THM Active Directory Basics - grunt92/IT-Sec-WriteUps GitHub Wiki
Introduction
I understand what Active Directory is and why it is used.
No answer needed
Physical Active Directory
What database does the AD DS contain?
NTDS.dit
Where is the NTDS.dit stored?
%SystemRoot%\NTDS
What type of machine can be a domain controller?
Windows Server
The Forest
What is the term for a hierarchy of domains in a network?
Tree
What is the term for the rules for object creation?
Domain Schema
What is the term for containers for groups, computers, users, printers, and other OUs?
Organizational Units
Users + Groups
Which type of groups specify user permissions?
Security Groups
Which group contains all workstations and servers joined to the domain?
Domain Computers
Which group can publish certificates to the directory?
Cert Publishers
Which user can make changes to a local machine but not to a domain controller?
Local Administrator
Which group has their passwords replicated to read-only domain controllers?
Allowed RODC Password Replication Group
Trusts + Policies
What type of trust flows from a trusting domain to a trusted domain?
Directional
What type of trusts expands to include other trusted domains?
Transitive
Active Directory Domain Services + Authentication
What type of authentication uses tickets?
Kerberos
What domain service can create, validate, and revoke public key certificates?
Certificate Services
AD in the Cloud
What is the Azure AD equivalent of LDAP?
Rest APIs
What is the Azure AD equivalent of Domains and Forests?
Tenants
What is the Windows Server AD equivalent of Guests?
Trusts
Hands-On Lab
Deploy the Machine
No answer needed
What is the name of the Windows 10 operating system?
Start the machine. Open a command line and enter cd Downloads
, powershell -ep bypass
, . .\PowerView.ps1
and than Get-NetComputer -fulldata | select operatingsystem
to get the answer.
Windows 10 Enterprise Evaluation
What is the second "Admin" name?
Run Get-NetUser | select cn
in the PowerShell to get the answer
Admin2
Which group has a capital "V" in the group name?
Run Get-NetGroup
and look for the capital V.
Hyper-V Administrators
When was the password last set for the SQLService user?
Run Get-ADUser -identity SQLService -properties *
and look for "PasswordLastSet" to get the answer.
5/13/2020 8:26:58 PM
Conclusion
I understand the basics of Active Directory
No answer needed