> For the complete documentation index, see [llms.txt](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/zyberlab/02-active-directory-basics/create-domain-user.md).

# Create a Domain User

## Objective

Create a normal Active Directory user account that can later sign in to `CLIENT01`.

The purpose is to understand the difference between a **local account** and a **domain account**.

## Local vs Domain Account

A local account exists only on one computer.

A domain account is stored in Active Directory and can be used across domain-joined systems according to permissions and policy.

For this lab, create:

```
Full name: Lab User
Username:  labuser01
```

## Create the User

On `DC01`:

1. Open **Active Directory Users and Computers**.
2. Expand `zyberlab.test`.
3. Right-click **Lab Users**.
4. Select **New → User**.
5. Enter:

```
First name: Lab
Last name:  User
User logon name: labuser01
```

6. Select **Next**.
7. Enter a strong lab-only password.
8. For a simple learning environment, you may clear **User must change password at next logon** if you want to avoid an extra step during the first domain login.
9. Keep **Account is disabled** cleared.
10. Select **Next** → **Finish**.

Do not reuse any real personal or production password in the lab.

## Verify the Account

Open the **Lab Users** OU and confirm that `Lab User` appears.

Double-click the account and briefly explore the available tabs, such as:

* General
* Address
* Account
* Member Of

Do not change settings you do not yet understand.

## Understand the Sign-In Formats

The user can later be represented as:

```
ZYBERLAB\labuser01
```

or as a user principal name:

```
labuser01@zyberlab.test
```

Both identify the same Active Directory account in this lab.

## Security Relevance

User accounts are security principals. Their activity can generate security events for actions such as:

* successful logons
* failed logons
* password changes
* account lockouts
* group membership changes

Later ZyberLab exercises will deliberately generate some of these events and investigate them.

## Checkpoint

Confirm that:

* `labuser01` exists in **Lab Users**
* the account is enabled
* you know the lab password
* no privileged group memberships have been added

The next lab will create a security group and add this user to it.