.4.4.4"
+  $adapters = Get-WmiObject Win32_NetworkAdapterConfiguration | Where-Object { $_.IPAddress -And ($_.IPAddress).StartsWith($subnet) }
+  if ($adapters) {
+    Write-Host Setting DNS
+    $adapters | ForEach-Object {$_.SetDNSServerSearchOrder($newDNSServers)}
+  }
+  Write-Host "Setting timezone to UTC"
+  c:\windows\system32\tzutil.exe /s "UTC"
+  Write-Host "Excluding NAT interface from DNS"
+}