{"id":697,"date":"2026-08-26T23:23:35","date_gmt":"2026-08-26T23:23:35","guid":{"rendered":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/"},"modified":"2026-08-26T23:23:35","modified_gmt":"2026-08-26T23:23:35","slug":"active-directory-windows-vps-small-business-setup","status":"publish","type":"post","link":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/","title":{"rendered":"Setting Up Active Directory on a Windows VPS for Small Business"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">For a small business running on a Windows VPS, Active Directory Domain Services (AD DS) is the foundation of user management, policy enforcement, and authentication. Even with just 10\u201350 employees, a proper domain controller centralizes password policies, controls access to file shares, and enables Group Policy to standardize settings across workstations. This guide walks through setting up AD DS on a Windows VPS for small business use, from prerequisites to post-installation configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites and Server Sizing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before installing AD DS, verify that your Windows VPS meets the baseline requirements:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Windows Server edition:<\/strong> Standard or Datacenter (Windows Server 2019, 2022, or 2025). The Essentials edition also supports AD DS but is limited to 50 users.<\/li>\n<li><strong>RAM:<\/strong> Minimum 2 GB for AD DS, but 4 GB is recommended for a small business environment with DNS and DHCP on the same server.<\/li>\n<li><strong>Disk space:<\/strong> At least 40 GB for the operating system plus the NTDS database, SYSVOL, and logs. The database grows slowly for a small business; 4 GB is typically enough for thousands of objects.<\/li>\n<li><strong>Static IP address:<\/strong> The domain controller must have a static IP. Configure it in the Windows network adapter settings, not via DHCP.<\/li>\n<li><strong>DNS:<\/strong> AD DS requires DNS. The installation wizard can install and configure the DNS Server role automatically.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">When choosing a hosting plan, ensure the VPS provider offers full administrative access and the ability to set a static internal IP. Review the <a href=\"https:\/\/windows-vps.org\/\">Windows VPS plans on our homepage<\/a> to find a plan that meets these requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 1: Set a Static IP Address<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A domain controller cannot rely on DHCP for its IP address because DNS clients need a stable address to find the domain. Set a static IP through the network adapter settings:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Open <strong>Network and Sharing Center \u2192 Change adapter settings<\/strong>.<\/li>\n<li>Right-click the active network adapter and select <strong>Properties<\/strong>.<\/li>\n<li>Select <strong>Internet Protocol Version 4 (TCP\/IPv4)<\/strong> and click <strong>Properties<\/strong>.<\/li>\n<li>Set the IP address, subnet mask, default gateway, and DNS server (point DNS to itself, e.g., 127.0.0.1).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Alternatively, use PowerShell:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>New-NetIPAddress -InterfaceAlias \"Ethernet0\" `\n  -IPAddress 10.0.0.10 -PrefixLength 24 -DefaultGateway 10.0.0.1\nSet-DnsClientServerAddress -InterfaceAlias \"Ethernet0\" `\n  -ServerAddresses 127.0.0.1\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Step 2: Install Active Directory Domain Services<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Use the Server Manager or PowerShell to install the AD DS role. The PowerShell method is faster and reproducible:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Install the AD DS role and DNS Server\nInstall-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools\nInstall-WindowsFeature -Name DNS -IncludeManagementTools\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">After the role installation completes, promote the server to a domain controller. For a small business, create a new forest (the first domain controller in a new domain):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Create a new forest with a domain name like contoso.local\nInstall-ADDSForest -DomainName \"contoso.local\" `\n  -DomainNetbiosName \"CONTOSO\" `\n  -SafeModeAdministratorPassword (ConvertTo-SecureString \"YourD$RecoveryP@ss\" -AsPlainText -Force) `\n  -InstallDNS:$true -Force\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">The server will restart automatically. After reboot, log in with the domain administrator account (<code>CONTOSOAdministrator<\/code>).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 3: Configure DNS Forwarders<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">By default, the DNS server will attempt to use root hints for external DNS resolution, but configuring forwarders is more reliable. Open DNS Manager from the Tools menu, right-click the server, select <strong>Properties<\/strong>, and add forwarders like Google (8.8.8.8, 8.8.4.4) or Cloudflare (1.1.1.1):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Add-DnsServerForwarder -IPAddress 8.8.8.8, 1.1.1.1\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Step 4: Create Organizational Units and Users<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Organizational Units (OUs) let you organize users and computers and apply Group Policy at different levels. For a small business, a simple structure works well:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Create OUs\nNew-ADOrganizationalUnit -Name \"Employees\" -Path \"DC=contoso,DC=local\"\nNew-ADOrganizationalUnit -Name \"Computers\" -Path \"DC=contoso,DC=local\"\nNew-ADOrganizationalUnit -Name \"Groups\" -Path \"DC=contoso,DC=local\"\n\n# Create a security group\nNew-ADGroup -Name \"IT_Staff\" -GroupScope Global `\n  -Path \"OU=Groups,DC=contoso,DC=local\"\n\n# Create a user\nNew-ADUser -Name \"Jane Doe\" -GivenName \"Jane\" -Surname \"Doe\" `\n  -SamAccountName \"jane.doe\" -UserPrincipalName \"jane.doe@contoso.local\" `\n  -Path \"OU=Employees,DC=contoso,DC=local\" `\n  -AccountPassword (ConvertTo-SecureString \"InitialP@ssw0rd\" -AsPlainText -Force) `\n  -Enabled $true -PassThru\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Step 5: Configure Group Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Group Policy is one of the main benefits of AD DS. Start with a baseline password policy through the Default Domain Policy:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Open <strong>Group Policy Management Console<\/strong> from the Tools menu.<\/li>\n<li>Edit the <strong>Default Domain Policy<\/strong>.<\/li>\n<li>Navigate to <strong>Computer Configuration \u2192 Policies \u2192 Windows Settings \u2192 Security Settings \u2192 Account Policies \u2192 Password Policy<\/strong>.<\/li>\n<li>Set: Minimum password length 8, enforce password history 10, maximum password age 90 days.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Create additional policies for specific needs, such as mapped drives, printer connections, or security settings for remote workers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 6: Join Workstations to the Domain<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">With the domain controller running, join client workstations to the domain. On each Windows workstation:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Go to <strong>Settings \u2192 System \u2192 About \u2192 Rename this PC (Advanced)<\/strong>.<\/li>\n<li>Under <strong>Computer Name\/Domain Changes<\/strong>, select <strong>Domain<\/strong> and enter <code>contoso.local<\/code>.<\/li>\n<li>Enter domain administrator credentials when prompted.<\/li>\n<li>Restart the workstation.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">From PowerShell on the target workstation:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Add-Computer -DomainName \"contoso.local\" -Restart\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Step 7: Enable Remote Administration<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For ongoing management, install the <strong>Remote Server Administration Tools (RSAT)<\/strong> on an admin workstation so you can manage AD DS, DNS, and Group Policy without RDPing to the domain controller. RSAT is available as a Windows feature: <strong>Settings \u2192 Apps \u2192 Optional Features \u2192 Add a feature \u2192 RSAT: Active Directory Domain Services and Lightweight Directory Services Tools<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Best Practices for a Small Business Domain Controller<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Use a separate service account for day-to-day administration.<\/strong> Do not use the built-in Domain Administrator account for routine tasks.<\/li>\n<li><strong>Enable the Recycle Bin.<\/strong> This is enabled through Active Directory Administrative Center and allows you to restore accidentally deleted objects without a backup restore.<\/li>\n<li><strong>Back up the System State regularly.<\/strong> The System State includes the AD DS database, SYSVOL, and registry. Use Windows Server Backup or a third-party tool.<\/li>\n<li><strong>Monitor for replication issues.<\/strong> If you have more than one domain controller, run <code>repadmin \/replsummary<\/code> periodically to check replication health.<\/li>\n<li><strong>Keep the server updated.<\/strong> Apply Windows Update monthly, especially security patches.<\/li>\n<li><strong>Consider a second domain controller for redundancy.<\/strong> If budget allows, a second DC on a separate VPS ensures authentication continues if the primary fails.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Security Considerations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A domain controller is the crown jewel of your network. If an attacker compromises it, they control everything. Secure your AD DS environment with these additional measures:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Disable LM and NTLMv1 authentication through Group Policy.<\/li>\n<li>Enable SMB signing to prevent relay attacks.<\/li>\n<li>Restrict administrative access to the DC using Protected Users security group.<\/li>\n<li>Audit account logon events and review them regularly.<\/li>\n<li>If the DC is internet-facing, place it behind a VPN or RD Gateway \u2014 never expose domain controller ports (389, 636, 445) directly to the internet.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Setting up Active Directory on a Windows VPS gives your small business centralized user management, policy enforcement, and a foundation for growth. If you are looking for a hosting provider that supports AD DS with full admin access, the <a href=\"https:\/\/windows-vps.org\/\">Windows VPS plans on our homepage<\/a> offer the control and resources you need for a reliable domain controller.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>For a small business running on a Windows VPS, Active Directory Domain Services (AD DS) is the foundation of user management, policy enforcement, and authentication. Even with just 10\u201350 employees, a proper domain controller centralizes password policies, controls access to file shares, and enables Group Policy to standardize settings across workstations. This guide walks through &#8230; <a title=\"Setting Up Active Directory on a Windows VPS for Small Business\" class=\"read-more\" href=\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/\" aria-label=\"Read more about Setting Up Active Directory on a Windows VPS for Small Business\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":3,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-697","post","type-post","status-publish","format-standard","hentry","category-tutorials-guides"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.1 (Yoast SEO v26.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Setting Up Active Directory on a Windows VPS for Small Business - Windows VPS Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Setting Up Active Directory on a Windows VPS for Small Business\" \/>\n<meta property=\"og:description\" content=\"Setting Up Active Directory on a Windows VPS for Small Business\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/\" \/>\n<meta property=\"og:site_name\" content=\"Windows VPS Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-26T23:23:35+00:00\" \/>\n<meta name=\"author\" content=\"windows-vps\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"windows-vps\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/\",\"url\":\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/\",\"name\":\"Setting Up Active Directory on a Windows VPS for Small Business - Windows VPS Blog\",\"isPartOf\":{\"@id\":\"https:\/\/windows-vps.org\/blog\/#website\"},\"datePublished\":\"2026-08-26T23:23:35+00:00\",\"author\":{\"@id\":\"https:\/\/windows-vps.org\/blog\/#\/schema\/person\/44caceed916d0db318aa08d5623a7a58\"},\"breadcrumb\":{\"@id\":\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/windows-vps.org\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Setting Up Active Directory on a Windows VPS for Small Business\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/windows-vps.org\/blog\/#website\",\"url\":\"https:\/\/windows-vps.org\/blog\/\",\"name\":\"Windows VPS Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/windows-vps.org\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/windows-vps.org\/blog\/#\/schema\/person\/44caceed916d0db318aa08d5623a7a58\",\"name\":\"windows-vps\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/windows-vps.org\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3f2573db5afcd1a6ab9abcc5d48fc8e42584bc87ab9d98cc156e5b2097766dd9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3f2573db5afcd1a6ab9abcc5d48fc8e42584bc87ab9d98cc156e5b2097766dd9?s=96&d=mm&r=g\",\"caption\":\"windows-vps\"},\"sameAs\":[\"https:\/\/windows-vps.org\/blog\"],\"url\":\"https:\/\/windows-vps.org\/blog\/author\/myxiechengxuan\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Setting Up Active Directory on a Windows VPS for Small Business - Windows VPS Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/","og_locale":"en_US","og_type":"article","og_title":"Setting Up Active Directory on a Windows VPS for Small Business","og_description":"Setting Up Active Directory on a Windows VPS for Small Business","og_url":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/","og_site_name":"Windows VPS Blog","article_published_time":"2026-08-26T23:23:35+00:00","author":"windows-vps","twitter_card":"summary_large_image","twitter_misc":{"Written by":"windows-vps","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/","url":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/","name":"Setting Up Active Directory on a Windows VPS for Small Business - Windows VPS Blog","isPartOf":{"@id":"https:\/\/windows-vps.org\/blog\/#website"},"datePublished":"2026-08-26T23:23:35+00:00","author":{"@id":"https:\/\/windows-vps.org\/blog\/#\/schema\/person\/44caceed916d0db318aa08d5623a7a58"},"breadcrumb":{"@id":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/windows-vps.org\/blog\/active-directory-windows-vps-small-business-setup\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windows-vps.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Setting Up Active Directory on a Windows VPS for Small Business"}]},{"@type":"WebSite","@id":"https:\/\/windows-vps.org\/blog\/#website","url":"https:\/\/windows-vps.org\/blog\/","name":"Windows VPS Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windows-vps.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/windows-vps.org\/blog\/#\/schema\/person\/44caceed916d0db318aa08d5623a7a58","name":"windows-vps","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/windows-vps.org\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3f2573db5afcd1a6ab9abcc5d48fc8e42584bc87ab9d98cc156e5b2097766dd9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3f2573db5afcd1a6ab9abcc5d48fc8e42584bc87ab9d98cc156e5b2097766dd9?s=96&d=mm&r=g","caption":"windows-vps"},"sameAs":["https:\/\/windows-vps.org\/blog"],"url":"https:\/\/windows-vps.org\/blog\/author\/myxiechengxuan\/"}]}},"_links":{"self":[{"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/posts\/697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/comments?post=697"}],"version-history":[{"count":1,"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/posts\/697\/revisions"}],"predecessor-version":[{"id":700,"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/posts\/697\/revisions\/700"}],"wp:attachment":[{"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/media?parent=697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/categories?post=697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windows-vps.org\/blog\/wp-json\/wp\/v2\/tags?post=697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}