# Commands to create AD environment
## Install AD Dependencies
### Windows Server Datacenter (GUI)
Next and Install.
### Windows Server Standard (CLI)
From here
Install AD DS (Active Directory Domain Services):
```powershell
Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools
```
Configure a new Forest:
```powershell
Import-Module ADDSDeployment
Install-ADDSForest -DomainName "lanz-corp.com" -InstallDNS
```
Verify installation:
```powershell
Get-Service adws,kdc,netlogon,dns
```
## Promote Server to Domain Controller (GUI)
Click on "Promote this server to a domain controller":
Domain name: freed-om-corp.com
Install:
The server has been promoted to a Domain Controller, and the authentication is now based in domain.
## Users
### Configure users, groups, machines...
```
Run from the start menu: Active Directory Users and Computers
```
### Get-ADUser (search users)
```powershell
Get-ADUser -Filter 'Name -like "*Paul*"'
Get-ADUser -Filter "Name -like '*Orion*'" -Properties *
```
```powershell
Get-ADUser -Filter 'Name -like "*Mike*"' | Format-Table Name,SamAccountName
Name SamAccountName
---- --------------
Mike Andrews Jectle1984
Mike Rocha Trequievery
Mike Rosa Mans1990
Mike Blackmon Stemodgme01
Joshua Mikels Wifen1938
Mike Goodwin Lovicher
Mike Dukes Imosed
Mike Bynum Barve1947
Mike Pritchard Pludenis
Mike O'Hare mohare
```
{% embed url="" %}
### New-ADUser (add user)
Using the `Active Directory Users and Computers` from the start-menu and inside a folder or using PowerShell commands:
```powershell
New-ADUser -Name "Orion Starchaser" -DisplayName 'Orion Starchaser' -SamAccountName 'o.starchaser' -UserPrincipalName 'orion.starchaser@inlanefreight.local' -AccountPassword (Read-Host -AsSecureString 'Enter a password') -Enabled $true -ChangePasswordAtLogon $true -OtherAttributes @{'title'='analyst';'mail'='o.starchaser@inlanefreight.local'}
```
```powershell
Get-ADUser -Identity o.starchaser
```
{% embed url="" %}
### Set-ADUser (update user info)
```powershell
Set-ADUser -Identity 'Artemis Callisto' -DisplayName 'Artemis Callisto'
```
```powershell
Get-ADUser -Filter "Name -like 'Andromeda Cepheus'" -Properties *
[...]
DistinguishedName : CN=Andromeda Cepheus,OU=Analysts,OU=IT,OU=HQ-NYC,OU=Employees,OU=Corp,DC=INLANEFREIGHT,DC=LOCAL
Enabled : True
GivenName : Andromeda
Name : Andromeda Cepheus
ObjectClass : user
ObjectGUID : 300c377e-db3d-4da4-aabd-7235d69693ff
SamAccountName : a.cepheus
SID : S-1-5-21-3842939050-3880317879-2865463114-7604
Surname : Cepheus
UserPrincipalName : a.cepheus@INLANEFREIGHT.LOCAL
[...]
EmailAddress :
[...]
mail :
[...]
```
Let's update the Email:
```powershell
Set-ADUser -Identity 'a.cepheus' -EmailAddress 'a.cepheus@inlanefreight.local'
```
