All right.
So I'm going to run a setup for one machine.
I want you to do it for the one machine and then I want you to go ahead and do your second machine the
exact same way if you're running the two machine configuration.
So I'm on the Windows 10 enterprise.
This is Frank Castle's machine The Punisher.
And we're going to go ahead and join this to the domain.
So before we do that I do want to go ahead and go to our pieces or go to this P.C..
Go to your C drive and then go ahead and just right click new folder and we're just on gonna call this
share.
We're going to make a fake share here.
Well it's going to be a real share but we're not going to really use it.
And we're just in a right click on it.
We're going to select properties and then we're going to go to sharing.
We're going to say share right here and then we're going to share everything and then say yes turn on
that we're discovery and file sharing for all public networks and done and now we are sharing on this
machine.
So we go ahead and close that out now on top of this.
We're gonna go ahead and join this to the domain so let's go ahead and first go to our domain controller
and let's grab our IP address.
Let's go do a command prompt here and we're just going to say IP config and our IP address is 1 9 2
1 6 8 fifty seven one forty so fifty seven dot 140 I'm going to go ahead and switch back to this machine
and now let's right click on this access down here on the Internet access and say open network and internet
settings down here you should see change adapter options go ahead and select that and then we have Ethernet
0 right here.
Go ahead and right click this and select properties and then we're gonna go ahead and double click on
this IP for and it should bring up a screen that looks like this.
We're going to leave obtain an IP address automatically.
This is DCP.
That's absolutely ok here on the DNS.
We're going to do something like this.
We're gonna say 1 9 2 if I can type 1 9 2 1 6 8 fifty seven dot 140.
So we want the IP address of the domain controller here because we need to get DNS from that.
Go ahead and say OK.
And then we're gonna go over here and we're gonna say domain and it should say access work or school.
Go ahead and select that and we're going to say connect
and then it's gonna bring this up set up a work or school account down here say join this device so
local Active Directory Domain
and now it's gonna say domain name.
What are we going to join.
Well we're joining Marvel dot local
now it's gonna say Who do you want to join as well let's go ahead and just say administrator and then
we're gonna go ahead and say our password which we set way back in the beginning and now we are good
to go.
We're gonna skip this feature here and then we need to restart.
So let's go ahead and restart now.
And so this is going to reboot when it reboots you're gonna need to log in as your user.
So how I set up this domain is this user is going to be Frank Castle so f Castle is going to log into
the punisher.
The other user you saw me create was Peter Parker or P. Parker and I am making a machine called Spider-Man.
So we're going to be able to have Spider-Man and we're going to have the Punisher as two machines.
So I'm going to go ahead and log into this now instead of being Frank Castle this is a local account
we're gonna go ahead and do f castle like this and we're gonna say password 1 which is what we used
before log in here and it should logs in as this user.
Now it might take a second to get everything ready and there's going to be one other setting that we're
going to do on this computer specifically.
And then there's going to be one setting on the other machine that we're gonna want to do as well.
So I'm going to go ahead and hit the brakes here and we're going to let this finish.
And once it finishes we're gonna go ahead actually here it is.
So let's go ahead and make these setting changes real quick.
Now you can see that we are actually logged in as f Castle we've successfully done that.
Great.
So let's go ahead now and let's sign out and let's sign in as the administrator because I do want to
make a couple changes here.
So let's go ahead and say administrator and let's go ahead and we'll do we've got to do a Marvel slash
administrator like that and we'll do password as we set it log into this computer and it might take
a second again.
What we're going to do is we're going to enable Frank Castle to be a local administrator on this machine.
So we want to set that up and then we're gonna go ahead and we're going to navigate over to Spider Man's
machine and we're gonna set Frank Castle to be a local administrator there.
There is a special attack that we want to do actually to do special attacks we want to do that involve
the usage of local administrators on multiple machines so let's go ahead and come into here and we're
gonna go into right click or actually we can do we can do right click and computer management and this
should bring up our settings for local administrators
OK.
And then we come local users and groups in here we've got groups go ahead and double click.
Administrators
and then we're going to go ahead and add a couple of users so we're going to add well we'll just add
f Castle on this so check names f Castle is good and then we're gonna apply and say OK and we're good
here.
So let's go ahead and stop here.
We'll go ahead and get your other machines setup completely as you need to log in as the administrator
on your other machine and meet me over there we're going to setup Frank Castle and Peter Parker as administrators
there as well OK.
Now on to peer Parker's machine.
Same deal here.
So if we go in administrators I've made Peter Parker an administrator of his own machine and I've also
made Frank Castle an administrator of Peter Parker's machine.
So however you set this up make sure that you have a user that is on domain Alvin or an admin I should
say on two machines local administrator on two machines and you have a user who is a administrator on
their machine both.
So Franks administrator is a machine.
Peter is an administrator in his own machine and then Frank has administrator access on both machines.
All right.
And also make sure you set up everything the same.
This also has a share in it has the share here and we're domain joined last thing I want to point out.
So let's go over to Windows Server and I'm going to log back in and then let's take a look at what our
Active Directory looks like now.
So we come into here and let's go ahead and go into our users and groups and look at our computers here
we might have to refresh up top and then you can see now Spider-Man and The Punisher have been joined
to this domain.
They showed up in our o u here and we know that we have successfully joined the set domain.
Everything is set up the way we want it to be.
Now we can move on to the attacking phase we start attacking all these things and notice we only made
a few changes right.
We did turn off windows defender but for the most part we've got normal default settings for pretty
much everything we added some file shares to just emulate a network and we set up a service that's pretty
common as well.
So so far besides turning off the vendor everything is pretty common across the board for how you would
see an Active Directory network set up.
So from here we're going to exploit these these settings these almost default configurations and really
just own this network all over the place.
So let's see how we can do that and I'll catch you over in the attack vectors video.