Active Directory Lab

Lab Requirements

• 1 Windows Server

• 2 Windows 10 Workstations

  • 60 GB Disk space

  • 16 GB RAM

• Proceed with installing a Windows Server 2022 VM and two Windows 10 VMs inside VMware

  • For each of them install the VMware tools

---

Windows Server 2022

🔗 Win Server 2022 Evaluation iso - direct link

• Hostname - HYDRA-DC

• User (domain admin) - administrator:P@$$w0rd!

• IP - set a static IP

  • Control Panel\Network and Internet\Network Connections

  • IPv4 IP - 192.168.31.90 (in my lab)

• Add the following server roles

  • Active Directory Domain Services

  • Active Directory Certificate Services

• Domain - MARVEL.local

• Active Directory Users and Computers

  • Copy the Administrator user and create a second domain admin

    • tstark:<yourpassword>

  • Copy the Administrator user and create a service account

    • SQLService:MYpassword123#

  • Create new users

    • fcastle:Password1

    • pparker:Password1

• File and Storage Services

  • Create a new SMB Share Quick - hackme

• Group Policy Management

  • Create a new Enforced GPO - Disable Windows Defender

    • Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Microsoft Defender Antivirus - Enable Turn off Microsoft Defender Antivirus

• SPN - Register the Service Principal Name - SQLService

setspn -a HYDRA-DC/SQLService.MARVEL.local:60111 MARVEL\SQLService

# Query for SPN
setspn -T MARVEL.local -Q */*

---

Windows 10

🔗 Windows 10 Enterprise iso

• Hostname1 - THEPUNISHER

  • User - frankcastle:Password1

• Hostname2 - SPIDERMAN

  • User - peterparker:Password1

• IP - set the DNS to the DC IP - 192.168.31.90

• Join both VMs to the MARVEL.local domain

  • Login using MARVEL\administrator:P@$$w0rd!

  • Edit local users and groups

    • Reset password and enable local Administrator:Password1!

    • Add the domain users to the Administrators group

      • fcastle for THEPUNISHER VM

      • fcastle and pparker for SPIDERMAN VM

• Go to Network and turn on Network discovery and file sharing

SPIDERMAN - Logoff and login locally to .\peterparker:Password1

• Map Network Drive - \\HYDRA-DC\hackme , reconnect at sign-in, using different credentials

---

VM	IP
hydra-dc.MARVEL.local	192.168.31.90
spiderman.MARVEL.local	192.168.31.92
thepunisher.MARVEL.local	192.168.31.93

• Set /etc/hosts in the Kali VM

192.168.31.90  hydra-dc.MARVEL.local
192.168.31.92  spiderman.MARVEL.local
192.168.31.93  thepunisher.MARVEL.local

---