Active Directory Lab Setup for Penetration Testing Using PowerShell

This article provides a step-by-step walkthrough to build a lab Active Directory environment in VMware Workstation Pro 17, from creating a Windows Server 2019 VM to promoting it as a Domain Controller for the ignite.local domain and joining a Windows 10 client. It also configures AD CS, creates domain users with intentional privilege assignments, and disables Defender/firewall for an isolated penetration-testing lab environment (do not apply these settings in production). #ignite_local #WindowsServer2019

Keypoints

Create a new VM in VMware Workstation Pro 17 using the Typical configuration, 60 GB disk, BIOS firmware, and remove the floppy device.
Install Windows Server 2019 Desktop Experience, set the Administrator password, and complete the first login.
Use PowerShell to rename the server to DC1, install AD DS, and promote it to the first Domain Controller in the ignite.local forest.
Install and configure Active Directory Certificate Services as an Enterprise Root CA to enable PKI and certificate-based testing.
Create domain user accounts and group memberships (raj as Domain Admin; ankur in Backup Operators and Remote Management), join the Windows 10 client to the domain, and verify domain authentication.