Running a Windows domain in Kyndryl Cloud Uplift

It is common practice to run a Windows domain inside an environment within Kyndryl Cloud Uplift. When building a Windows domain in Kyndryl Cloud Uplift, consider using a manual network. The difference between an automatic network and a manual network is that automatic networks are managed by Kyndryl Cloud Uplift (Kyndryl Cloud Uplift provides DHCP, DNS, etc.). With a manual network, Kyndryl Cloud Uplift doesn’t attempt to manage anything (other than providing a gateway out). Manual networking will thus allow you to setup one or more networks in your environment that Kyndryl Cloud Uplift will NOT attempt to manage. You can then provide DHCP and DNS from your own domain controller.

For more information about creating manual networks, see Creating a manual network. For information about running your own DNS server on a manual network, see Manually configuring domain name servers.

Contents

Best practices

For both automatic and manual networks, the following should be considered:

Best practices for running a Windows domain inside Kyndryl Cloud Uplift
  • Ensure that each VM has its own unique identifier (or SID). Please see Resolving “duplicate SID” errors in a Windows domain.
  • Make sure you correctly configure your environment’s network with domain name, IP address space, and subnet prior to building or importing your domain controller.
  • Decide on the correct computer and host name for the domain controller prior to assigning it to the domain controller role.
  • Give the domain controller an IP address that is higher than .1 (for example, on a 192.168.0.0 subnet, make your DC a 192.168.0.100)
  • When you boot the server that is going to be the domain controller, give it a static IP. Assign it the appropriate FQDN as well as the appropriate gateway. The gateway IP address of the network (in an automatic network) defaults to the last IP address of a subnet. For example, the gateway of 192.168.0.0 for a 255.255.255.0 subnet would default to 192.168.0.254. You can define the IP address off the Kyndryl Cloud Uplift gateway from the Network Settings page.
  • After you assign the machine to the domain controller role, power it down and make a template of it.
  • After booting up the domain controller for the first time, make sure to make its DNS setting 127.0.0.1.
  • Make sure the DNS for the domain controller is configured for dynamic updates.

Domain controllers are sensitive to name and network changes

Adding a domain controller to an environment

Once your domain controller is completely configured and saved as a template, you can add it to other environments. You have to be careful when you do this. For instance:

  1. Make sure the target environment has a matching or non-conflicting network.
  2. Make sure there isn’t a machine with a conflicting name.

Don’t change the domain controller computer name. Name changes can break a domain controller. This is non-recoverable outside of restoring from a template, or restoring from a backup domain controller.

Other considerations

Other domain controller considerations: