> For the complete documentation index, see [llms.txt](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/zyberlab/02-active-directory-basics/create-lab-domain.md).

# Create the ZyberLab Domain

## Objective

Promote `DC01` to a domain controller and create the first ZyberLab Active Directory forest.

This guide uses:

```
Domain: zyberlab.test
NetBIOS: ZYBERLAB
```

## Start the Promotion Wizard

1. Open **Server Manager** on `DC01`.
2. Select the notification flag near the top-right.
3. Select **Promote this server to a domain controller**.

## Deployment Configuration

Because this is the first domain controller in a new lab, select:

**Add a new forest**

For the root domain name, enter:

```
zyberlab.test
```

Select **Next**.

## Domain Controller Options

Keep the default options for a small lab:

* **Domain Name System (DNS) server** selected
* **Global Catalog (GC)** selected
* do not select Read Only Domain Controller

Create a **Directory Services Restore Mode (DSRM)** password.

Use a strong password and store it securely. Do not reuse a production password or publish it in screenshots or documentation.

Select **Next**.

## DNS Options

You may see a DNS delegation warning because this is a new isolated lab domain.

For this simple environment, that warning is expected.

Select **Next**.

## Additional Options

The NetBIOS domain name should normally be generated as:

```
ZYBERLAB
```

Keep it and select **Next**.

## Paths

For this beginner lab, keep the default locations for:

* Active Directory database
* log files
* SYSVOL

Select **Next**.

## Review and Install

1. Review the configuration.
2. Run the prerequisite check.
3. Read any warnings.
4. If the prerequisite check passes, select **Install**.

`DC01` will restart automatically during the promotion process.

## Sign In After Restart

After the restart, the sign-in screen should now show the domain context.

You can sign in using the domain Administrator account, for example:

```
ZYBERLAB\Administrator
```

## Verify the Domain

Open Command Prompt and run:

```
whoami
```

Expected format:

```
zyberlab\administrator
```

Then run:

```
echo %USERDNSDOMAIN%
```

Expected result:

```
ZYBERLAB.TEST
```

You can also test DNS:

```
nslookup zyberlab.test
```

## What Happened?

`DC01` is now providing several important services:

* Active Directory Domain Services
* DNS for `zyberlab.test`
* authentication for domain accounts
* the directory database
* SYSVOL for shared domain policy data

## Security Relevance

A domain controller is one of the most security-sensitive systems in a Windows environment. Control of a domain controller can provide broad control over domain identities, policies, and authentication.

For ZyberLab, this makes `DC01` the central system we will use to learn about identity, privileged access, auditing, and security monitoring.

## Checkpoint

Before continuing, confirm:

* `DC01` restarted successfully
* you can sign in as the domain Administrator
* the domain is `zyberlab.test`
* DNS is running
* `whoami` shows the `ZYBERLAB` domain