{"id":1793,"date":"2021-07-19T06:00:20","date_gmt":"2021-07-19T03:00:20","guid":{"rendered":"https:\/\/macrosec.tech\/?p=1793"},"modified":"2021-07-18T12:13:37","modified_gmt":"2021-07-18T09:13:37","slug":"building-a-basic-active-directory-lab","status":"publish","type":"post","link":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/","title":{"rendered":"Building A Basic Active Directory Lab"},"content":{"rendered":"<p><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-parallax-none nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-right:50px;--awb-padding-left:50px;--awb-background-color:#686868;--awb-background-image:url(&quot;https:\/\/macrosec.tech\/wp-content\/uploads\/2020\/01\/85204.jpg&quot;);--awb-background-size:cover;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_1 1_1 fusion-one-full fusion-column-first fusion-column-last\" style=\"--awb-padding-top:0%;--awb-padding-right:0%;--awb-padding-bottom:0%;--awb-padding-left:0%;--awb-bg-size:cover;--awb-margin-top:10px;--awb-margin-bottom:10px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-column-wrapper-legacy\"><div class=\"fusion-column-content-centered\"><div class=\"fusion-column-content\"><div class=\"fusion-text fusion-text-1\"><h2 style=\"text-align: center; font-size: 40px;\"><strong><span style=\"text-decoration: underline;\">BUILDING A BASIC ACTIVE DIRECTORY LAB<\/span><\/strong><\/h2>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-1 hover-type-none\"><img decoding=\"async\" width=\"400\" height=\"400\" alt=\"Haystack - Hack The Box Machine\" title=\"Businessman pointing at his presentation on the futuristic digit\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg\" class=\"img-responsive wp-image-1831\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab-200x200.jpg 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg 400w\" sizes=\"(max-width: 800px) 100vw, 400px\" \/><\/span><\/div><\/div><\/div><\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><\/div><\/div><div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-2 nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-padding-top:30px;--awb-padding-right:50px;--awb-padding-left:50px;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-1 fusion_builder_column_1_1 1_1 fusion-one-full fusion-column-first fusion-column-last\" style=\"--awb-bg-size:cover;--awb-margin-top:10px;--awb-margin-bottom:10px;\"><div class=\"fusion-column-wrapper fusion-column-has-shadow fusion-flex-column-wrapper-legacy\"><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-separator fusion-no-large-visibility fusion-full-width-sep\" style=\"margin-left: auto;margin-right: auto;margin-top:15px;margin-bottom:15px;width:100%;\"><\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-text fusion-text-2\"><p style=\"font-size: 18px;\">This blog post was written by <a href=\"https:\/\/twitter.com\/Amarjit_Labu\">Amarjit Labhuram<\/a>.<\/p>\n<\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-separator fusion-clearfix\" style=\"float:left;margin-top:15px;margin-bottom:15px;width:100%;max-width:35%;\"><div class=\"fusion-separator-border sep-single sep-solid\" style=\"--awb-height:20px;--awb-amount:20px;--awb-sep-color:#b51616;border-color:#b51616;border-top-width:1px;\"><\/div><\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-text fusion-text-3\"><h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>Introduction<\/strong><\/h2>\n<p style=\"font-size: 20px;\">These days most enterprises run Microsoft Active Directory Services for building and managing their infrastructure. With the current rise of attacks against corporations, it is important for the security team to understand the sort of attacks that can be carried out on their infrastructure as well as develop defense and detection mechanisms to better secure them.<\/p>\n<p style=\"font-size: 20px;\">Having your own playground is essential to understand Tactics, Techniques, and Procedures (TTPs) used by cybercriminals. This post will take you through how to build your own Active Directory lab on-premise in which you can practice the attacks as well as find its detection mechanisms.<\/p>\n<p style=\"font-size: 20px;\">Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.<\/p>\n<h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>Prerequisites<\/strong><\/h2>\n<p style=\"font-size: 20px;\">I shall be using Virtualbox as my hypervisor to create the lab but feel free to use any hypervisor of your choice, the concept is the same. You will need several Windows OS virtual machines. For our purposes, we are using Microsoft evaluation center copies of Windows 10 and Windows Server 2019.<\/p>\n<ul>\n<li style=\"font-size: 20px;\">Windows 10 build 2004 &#8211; <a href=\"https:\/\/www.microsoft.com\/en-us\/evalcenter\/evaluate-windows-10-enterprise\">get it here<\/a><\/li>\n<li style=\"font-size: 20px;\">Windows Server 2019 &#8211; <a href=\"https:\/\/www.microsoft.com\/en-us\/evalcenter\/evaluate-windows-server-2019\">get it here<\/a><\/li>\n<\/ul>\n<p style=\"font-size: 20px;\">I also assume that the reader is able to do base installations of the above OSs in Virtualbox.<\/p>\n<h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>Lab Setup<\/strong><\/h2>\n<p style=\"font-size: 20px;\">The lab setup will comprise of the following:<\/p>\n<p style=\"font-size: 20px;\">SERVER<\/p>\n<ul>\n<li style=\"font-size: 20px;\">Windows Server 2019: <strong>1 instance<\/strong><\/li>\n<\/ul>\n<p style=\"font-size: 20px;\">\u2003 \u2003 \u2003 Processor: <strong>1<\/strong><\/p>\n<p style=\"font-size: 20px;\">\u2003 \u2003 \u2003 RAM: <strong>2GB<\/strong><\/p>\n<p style=\"font-size: 20px;\">\u2003 \u2003 \u2003 HDD: <strong>20GB<\/strong><\/p>\n<p style=\"font-size: 20px;\">DESKTOP<\/p>\n<ul>\n<li style=\"font-size: 20px;\">Windows 10: <strong>2 instances<\/strong><\/li>\n<\/ul>\n<p style=\"font-size: 20px;\">\u2003 \u2003 \u2003 Processor: <strong>1<\/strong><\/p>\n<p style=\"font-size: 20px;\">\u2003 \u2003 \u2003 RAM: <strong>2GB<\/strong><\/p>\n<p style=\"font-size: 20px;\">\u2003 \u2003 \u2003 HDD: <strong>20GB<\/strong><\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-2 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"618\" height=\"462\" title=\"Fig1\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig1.png\" alt class=\"img-responsive wp-image-1815\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig1-200x150.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig1-400x299.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig1-600x449.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig1.png 618w\" sizes=\"(max-width: 800px) 100vw, 618px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-4\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-5\"><h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>Active Directory Domain Setup<\/strong><\/h2>\n<p style=\"font-size: 20px;\">Once the Windows Server base operating system is installed I begin setting up the AD that will be called <strong>telecorp.local<\/strong>. I shall start off by setting up the network interface of the DC. Log in to the server and open Network and Sharing Center. Setup the IPv4 configuration to look like the following image:<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-3 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"405\" height=\"459\" title=\"Fig2\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig2.png\" alt class=\"img-responsive wp-image-1816\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig2-200x227.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig2-400x453.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig2.png 405w\" sizes=\"(max-width: 800px) 100vw, 405px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-6\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-7\"><p style=\"font-size: 20px;\">If all is setup properly you should be able to ping google.com from powershell on DC01.telecorp.local.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-4 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"731\" height=\"418\" title=\"Fig3\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig3.png\" alt class=\"img-responsive wp-image-1817\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig3-200x114.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig3-400x229.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig3-600x343.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig3.png 731w\" sizes=\"(max-width: 800px) 100vw, 731px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-8\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-9\"><p style=\"font-size: 20px;\">With all the network interface of DC01 setup I then install the <strong>Active Directory Domain Services<\/strong> role to the Windows Server 2019 so that it can prepare the device to become a domain controller for the <strong>telecorp.local<\/strong> domain. Start the <strong>Add Roles and Features Wizard<\/strong> and leave everything on default until you get to <strong>Server Roles<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-5 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"785\" height=\"558\" title=\"Fig4\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig4.png\" alt class=\"img-responsive wp-image-1818\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig4-200x142.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig4-400x284.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig4-600x426.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig4.png 785w\" sizes=\"(max-width: 800px) 100vw, 785px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-10\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-11\"><p style=\"font-size: 20px;\">With the rest of the settings left as default click on Next until you get to the <strong>Confirmation<\/strong> section. Ensure you tick the <strong>Restart the destination server automatically if required<\/strong> option and click on <strong>Yes<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-6 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"784\" height=\"560\" title=\"Fig5\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig5.png\" alt class=\"img-responsive wp-image-1819\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig5-200x143.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig5-400x286.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig5-600x429.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig5.png 784w\" sizes=\"(max-width: 800px) 100vw, 784px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-12\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-13\"><p style=\"font-size: 20px;\">Click on <strong>Install<\/strong> and let the roles get installed on the server.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-7 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"786\" height=\"558\" title=\"Fig6\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig6.png\" alt class=\"img-responsive wp-image-1820\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig6-200x142.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig6-400x284.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig6-600x426.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig6.png 786w\" sizes=\"(max-width: 800px) 100vw, 786px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-14\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-15\"><p style=\"font-size: 20px;\">Once installation is complete you can close the window. In the Server Manager window at the top right corner there is a notification flag that shows pending tasks that are required to be done on the server. Start with <strong>Promote this server to a domain controller<\/strong>. As this is the first domain in the lab I select the <strong>Add a new forest<\/strong> section and give it the root domain name of <strong>telecorp.local<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-8 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"757\" height=\"556\" title=\"Fig7\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig7.png\" alt class=\"img-responsive wp-image-1821\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig7-200x147.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig7-400x294.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig7-600x441.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig7.png 757w\" sizes=\"(max-width: 800px) 100vw, 757px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-16\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-17\"><p style=\"font-size: 20px;\">Next, I set the <strong>Forest<\/strong> and <strong>Domain functional levels<\/strong> to <strong>Windows Server 2012<\/strong> and I set the <strong>DSRM password<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-9 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"755\" height=\"556\" title=\"Fig8\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig8.png\" alt class=\"img-responsive wp-image-1822\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig8-200x147.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig8-400x295.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig8-600x442.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig8.png 755w\" sizes=\"(max-width: 800px) 100vw, 755px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-18\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-19\"><p style=\"font-size: 20px;\">You can leave the next items as default and click <strong>Next<\/strong> till you get to <strong>Additional Option<\/strong> where it will populate the <strong>NetBIOS<\/strong> name which should be the same as the domain name.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-10 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"758\" height=\"549\" title=\"Fig9\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig9.png\" alt class=\"img-responsive wp-image-1823\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig9-200x145.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig9-400x290.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig9-600x435.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig9.png 758w\" sizes=\"(max-width: 800px) 100vw, 758px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-20\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-21\"><p style=\"font-size: 20px;\">Again, you can leave the rest of the settings as default and click <strong>Next<\/strong> till the <strong>Prerequisite Check<\/strong> section. If all has gone well, you should get an <strong>All prerequisite check passed<\/strong> notification upon which I can click <strong>Install<\/strong> to complete the process.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-11 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"758\" height=\"556\" title=\"Fig10\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig10.png\" alt class=\"img-responsive wp-image-1797\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig10-200x147.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig10-400x293.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig10-600x440.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig10.png 758w\" sizes=\"(max-width: 800px) 100vw, 758px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-22\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-23\"><p style=\"font-size: 20px;\">Once installation is complete, I got a message like this:<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-12 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"758\" height=\"557\" title=\"Fig11\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig11.png\" alt class=\"img-responsive wp-image-1798\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig11-200x147.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig11-400x294.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig11-600x441.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig11.png 758w\" sizes=\"(max-width: 800px) 100vw, 758px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-24\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-25\"><p style=\"font-size: 20px;\">Once the device restarts, I have a ready domain environment waiting for me.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>Adding A PC to The Forest Domain<\/strong><\/h2>\n<p style=\"font-size: 20px;\">Next, I set up a PC that will play the victim in the lab that will be called <strong>PC01.telecorp.local<\/strong>. I set up the network interface of the PC. Log in to the PC and open <strong>Network and Sharing Center<\/strong>. Setup the <strong>IPv4<\/strong> configuration to look like the following image:<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-13 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"396\" height=\"466\" title=\"Fig12\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig12.png\" alt class=\"img-responsive wp-image-1799\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig12-200x235.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig12.png 396w\" sizes=\"(max-width: 800px) 100vw, 396px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-26\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-27\"><p style=\"font-size: 20px;\">And ensure that I can ping DC01.telecorp.local from the PC.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-14 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"536\" height=\"213\" title=\"Fig13\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig13.png\" alt class=\"img-responsive wp-image-1800\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig13-200x79.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig13-400x159.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig13.png 536w\" sizes=\"(max-width: 800px) 100vw, 536px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-28\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-29\"><p style=\"font-size: 20px;\">With that the PC is ready to be added to the domain. Open <strong>File Explorer<\/strong> and right-click on <strong>This PC<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-15 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"1128\" height=\"600\" title=\"Fig14\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig14.png\" alt class=\"img-responsive wp-image-1801\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig14-200x106.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig14-400x213.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig14-600x319.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig14-800x426.png 800w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig14.png 1128w\" sizes=\"(max-width: 800px) 100vw, 1128px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-30\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-31\"><p style=\"font-size: 20px;\">In the <strong>System<\/strong> window that opens, under <strong>Computer Name<\/strong> click on the <strong>Change Settings<\/strong> link.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-16 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"1121\" height=\"591\" title=\"Fig15\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig15.png\" alt class=\"img-responsive wp-image-1802\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig15-200x105.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig15-400x211.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig15-600x316.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig15-800x422.png 800w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig15.png 1121w\" sizes=\"(max-width: 800px) 100vw, 1121px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-32\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-33\"><p style=\"font-size: 20px;\">In the <strong>System Properties<\/strong> window, select <strong>Change<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-17 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"410\" height=\"473\" title=\"Fig16\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig16.png\" alt class=\"img-responsive wp-image-1803\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig16-200x231.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig16-400x461.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig16.png 410w\" sizes=\"(max-width: 800px) 100vw, 410px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-34\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-35\"><p style=\"font-size: 20px;\">In the <strong>Computer Name\/Domain Changes<\/strong> window ensure that the <strong>Computer Name<\/strong> is set to <strong>PC01<\/strong> and <strong>Member of<\/strong> is set to <strong>telecorp.local<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-18 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"325\" height=\"396\" title=\"Fig17\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig17.png\" alt class=\"img-responsive wp-image-1804\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig17-200x244.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig17.png 325w\" sizes=\"(max-width: 800px) 100vw, 325px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-36\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-37\"><p style=\"font-size: 20px;\">Authenticate with the administrator account on to the domain to complete the adding of the PC to the domain.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-19 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"454\" height=\"286\" title=\"Fig18\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig18.png\" alt class=\"img-responsive wp-image-1805\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig18-200x126.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig18-400x252.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig18.png 454w\" sizes=\"(max-width: 800px) 100vw, 454px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-38\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-39\"><p style=\"font-size: 20px;\">With that the PC is now added to the domain.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-20 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"291\" height=\"152\" title=\"Fig19\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig19.png\" alt class=\"img-responsive wp-image-1806\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig19-200x104.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig19.png 291w\" sizes=\"(max-width: 800px) 100vw, 291px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-40\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-41\"><p style=\"font-size: 20px;\">This can be verified as well on the Domain Controller.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-21 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"605\" height=\"286\" title=\"Fig20\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig20.png\" alt class=\"img-responsive wp-image-1807\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig20-200x95.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig20-400x189.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig20-600x284.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig20.png 605w\" sizes=\"(max-width: 800px) 100vw, 605px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-42\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-43\"><p style=\"font-size: 20px;\">You will be required to restart the PC to complete the joining of the domain. Restart the PC and login using domain credentials.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-22 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"461\" height=\"546\" title=\"Fig21\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig21.png\" alt class=\"img-responsive wp-image-1808\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig21-200x237.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig21-400x474.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig21.png 461w\" sizes=\"(max-width: 800px) 100vw, 461px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-44\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-45\"><p style=\"font-size: 20px;\">The PC is now part of the domain telecorp.local.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>Building In a Vulnerability: AS-REP Roastable Account<\/strong><\/h2>\n<p style=\"font-size: 20px;\">However, for some strange reason (dark one though), it is possible to disable the pre-authentication prerequisite for user accounts. For example in <a href=\"https:\/\/laurentschneider.com\/wordpress\/2014\/01\/the-long-long-route-to-kerberos.html\">this article<\/a>, the author states that in order to benefit from SSO on a database hosted on a Unix server, he has to disable the pre-authentication for the user. So, to do this I create a user account using the <strong>Active Directory Users &amp; Computers<\/strong> management interface:<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-23 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"640\" height=\"608\" title=\"Fig22\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig22.png\" alt class=\"img-responsive wp-image-1809\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig22-200x190.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig22-400x380.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig22-600x570.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig22.png 640w\" sizes=\"(max-width: 800px) 100vw, 640px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-46\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-47\"><p style=\"font-size: 20px;\">In the new window fill in the details of the new user being created:<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-24 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"463\" height=\"409\" title=\"Fig 23\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig-23.png\" alt class=\"img-responsive wp-image-1824\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig-23-200x177.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig-23-400x353.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig-23.png 463w\" sizes=\"(max-width: 800px) 100vw, 463px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-48\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-49\"><p style=\"font-size: 20px;\">Give the user a password that exists in the RockYou list so that we can use this for the word list in the attack phase. Disable the <strong>User must change password at next logon<\/strong> and enable the <strong>Password never expires<\/strong> option.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-25 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"459\" height=\"409\" title=\"Fig24\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig24.png\" alt class=\"img-responsive wp-image-1811\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig24-200x178.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig24-400x356.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig24.png 459w\" sizes=\"(max-width: 800px) 100vw, 459px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-50\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-51\"><p style=\"font-size: 20px;\">Once you click <strong>Next<\/strong> the user will be created. Click on <strong>Finish<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-26 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"454\" height=\"402\" title=\"Fig25\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig25.png\" alt class=\"img-responsive wp-image-1812\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig25-200x177.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig25-400x354.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig25.png 454w\" sizes=\"(max-width: 800px) 100vw, 454px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-52\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-53\"><p style=\"font-size: 20px;\">Right click on the newly created user and select <strong>Properties<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-27 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"622\" height=\"595\" title=\"Fig26\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig26.png\" alt class=\"img-responsive wp-image-1813\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig26-200x191.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig26-400x383.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig26-600x574.png 600w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig26.png 622w\" sizes=\"(max-width: 800px) 100vw, 622px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-54\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-55\"><p style=\"font-size: 20px;\">In the property window for the user select the Account tab, under the account options, scroll to the bottom and select the <strong>Do not require Kerberos authentication<\/strong> option, and click <strong>Ok<\/strong>.<\/p>\n<\/div><div class=\"fusion-image-element fusion-image-align-center in-legacy-container\" style=\"text-align:center;--awb-caption-title-font-family:var(--h2_typography-font-family);--awb-caption-title-font-weight:var(--h2_typography-font-weight);--awb-caption-title-font-style:var(--h2_typography-font-style);--awb-caption-title-size:var(--h2_typography-font-size);--awb-caption-title-transform:var(--h2_typography-text-transform);--awb-caption-title-line-height:var(--h2_typography-line-height);--awb-caption-title-letter-spacing:var(--h2_typography-letter-spacing);\"><div class=\"imageframe-align-center\"><span class=\" fusion-imageframe imageframe-none imageframe-28 hover-type-none\" style=\"border:5px solid #e2e0e0;\"><img decoding=\"async\" width=\"428\" height=\"556\" title=\"Fig27\" src=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig27.png\" alt class=\"img-responsive wp-image-1814\" srcset=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig27-200x260.png 200w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig27-400x520.png 400w, https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/Fig27.png 428w\" sizes=\"(max-width: 800px) 100vw, 428px\" \/><\/span><\/div><\/div><div class=\"fusion-text fusion-text-56\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-text fusion-text-57\"><p style=\"font-size: 20px;\">NOTE:<\/p>\n<p style=\"font-size: 20px;\">The Impacket GetNPUsers.py can perform the operation of requesting for a TGT for a user that has this setting enabled. Once in possession of the domain controller response KRB_AS_REP, the attacker can try to find out the victim\u2019s clear-text password offline, by using John The Ripper with the krb5tgs mode, or with hashcat.<\/p>\n<h2 style=\"font-size: 24px; color: #b51616; text-align: left;\"><strong>What Next?<\/strong><\/h2>\n<p style=\"font-size: 20px;\">I highly suggest going through this site to learn about more AD vulnerabilities and attack vectors:<\/p>\n<p style=\"font-size: 20px;\"><a href=\"https:\/\/adsecurity.org\/\">https:\/\/adsecurity.org\/<\/a><\/p>\n<p style=\"font-size: 20px;\">Also, check out this presentation by Gabi (<a href=\"https:\/\/twitter.com\/_theVIVI\">@_theVIVI<\/a>) from AfricaHackon 2019:<\/p>\n<p style=\"font-size: 20px;\"><a href=\"https:\/\/thevivi.net\/wp-content\/uploads\/2019\/08\/theVIVI-AD-Security-Workshop_AfricaHackon2019.pdf\">https:\/\/thevivi.net\/wp-content\/uploads\/2019\/08\/theVIVI-AD-Security-Workshop_AfricaHackon2019.pdf<\/a><\/p>\n<\/div><div class=\"fusion-text fusion-text-58\"><p>\u00a0<\/p>\n<\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-separator fusion-full-width-sep\" style=\"margin-left: auto;margin-right: auto;width:100%;\"><div class=\"fusion-separator-border sep-single sep-solid\" style=\"--awb-height:20px;--awb-amount:20px;border-color:#3e3e3e;border-top-width:1px;\"><\/div><\/div><div class=\"fusion-sep-clear\"><\/div><div class=\"fusion-text fusion-text-59\"><h2 style=\"font-size: 16px; color: #b51616; text-align: left;\"><strong>Disclaimer<\/strong><\/h2>\n<p style=\"font-size: 10px;\">The MacroSec blogs are solely for informational and educational purposes. Any actions and or activities related to the material contained within this website are solely your responsibility. The misuse of the information on this website can result in criminal charges brought against the persons in question. The authors and MacroSec will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.<\/p>\n<\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":1831,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","footnotes":""},"categories":[10,8,13],"tags":[],"class_list":["post-1793","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-offensive-security","category-pentesting","category-red-teaming"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Building A Basic Active Directory Lab &#8212; MacroSEC<\/title>\n<meta name=\"description\" content=\"Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Building A Basic Active Directory Lab &#8212; MacroSEC\" \/>\n<meta property=\"og:description\" content=\"Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/\" \/>\n<meta property=\"og:site_name\" content=\"MacroSEC\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-19T03:00:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Amarjit Labhuram\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@amarjit_labu\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Amarjit Labhuram\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"46 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/\"},\"author\":{\"name\":\"Amarjit Labhuram\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#\\\/schema\\\/person\\\/d9d95e3245148a5fd3ea964e0775c8a9\"},\"headline\":\"Building A Basic Active Directory Lab\",\"datePublished\":\"2021-07-19T03:00:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/\"},\"wordCount\":9291,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/macrosec.tech\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/ad-lab.jpg\",\"articleSection\":[\"Offensive Security\",\"Penetration Testing\",\"Red Teaming\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/\",\"url\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/\",\"name\":\"Building A Basic Active Directory Lab &#8212; MacroSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/macrosec.tech\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/ad-lab.jpg\",\"datePublished\":\"2021-07-19T03:00:20+00:00\",\"description\":\"Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#primaryimage\",\"url\":\"https:\\\/\\\/macrosec.tech\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/ad-lab.jpg\",\"contentUrl\":\"https:\\\/\\\/macrosec.tech\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/ad-lab.jpg\",\"width\":400,\"height\":400,\"caption\":\"Businessman pointing at his presentation on the futuristic digital screen\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/index.php\\\/2021\\\/07\\\/19\\\/building-a-basic-active-directory-lab\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/macrosec.tech\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Building A Basic Active Directory Lab\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#website\",\"url\":\"https:\\\/\\\/macrosec.tech\\\/\",\"name\":\"MacroSEC\",\"description\":\"Your Cybersecurity Partner - Kenya\",\"publisher\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/macrosec.tech\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#organization\",\"name\":\"MacroSec Ltd\",\"url\":\"https:\\\/\\\/macrosec.tech\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/macrosec.tech\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/MobileIcon_Retine.png\",\"contentUrl\":\"https:\\\/\\\/macrosec.tech\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/MobileIcon_Retine.png\",\"width\":400,\"height\":107,\"caption\":\"MacroSec Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/macrosec.tech\\\/#\\\/schema\\\/person\\\/d9d95e3245148a5fd3ea964e0775c8a9\",\"name\":\"Amarjit Labhuram\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b2463550dd9f2056d7f5eeb68fe855ca41ae56f9364d6827097858a1d141838?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b2463550dd9f2056d7f5eeb68fe855ca41ae56f9364d6827097858a1d141838?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b2463550dd9f2056d7f5eeb68fe855ca41ae56f9364d6827097858a1d141838?s=96&d=mm&r=g\",\"caption\":\"Amarjit Labhuram\"},\"description\":\"I am a keen professional geek with a broad range of analytical skills and interests ranging from theoretical physics to practical security architectures. My professional experience is focused on all the common types of penetration testing and some rather less orthodox methods . Extensive exposure to a broad range of businesses, architectures, and technologies backs up the theoretical knowledge I'm able to bring all the way from the keyboard to the boardroom. I'm always looking to learn and develop, but a key part of satisfaction for me is applying skills and knowledge to solve interesting real world problems. I typically do this by constructing a model, validating it, and then reasoning (often mathematically or in code) through the potential solutions finding the one with optimum parameters. For the sake of everybody else I've learned over the years how to convey the jist and the results at the right level to people with diverse backgrounds.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/amarjit-labhuram-51699815\\\/\",\"https:\\\/\\\/x.com\\\/amarjit_labu\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Building A Basic Active Directory Lab &#8212; MacroSEC","description":"Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/","og_locale":"en_US","og_type":"article","og_title":"Building A Basic Active Directory Lab &#8212; MacroSEC","og_description":"Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.","og_url":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/","og_site_name":"MacroSEC","article_published_time":"2021-07-19T03:00:20+00:00","og_image":[{"width":400,"height":400,"url":"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg","type":"image\/jpeg"}],"author":"Amarjit Labhuram","twitter_card":"summary_large_image","twitter_creator":"@amarjit_labu","twitter_misc":{"Written by":"Amarjit Labhuram","Est. reading time":"46 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#article","isPartOf":{"@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/"},"author":{"name":"Amarjit Labhuram","@id":"https:\/\/macrosec.tech\/#\/schema\/person\/d9d95e3245148a5fd3ea964e0775c8a9"},"headline":"Building A Basic Active Directory Lab","datePublished":"2021-07-19T03:00:20+00:00","mainEntityOfPage":{"@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/"},"wordCount":9291,"commentCount":0,"publisher":{"@id":"https:\/\/macrosec.tech\/#organization"},"image":{"@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#primaryimage"},"thumbnailUrl":"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg","articleSection":["Offensive Security","Penetration Testing","Red Teaming"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/","url":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/","name":"Building A Basic Active Directory Lab &#8212; MacroSEC","isPartOf":{"@id":"https:\/\/macrosec.tech\/#website"},"primaryImageOfPage":{"@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#primaryimage"},"image":{"@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#primaryimage"},"thumbnailUrl":"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg","datePublished":"2021-07-19T03:00:20+00:00","description":"Active Directory is a directory service that centralizes the management of users, computers and other objects within a network. Its primary function is to authenticate and authorize users and computers in a windows domain.","breadcrumb":{"@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#primaryimage","url":"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg","contentUrl":"https:\/\/macrosec.tech\/wp-content\/uploads\/2021\/07\/ad-lab.jpg","width":400,"height":400,"caption":"Businessman pointing at his presentation on the futuristic digital screen"},{"@type":"BreadcrumbList","@id":"https:\/\/macrosec.tech\/index.php\/2021\/07\/19\/building-a-basic-active-directory-lab\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/macrosec.tech\/"},{"@type":"ListItem","position":2,"name":"Building A Basic Active Directory Lab"}]},{"@type":"WebSite","@id":"https:\/\/macrosec.tech\/#website","url":"https:\/\/macrosec.tech\/","name":"MacroSEC","description":"Your Cybersecurity Partner - Kenya","publisher":{"@id":"https:\/\/macrosec.tech\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/macrosec.tech\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/macrosec.tech\/#organization","name":"MacroSec Ltd","url":"https:\/\/macrosec.tech\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/macrosec.tech\/#\/schema\/logo\/image\/","url":"https:\/\/macrosec.tech\/wp-content\/uploads\/2018\/04\/MobileIcon_Retine.png","contentUrl":"https:\/\/macrosec.tech\/wp-content\/uploads\/2018\/04\/MobileIcon_Retine.png","width":400,"height":107,"caption":"MacroSec Ltd"},"image":{"@id":"https:\/\/macrosec.tech\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/macrosec.tech\/#\/schema\/person\/d9d95e3245148a5fd3ea964e0775c8a9","name":"Amarjit Labhuram","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2b2463550dd9f2056d7f5eeb68fe855ca41ae56f9364d6827097858a1d141838?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b2463550dd9f2056d7f5eeb68fe855ca41ae56f9364d6827097858a1d141838?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b2463550dd9f2056d7f5eeb68fe855ca41ae56f9364d6827097858a1d141838?s=96&d=mm&r=g","caption":"Amarjit Labhuram"},"description":"I am a keen professional geek with a broad range of analytical skills and interests ranging from theoretical physics to practical security architectures. My professional experience is focused on all the common types of penetration testing and some rather less orthodox methods . Extensive exposure to a broad range of businesses, architectures, and technologies backs up the theoretical knowledge I'm able to bring all the way from the keyboard to the boardroom. I'm always looking to learn and develop, but a key part of satisfaction for me is applying skills and knowledge to solve interesting real world problems. I typically do this by constructing a model, validating it, and then reasoning (often mathematically or in code) through the potential solutions finding the one with optimum parameters. For the sake of everybody else I've learned over the years how to convey the jist and the results at the right level to people with diverse backgrounds.","sameAs":["https:\/\/www.linkedin.com\/in\/amarjit-labhuram-51699815\/","https:\/\/x.com\/amarjit_labu"]}]}},"_links":{"self":[{"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/posts\/1793","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/comments?post=1793"}],"version-history":[{"count":6,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/posts\/1793\/revisions"}],"predecessor-version":[{"id":1834,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/posts\/1793\/revisions\/1834"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/media\/1831"}],"wp:attachment":[{"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/media?parent=1793"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/categories?post=1793"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/macrosec.tech\/index.php\/wp-json\/wp\/v2\/tags?post=1793"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}