Active Directory Basics & First Task - Creating a User
Step 1: What is Active Directory?
- A directory service developed by Microsoft.
- It manages users, computers, printers, and other resources on a network.
- Think of it like a central control room for a company's IT environment.
Step 2: Lab Setup Requirements
- Windows Server 2019/2022 (evaluation version)
- VirtualBox or VMware Workstation Player (free)
- Setup a virtual machine with:
- 4 GB RAM
- 60 GB disk
- 2 CPU cores
- NAT or Bridged networking
Step 3: Install Windows Server in VM
- Install OS from ISO in your VM
- Choose "Windows Server Standard (Desktop Experience)"
- Set admin password and log in
Step 4: Install AD DS Role
- Open Server Manager -> Add Roles and Features
- Choose "Role-based or feature-based installation" -> Local Server
- Select "Active Directory Domain Services" -> Next -> Install
Step 5: Promote to Domain Controller
- Click yellow flag in Server Manager -> Promote this server to domain controller
- Choose "Add a new forest" -> Set root domain name (e.g., AhmedLab.local)
- Set DSRM password -> Next -> Install -> Reboot
Step 6: Login to Domain
- Login as: AHMEDLAB\Administrator
Step 6.1: Create a User in Active Directory
- Open "Active Directory Users and Computers" (ADUC) or run: dsa.msc
- Navigate to domain: AhmedLab.local
Create an Organizational Unit (Optional):
- Right-click domain -> New -> Organizational Unit -> Name: IT_Users -> OK
Create New User:
- Right-click on OU -> New -> User
- Enter First Name: Ahmed, Username: ahmed -> Next
- Set password (e.g., Ahmed@123), uncheck "User must change password at next logon" -> Finish
Verification:
- In ADUC, find the user in your OU or Users folder.
Next Steps Options:
1. Set up Group Policy (e.g., password rules, disable USB)
2. Join Windows client to domain
3. Create groups and manage users
4. Reset/unlock user passwords