So, in my virtual homelabbing, I decided I was going to get a Windows based network set up with more or less only PowerShell. In these efforts, I discovered a pretty poor pile of documentation (such as this insanity where they tell you to create credentials with netsh, restart the service, then delete the credentials and restart again [optional step: wonder why it doesn't work]).
Here's how I set it up:
Create AD account:
# Get username and password for the new account (remember to include your domain!) $cred = Get-Credential # Create the user (it needs no special permissions) New-ADUser -Enabled $true -SamAccountName $cred.UserName -AccountPassword $cred.Password
Make the DHCP server use it:
# Set the credentials for the DHCP server Set-DhcpServerDnsCredential $cred # Restart the DHCP Server Restart-Service DhcpServer
Also remember to set the DNS server to only allow secure updates!
Set-DnsServerPrimaryZone -DynamicUpdate Secure