DCPROMO 应答文件语法

本文介绍了 dcpromo 应答文件用于在域控制器上安装和删除 Active Directory 域服务 (AD DS) 的参数和选项。 可以使用此信息生成应答文件，以便在域控制器上执行 AD DS 的无人参与的安装。 还可以使用应答文件在无人参与的模式下删除 AD DS。

DCPROMO 摘要

Dcpromo.exe 是一个程序，可用于对 Active Directory 域控制器进行升级和降级。 管理员可以使用 dcpromo 应答文件来执行以下无人参与的任务：

• 将工作组和成员服务器升级为 Active Directory 域控制器。
• 将 Microsoft Windows NT 4.0 域控制器升级到 Active Directory 域控制器。
• 降级域控制器。

Windows Server 2000 及更高版本支持 dcpromo 应答文件语法。 但是，虽然 Windows Server 2012 及更高版本仍支持 dcpromo 应答文件语法，但它们用 PowerShell cmdlets 取代了 dcpromo.exe。 有关详细信息，请参阅 Active Directory PowerShell 模块参考。

基本语法

dcpromo 应答文件是一个 ASCII 文本文件，可为 Active Directory 域服务配置向导的每个页面提供自动用户输入。

要以无人参与的模式启动 dcpromo，请转到“开始”，输入“dcpromo”，然后在提升命令提示符窗口中运行以下命令：

dcpromo /answer:<answer.txt>

每个 dcpromo 操作都需要对应答文件 [DCInstall] 部分中的特定字段进行应答。 下表提供了每个操作的必填字段。 如未指定该选项，则使用默认值。 这些字段的默认值在字段定义中介绍。

• 对于新林安装，适用以下选项：

  [DCINSTALL]
  InstallDNS=yes  
  NewDomain=forest  
  NewDomainDNSName=\<The fully qualified Domain Name System (DNS) name>  
  DomainNetBiosName=\<By default, the first label of the fully qualified DNS name>  
  SiteName=\<Default-First-Site-Name>  
  ReplicaOrNewDomain=domain  
  ForestLevel=\<The forest functional level number>  
  DomainLevel=\<The domain functional level number>  
  DatabasePath="\<The path of a folder on a local volume>"  
  LogPath="\<The path of a folder on a local volume>"  
  RebootOnCompletion=yes  
  SYSVOLPath="\<The path of a folder on a local volume>"  
  SafeModeAdminPassword=\<The password for an offline administrator account>  
  

• 对于子域安装，适用以下选项：

  [DCINSTALL]  
  ParentDomainDNSName=\<Fully qualified DNS name of parent domain>  
  UserName=\<The administrative account in the parent domain>  
  UserDomain=\<The name of the domain of the user account>  
  Password=\<The password for the user account> Specify * to prompt the user for credentials during the installation.  
  NewDomain=child  
  
  ChildName=\<The single-label DNS name of the new domain>  
  SiteName=\<The name of the AD DS site in which this domain controller will reside> This site must be created in advance in the Dssites.msc snap-in.  
  DomainNetBiosName=\<The first label of the fully qualified DNS name>  
  ReplicaOrNewDomain=domain  
  DomainLevel=\<The domain functional level number> This value can't be less than the current value of the forest functional level.  
  
  DatabasePath="\<The path of a folder on a local volume>"  
  LogPath="\<The path of a folder on a local volume>"  
  SYSVOLPath="\<The path of a folder on a local volume>"  
  InstallDNS=yes  
  
  CreateDNSDelegation=yes  
  DNSDelegationUserName= \<The account that has permissions to create a DNS delegation> The account that is being used to install AD DS may differ from the account in the parent domain that has the permissions that are required to create a DNS delegation. In this case, specify the account that can create the DNS delegation for this parameter. Specify \* to prompt the user for credentials during the installation.  
  DNSDelegationPassword= \<The password for the account that is specified for DNSDelegationUserName> Specify * to prompt the user for a password during the installation.  
  SafeModeAdminPassword=\<The password for an offline administrator account>  
  RebootOnCompletion=yes 
  

• 对于现有林安装中的新树，适用以下选项：

  [DCINSTALL]  
  UserName=\<An administrative account in the parent domain>  
  UserDomain=\<The name of the domain of the user account>  
  Password=\<The password for the adminstrative account> Specify \* to prompt the user for credentials during the installation.  
  NewDomain=tree  
  NewDomainDNSName=\<The fully qualified DNS name of the new domain>  
  SiteName=\<The name of the AD DS site in which this domain controller will reside> This site must be created in advance in the Dssites.msc snap-in.  
  DomainNetBiosName=\<The first label of the fully qualified DNS name>  
  ReplicaOrNewDomain=domain  
  DomainLevel=\<The domain functional level number>  
  DatabasePath="\<The path of a folder on a local volume>"  
  LogPath="\<The path of a folder on a local volume>"  
  SYSVOLPath="\<The path of a folder on a local volume>"  
  InstallDNS=yes  
  CreateDNSDelegation=yes  
  DNSDelegationUserName= \<The account that has permissions to create a DNS delegation> The account that is being used to install AD DS may differ from the account in the parent domain that has the permissions that are required to create a DNS delegation. In this case, specify the account that can create the DNS delegation for this parameter. Specify \* to prompt the user for credentials during the installation.  
  DNSDelegationPassword=\<The password for the account that is specified for DNSDelegationUserName> Specify * to prompt the user for a password during the installation.  
  SafeModeAdminPassword=\<The password for an offline administrator account>  
  RebootOnCompletion=yes  
  

• 对于其他域控制器安装，适用以下选项：

  [DCINSTALL]  
  UserName=\<The administrative account in the domain of the new domain controller>  
  UserDomain=\<The name of the domain of the new domain controller>  
  Password=\<The password for the UserName account>  
  SiteName=\<The name of the AD DS site in which this domain controller will reside> This site must be created in advance in the Dssites.msc snap-in.  
  ReplicaOrNewDomain=replica  
  ReplicaDomainDNSName=\<The fully qualified domain name (FQDN) of the domain in which you want to add an additional domain controller>  
  DatabasePath="\<The path of a folder on a local volume>"  
  LogPath="\<The path of a folder on a local volume>"  
  SYSVOLPath="\<The path of a folder on a local volume>"  
  InstallDNS=yes  
  ConfirmGC=yes  
  SafeModeAdminPassword=\<The password for an offline administrator account>  
  RebootOnCompletion=yes  
  

• 对于使用“从介质安装 (IFM)”方法的其他域控制器安装，适用以下选项：

  [DCINSTALL]  
  UserName=\<The administrative account in the domain of the new domain controller>  
  Password=\<The password for the UserName account>  
  UserDomain=\<The name of the domain of the UserName account>  
  DatabasePath="\<The path of a folder on a local volume>"  
  LogPath="\<The path of a folder on a local volume>"  
  SYSVOLPath="\<The path of a folder on a local volume>"  
  SafeModeAdminPassword=\<The password of an offline administrator account>  
  
  CriticalReplicationOnly=no  
  SiteName=\<The name of the AD DS site in which this domain controller will reside>  
  This site must be created in advance in the Dssites.msc snap-in.  
  
  ReplicaOrNewDomain=replica  
  ReplicaDomainDNSName=\<The fully qualified domain name (FQDN) of the domain in which you want to add an additional domain controller>  
  ReplicationSourceDC=\<An existing domain controller in the domain>  
  
  ReplicationSourcePath=\<The local drive and the path of the backup>  
  
  RebootOnCompletion=yes 
  

• 对于只读域控制器 (RODC) 安装，适用以下选项：

  [DCINSTALL]  
  UserName=\<The administrative account in the domain of the new domain controller>  
  UserDomain=\<The name of the domain of the user account>  
  PasswordReplicationDenied=\<The names of the user, group, and computer accounts whose passwords are not to be replicated to this RODC>  
  PasswordReplicationAllowed =\<The names of the user, group, and computer accounts whose passwords can be replicated to this RODC>  
  DelegatedAdmin=\<The user or group account name that will install and administer the RODC>  
  SiteName=Default-First-Site-Name  
  CreateDNSDelegation=no  
  CriticalReplicationOnly=yes  
  
  Password=\<The password for the UserName account>  
  ReplicaOrNewDomain=ReadOnlyReplica  
  ReplicaDomainDNSName=\<The FQDN of the domain in which you want to add an additional domain controller>  
  DatabasePath= "\<The path of a folder on a local volume>"  
  LogPath="\<The path of a folder on a local volume>"  
  SYSVOLPath="\<The path of a folder on a local volume>"  
  InstallDNS=yes  
  ConfirmGC=yes  
  SafeModeAdminPassword=\<The password for an offline administrator account>  
  RebootOnCompletion=yes  
  

• 要删除 AD DS，适用以下选项：

  [DCINSTALL]  
  UserName=\<An administrative account in the domain>  
  UserDomain=\<The domain name of the administrative account>  
  Password=\<The password for the UserName account>  
  AdministratorPassword=\<The local administrator password for the server>  
  RemoveApplicationPartitions=yes  
  RemoveDNSDelegation=yes  
  DNSDelegationUserName=\<The DNS server administrative account for the DNS zone that contains the DNS delegation>  
  DNSDelegationPassword=\<The password for the DNSDelegationUserName account>  
  RebootOnCompletion=yes  
  

• 要从域中的最后一个域控制器中删除 AD DS，适用以下选项：

  [DCINSTALL]  
  UserName=\<An administrative account in the parent domain>  
  UserDomain=\<The domain name of the UserName account>  
  Password=\<The password for the UserName account> Specify * to prompt the user for credentials during the installation.  
  IsLastDCInDomain=yes  
  AdministratorPassword=\<The local administrator password for the server>  
  RemoveApplicationPartitions=If you want to remove the partitions, specify "yes" (no quotation marks) for this entry. If you want to keep the partitions, this entry is optional.  
  RemoveDNSDelegation=yes  
  DNSDelegationUserName=\<The DNS server administrative account for the DNS zone that contains the DNS delegation>  
  DNSDelegationPassword=\<The password for the DNS server administrative account>  
  RebootOnCompletion=yes  
  

• 对于删除林中的最后一个域控制器，适用以下选项：

  [DCINSTALL]  
  UserName=\<An administrative account in the parent domain>  
  UserDomain=\<The domain name of the UserName account>  
  Password=\<The password for the UserName account> Specify * to prompt the user for credentials during the installation.  
  IsLastDCInDomain=yes  
  AdministratorPassword=\<The local administrator password for the server>  
  RemoveApplicationPartitions=If you want to remove the partitions, specify "yes" (no quotation marks) for this entry. If you want to keep the partitions, this entry is optional.  
  RemoveDNSDelegation=yes  
  DNSDelegationUserName=\<The DNS server administrative account for the DNS zone that contains the DNS delegation>  
  DNSDelegationPassword=\<The password for the DNS server administrative account>  
  RebootOnCompletion=yes  
  

字段定义

本部分将介绍应答文件中可以使用的字段和条目。

安装操作参数

删除操作参数

无人参与的安装返回代码

在完成基于 Windows Server 2008 的域控制器的无人参与的安装后，Active Directory 域服务安装向导会返回成功或失败代码。 有关无人参与的安装返回代码的详细信息，请参阅无人参与的安装返回代码。

相关内容

• AD DS 部署

• 降级域控制器