On [[Windows Server]], a [[domain controller]] is a server that responds to security authentication requests (logging in, etc.) within a [[Windows Domain]]. # Setup ## New Forest Add the 'Active Directory Domain Services' role to the server. You do not need to add DNS/DHCP roles at this time, it will be configured during setup. Follow [this guide](https://www.manageengine.com/products/active-directory-audit/kb/how-to/how-to-setup-a-domain-controller.html) for step-by-step instructions.