> For the complete documentation index, see [llms.txt](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/zyberlab/02-active-directory-basics/active-directory-basics.md).

# Active Directory Basics Overview

This section builds the first small Windows domain in ZyberLab.

The goal is not to create a production-style Active Directory environment. The goal is to understand the basic relationship between a domain controller, DNS, users, groups, and a domain-joined Windows computer.

## What We Will Build

```
VMware NAT Network
        │
        ├── DC01
        │    Windows Server
        │    Active Directory Domain Services
        │    DNS
        │    Domain: zyberlab.test
        │
        └── CLIENT01
             Windows client
             Joined to zyberlab.test
```

## Learning Path

Complete the pages in this order:

1. Configure a static IPv4 address on `DC01`
2. Install Active Directory Domain Services
3. Create the `zyberlab.test` forest and domain
4. Explore Active Directory Users and Computers
5. Create a domain user
6. Create a security group
7. Join `CLIENT01` to the domain
8. Verify a domain sign-in

## Why DNS Matters

Active Directory depends heavily on DNS. Domain members use DNS to locate domain controllers and Active Directory services.

For this lab:

* `DC01` will run DNS after promotion to a domain controller.
* `CLIENT01` will use the IPv4 address of `DC01` as its DNS server before joining the domain.

A large percentage of beginner Active Directory problems are actually DNS problems, so DNS settings should always be checked before troubleshooting the domain itself.

## Lab Domain Name

This guide uses:

```
zyberlab.test
```

The `.test` top-level domain is reserved for testing and examples, which makes it suitable for an isolated learning environment.

The NetBIOS name will normally appear as:

```
ZYBERLAB
```

## Before You Begin

Complete the [Pre-Active Directory Checkpoint](/zyberspace-by-ajmal/zyberlab/01-lab-setup/pre-ad-checkpoint.md) first.

Take a VMware snapshot of both machines before making major changes so you have a simple recovery point.

## Security Perspective

Even this small environment introduces several important cybersecurity concepts:

* centralized identity
* authentication
* authorization through groups
* privileged accounts
* DNS dependency
* domain-joined endpoints
* security event logging
* centralized configuration

Later ZyberLab exercises will generate and investigate security events inside this same environment.