THM Active Directory Basics - grunt92/IT-Sec-WriteUps GitHub Wiki

Introduction

I understand what Active Directory is and why it is used.

No answer needed

Physical Active Directory

What database does the AD DS contain?

NTDS.dit

Where is the NTDS.dit stored?

%SystemRoot%\NTDS

What type of machine can be a domain controller?

Windows Server

The Forest

What is the term for a hierarchy of domains in a network?

Tree

What is the term for the rules for object creation?

Domain Schema

What is the term for containers for groups, computers, users, printers, and other OUs?

Organizational Units

Users + Groups

Which type of groups specify user permissions?

Security Groups

Which group contains all workstations and servers joined to the domain?

Domain Computers

Which group can publish certificates to the directory?

Cert Publishers

Which user can make changes to a local machine but not to a domain controller?

Local Administrator

Which group has their passwords replicated to read-only domain controllers?

Allowed RODC Password Replication Group

Trusts + Policies

What type of trust flows from a trusting domain to a trusted domain?

Directional

What type of trusts expands to include other trusted domains?

Transitive

Active Directory Domain Services + Authentication

What type of authentication uses tickets?

Kerberos

What domain service can create, validate, and revoke public key certificates?

Certificate Services

AD in the Cloud

What is the Azure AD equivalent of LDAP?

Rest APIs

What is the Azure AD equivalent of Domains and Forests?

Tenants

What is the Windows Server AD equivalent of Guests?

Trusts

Hands-On Lab

Deploy the Machine

No answer needed

What is the name of the Windows 10 operating system?

Start the machine. Open a command line and enter cd Downloads, powershell -ep bypass, . .\PowerView.ps1 and than Get-NetComputer -fulldata | select operatingsystem to get the answer.

Windows 10 Enterprise Evaluation

What is the second "Admin" name?

Run Get-NetUser | select cn in the PowerShell to get the answer

Admin2

Which group has a capital "V" in the group name?

Run Get-NetGroup and look for the capital V.

Hyper-V Administrators

When was the password last set for the SQLService user?

Run Get-ADUser -identity SQLService -properties * and look for "PasswordLastSet" to get the answer. 5/13/2020 8:26:58 PM

Conclusion

I understand the basics of Active Directory

No answer needed