Build domain environment (win)

Catalog

Common domain environments use ：win2012 win7 win2003

Ben blog Environmental Science ：Windows Server 2012 R2  and  Win2008

1.Window Server 2012 R2 Server configuration

1） Change computer name DC（ The computer used to store the active directory database ）

2） Setup server IP,DNS

 3） Install domain controller （AD DS） and DNS service

 4） Upgrade the server Click on the above “ Triangle exclamation point ”

 5） add to Active Directory user

2.Win2008 Computer configuration

1） Set up DNS Resolve to server IP

2） adopt cmd  ping DNS See if the configuration is successful  

3） take win2008 Join in win2012 Created domain

 4） Successfully joined the domain cai.yulab  

5)  After the creation is successful, you can go to win7 Log in to the domain with the domain user account  

---

Common domain environments use ：win2012 win7 win2003

Server 2012 R2、Window7 perhaps Server 2003 The operating system Windows Domain environment .

Ben blog Environmental Science ：Windows Server 2012 R2  and  Win2008

MSDN, I tell you - Make a quiet tool station (itellyou.cn)https://msdn.itellyou.cn/

1.Window Server 2012 R2 Server configuration

1） Change computer name DC（ The computer used to store the active directory database ）

Restart after the change

2） Setup server IP,DNS

Set up IP by 192.168.1.11（ Don't set 192.168.1.1 It may overlap with the physical machine ip）

The subnet mask is 255.255.255.0

DNS Set to 192.168.1.11（win2012 As a server   Set this IP） 

 

 3） Install domain controller （AD DS） and DNS service

Sign in win2012 The server , You can see " Server Manager " window

0x01、 single click “ Add roles and features ” , Get into “ Add color correction and Function Wizard ” Interface . Again “ Before the start ” part , default setting .

single click “ next step ”, Get into “ Installation type ” part , choice “ Role based or feature-based installation ” Options .

single click “ next step ”, Get into “ Server selection ” part . default setting

single click “ next step ”, Check “Active Directory Domain services ” and “DNS The server ”.

  stay “ function ” Interface default settings . Default 、 Default

single click “ next step ”, Get into “ confirm ” part . next step   wait for 2 minute   restart

 4） Upgrade the server Click on the above “ Triangle exclamation point ”

Click on “ Promote this server to a domain controller ”.

Get into “Active Directory Domain services configuration wizard ”

choice “ Add new forest ” , The root domain name should conform to DNS Domain name resolution

wait for 2 minute

Once again into the “ Server Manager ”

Dashboard pull-down ,AD DS And DNS Have been configured

 5） add to Active Directory user

The right choice “Active Directory Users and computers ”

  Right click ”Users“, add to “ new user ”, Set the password

2.Win2008 Computer configuration

1） Set up DNS Resolve to server IP

IP The address and the server remain in the same network segment

 

2） adopt cmd  ping DNS See if the configuration is successful  

3） take win2008 Join in win2012 Created domain

Click on “ Domain ”, Click on “ determine ”

Enter the account and password set by the domain administrator

 4） Successfully joined the domain cai.yulab  

 

5)  After the creation is successful, you can go to win7 Log in to the domain with the domain user account  

Commonly known as intranet penetration testing , To a large extent, it is domain penetration testing , Build a domain test environment , stay windows Under the active directory environment of , Master its fabrication method and operation mechanism , It is of great help to the security maintenance of the intranet .

Don't understand private letters Lazy and talented

Details refer to ：《 Intranet security attack and defense - Penetration test guide 》—— Xu Yan