(Enter DSA.MSC and then press Enter gpupdate/force" command. (ie group policy rewrite) services.MSCTCP/IPNETBIOS service is not started sysocmgr/i:sysoc.inf, configure DNS. Enter dnsmgmt.msc in the run to create a new zone , the new domain name is the domain name of DC. The next step is one of the key steps. Allow dynamic update, allow the client to register and dynamically update the resource record DNS with the default configuration, and then install the DC, the result is failure. At this time, it is necessary to modify DC's SOA record, point to yourself. NS record, let NS point to yourself. SOA (Start Authorization Organization) effect: Defines which title server in the area is the effect of the prestige title server NS (title server) : Indicates the prestige server in this area and the main server and auxiliary server in the area specified in SOA, nslookup first to see if it can be explained. (I only did the forward area, not the reverse area.)