Pentesting AD - preparing environment

This time we will prepare our own small "AD environment". To do this ...
...you will need:
- VirtualBox
- Windows 2012 Server ISO

When you're ready:

 

setup in VirtualBox should be easy enough to make it fast:

 

Creating virtual harddrive:

 

I used 50GB:

 

Now, let's start VM:

 

We are here, trying GUI version:

 

Read and accept the licence:

 

Custom version:

 

We are ready to go:

 

Restart after installation:

 

Preparing...

Type your password to finish:

 

...and...

Badum tssss:

 

Checking:

 

As you can see we are still 'local Admin':

 

Now we are here:

 

Let's "Add roles and features":

We will use 'Role based features' :

Next, let's "Select a server from the server pool":

 

Next we will select 'Active Directory Domain Services':

 

Adding feature(s): 

 

Next: 

 

Click 'Next', to finally install: 

 

and... 

 

Next: 

 

Next: 

 

Next, we are here:  

 

(I changed net-settings in VirtualBox from host-only to NAT as you can see, later we will set it back.) Now we should be here:

 

Next, we are here. As you can see we have few changes here:

 

Let's 'promote this server to a domain controller':

Now:

 

Add new forest:

 

Type a password:

 

Click 'Next' in DNS Options:

 

Verifying NetBios:

 

Next:

 

Next again:

 

Next one more time:

 

...and 'Install':

 

Now we are here, waiting:

 

New login:

We are here:

 

Adding new 'normal user':

 

 

Enabling RDP:

 

Add our new user:

 

Save all of it:

 

Checking:

 

It looks like RDP is ready for connection. Let's switch to Kali shell for a while and scan our new Windows box:

 

 

I think we are ready to go:

See you next time ;)

Cheers