Create your Amazon Managed Microsoft AD Active Directory - Amazon Directory Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Create your Amazon Managed Microsoft AD Active Directory

To create a new Amazon Managed Microsoft AD Active Directory, perform the following steps. Before starting this procedure, make sure that you have completed the prerequisites identified in Amazon Managed Microsoft AD prerequisites.

To create an Amazon Managed Microsoft AD Active Directory
  1. In the Amazon Directory Service console navigation pane, choose Directories and then choose Set up directory.

  2. On the Select directory type page, choose Amazon Managed Microsoft AD, and then choose Next.

  3. On the Enter directory information page, provide the following information:


    Choose from either the Standard Edition or Enterprise Edition of Amazon Managed Microsoft AD. For more information about editions, see Amazon Directory Service for Microsoft Active Directory.

    Directory DNS name

    The fully qualified name for the directory, such as

    Directory NetBIOS name

    The short name for the directory, such as CORP.

    Directory description

    An optional description for the directory.

    Admin password

    The password for the directory administrator. The directory creation process creates an administrator account with the user name Admin and this password.

    The password cannot include the word "admin."

    The directory administrator password is case-sensitive and must be between 8 and 64 characters in length, inclusive. It must also contain at least one character from three of the following four categories:

    • Lowercase letters (a-z)

    • Uppercase letters (A-Z)

    • Numbers (0-9)

    • Non-alphanumeric characters (~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/)

    Confirm password

    Retype the administrator password.

  4. On the Choose VPC and subnets page, provide the following information, and then choose Next.


    The VPC for the directory.


    Choose the subnets for the domain controllers. The two subnets must be in different Availability Zones.

  5. On the Review & create page, review the directory information and make any necessary changes. When the information is correct, choose Create directory. Creating the directory takes 20 to 40 minutes. Once created, the Status value changes to Active.