Create a New AD LDS Instance

Applies To: Windows Server 2008

In Active Directory Lightweight Directory Services (AD LDS), a "service instance" (or, simply, "instance") refers to a single running copy of the AD LDS directory service. Multiple instances of AD LDS can run simultaneously on the same computer. Each instance of the AD LDS directory service has a separate directory data store, a unique service name, and a unique service description that is assigned during installation. During AD LDS installation, you have the option of creating an application directory partition if your Lightweight Directory Access Protocol (LDAP) application does not create one for you. You can use this procedure and the Active Directory Lightweight Directory Services Setup Wizard to create AD LDS service instances.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477). By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition.

To create a new AD LDS instance by using the Active Directory Lightweight Directory Services Setup Wizard

1. Click Start, point to Administrative Tools, and then click Active Directory Lightweight Directory Services Setup Wizard.

2. On the Welcome to the Active Directory Lightweight Directory Services Setup Wizard page, click Next.

3. On the Setup Options page, click A unique instance, and then click Next.

4. On the Instance Name page, provide a name for the AD LDS instance that you are installing. This name is used on the local computer to uniquely identify the AD LDS instance.

5. On the Ports page, specify the communications ports that the AD LDS instance uses to communicate. AD LDS can communicate by using both LDAP and Secure Sockets Layer (SSL). Therefore, you must provide a value for each port.

6. On the Application Directory Partition page, you can create an application directory partition (or naming context) by clicking Yes, create an application directory partition. Or, you can click No, do not create an application directory partition, in which case you must create an application directory partition manually after installation. For more information, see Create an Application Directory Partition.

7. On the File Locations page, you can view and change the installation directories for AD LDS data and recovery (log) files. By default, AD LDS data and recovery files are installed in %ProgramFiles%\Microsoft ADAM\instancename\data, where instancename represents the AD LDS instance name that you specified on the Instance Name page.

8. On the Service Account Selection page, select an account to be used as the service account for AD LDS. The account that you select determines the security context in which the AD LDS instance runs. The Active Directory Lightweight Directory Services Setup Wizard defaults to the Network Service account.

9. On the AD LDS Administrators page, select a user or group to become the default administrator for the AD LDS instance. The user or group that you select will have full administrative control of the AD LDS instance. By default, the Active Directory Lightweight Directory Services Setup Wizard specifies the currently logged on user. You can change this selection to any local or domain account or group on your network.

10. On the Importing LDIF Files page, you can import schema LDAP Data Interchange Format (LDIF) files into the AD LDS instance.

    It is recommended that you import the following LDIF files when you create a new AD LDS instance by using the Active Directory Lightweight Directory Services Setup Wizard:

    LDIF file name	Description
    MS-InetOrgPerson.ldf	Contains the definition of the inetOrgPerson LDAP object class.
    MS-User.ldf	Contains user and related classes object definitions.
    MS-UserProxy.ldf	Contains the simple userProxy class object definition.
    MS-UserProxyFull.ldf	Contains the full userProxy class object definition.
    MS-ADLDS-DisplaySpecifiers.ldf	Contains display specifiers. This .ldf file is required for snap-in operations. If you are planning to connect to your AD LDS instance and then manage it through the Active Directory Sites and Services snap-in, import this file now with the Active Directory Lightweight Directory Services Setup Wizard.

11. The Ready to Install page gives you an opportunity to review your installation selections. After you click Next, the Active Directory Lightweight Directory Services Setup Wizard copies files and sets up AD LDS on your computer.

12. When the Active Directory Lightweight Directory Services Setup Wizard finishes installing AD LDS, it displays this message: “You have successfully completed the Active Directory Lightweight Directory Services Setup Wizard.” When the Completing the Active Directory Lightweight Directory Services Setup Wizard page appears, click Finish to close the wizard.