- Microsoft Azure (Virtual Machines/Compute)
- Remote Desktop
- Active Directory Domain Services
- PowerShell
- Windows Server 2022
- Windows 10 (21H2)
- Setup Resources in Azure
- Ensure Connectivity between the client and Domain Controller
- Install Active Directory
- Create an Admin and Normal User Account in AD
- Join Client-1 to your domain (mydomain.com)
- Setup Remote Desktop for non-administrative users on Client-1
- Create a bunch of additional users and attempt to log into client-1 with one of the users
Create the virtual machine for the domain controller DC-1 and name the Resource Group to be made at the same time (AD-1)
Create the second VM (Client-1).
Choose the Vnet that was created with VM1 (DC-1). Ignore the name above. The above example should show (AD-1vnet).
Open DC-1.
Click on Networking on the left hand side.
Click on the NIC (Network Interface Card).
Then click on IP Configurations on the left hand side.
Click on the IP Address in the middle where it says dynamic.
Set the IP Address to static and save.
Log into Client-1 and ping DC-1.
Log into DC-1 and open Windows Defender Firewall.
Sort Inbound Rules by protocol and enable ICMP Core Diagnostics Rules as seen above.
Ping is succeeding.
Click Add Roles and Features to install Active Directory.
Click Next until Server Roles then add Active Directory Domain Services.
Click next until finished and install.
Next, click flag on top right corner to promote server to a domain controller.
Add a new forest.
Click next through the prompts and enter a password when requested and continue to install.
Server will restart and you will have to login as a mydomain (or whatever domain name you chose) user.
Open Active Directory User and Computers.
Create a few Organizational Units.
Admins and Employees created.
Click on admin and right click in the panel to create a new user.
Create Jane Doe Admin User.
Set password and uncheck "set password on next login" and "check password never expires" for this example.
Right click jane doe user and go to properties, members then click add.
Write domain and click check names.
Select Domain Admins and click okay.
Click apply.
Jane Doe is now a part of the domain admins security group and has admin permissions.
Logout of labuser and log back in as Jane Doe.
Login as jane_admin.
Successfully logged in as jane_admin.
We need to set Client-1's DNS to DC-1's private IP now. Navigate to DC-1 on Azure and retreive the private IP address.
Go to Client-1's NIC by going to Networking on the left and clicking Network Interface.
Click on the NIC to the right of Network Interface in bold.
Click on DNS Servers on the left, change from Inherit to Custom and paste DC-1's private IP. Make sure no spaces exist before and after the address and save.
Go back to Client-1 VM and restart to flush the DNS cache.
Log back into Client-1.
Use ipconfig /all command in Command Prompt to see what DNS server address is being used. (10.0.0.4) in this case. It was successful.
Now right click the start menu and go to System.
Click on rename this PC.
Click on change.
Change the domain name to mydomain.com and click okay and then fill in the login and password as shown.
Login successful as jane_admin. Now restart.
Now log back into Client-1 as jane_admin.
Right click start menu and go to system.
Click on remote desktop.
Click on "select users that can remotely access this PC".
Click on add and type in domain users and check names, then click okay.
Domain Users has been added. Now all domain users are allowed to log into this computer.
Click on start menu and then Windows Administrative Tools.
Open DC-1 and go to start menu, then Active Directory Users and Computers.
Click on mydomain.com, Users then Domain Users.
All created users get added to this group. Now any non administator can log in so let's create some users.
Now make sure you're logged into DC-1 as jane_admin or log in if not. We will create a bunch of users.
Open PowerShell ISE as Administrator by right clicking.
Open a new script and write the script shown.
Click run script.
Random users are being created.
Open Active Directory Users and Computers.
Click on the _EMPLOYEES Organizational Unit created earlier and notice all the users created. All users will have passwords of Password1.
Pick a user and right click to go to properties. Then go to the account tab and copy the username. Go to Client-1.
Logout of Client-1 as jane doe.
Log back into Client-1 as the user you chose.
Login was successful.
kim.big is logged into Client-1 after being created as a user on DC-1.
Everytime a new user logs in, a new folder will be created on the PC.
If too many login attempts are made, you can click properties on the user and go to account tab and click unlock and apply.
You can also reset password or disable account by right clicking. That's it! Congratulations on implementing Active Directory!