219 lines
3.3 KiB
Markdown
219 lines
3.3 KiB
Markdown
# Active Directory
|
|
## Konfiguration
|
|
<details open>
|
|
|
|
<summary>Powershell</summary>
|
|
|
|
#### Local Password
|
|
<details>
|
|
|
|
````ruby
|
|
Get-LocalUser -Name "Administrator" | Set-LocalUser -Password (ConvertTo-SecureString -AsPlainText "Passw0rd" -Force)
|
|
````
|
|
|
|
</details>
|
|
|
|
#### Local Netconf
|
|
<details>
|
|
|
|
```ruby
|
|
New-NetIPAddress -InterfaceIndex 3 -AddressFamily IPv4 -IPAddress '172.16.7.100' -PrefixLength '255.255.255.0' -DefaultGateway '172.16.7.254'
|
|
```
|
|
|
|
```ruby
|
|
Set-DnsClientServerAddress -InterfaceIndex '3' -ServerAddresses ('172.16.7.11','172.16.7.12')
|
|
```
|
|
|
|
</details>
|
|
|
|
#### Set-Hostname
|
|
<details>
|
|
|
|
```ruby
|
|
Rename-Computer -NewName 'DC01' -Restart -Force
|
|
```
|
|
|
|
</details>
|
|
|
|
#### Netzwerkkarte auf Private setzen
|
|
<details>
|
|
|
|
|
|
````ruby
|
|
Get-NetConnectionProfile
|
|
````
|
|
|
|
````ruby
|
|
Set-NetConnectionProfile -InterfaceIndex [Index der Netzwerkkarte] -NetworkCategory "Private"
|
|
````
|
|
|
|
</details>
|
|
|
|
#### Firewall abschalten
|
|
<details>
|
|
|
|
````bash
|
|
netsh advfirewall set allprofiles state off
|
|
````
|
|
|
|
</details>
|
|
|
|
#### IPv6 de-/aktivieren
|
|
<details>
|
|
|
|
````ruby
|
|
Disable-NetAdapterBinding -Name [Name der Netzwerkkarte] -ComponentID ms_tcpip6
|
|
````
|
|
|
|
````ruby
|
|
Enable-NetAdapterBinding -Name [Name der Netzwerkkarte] -ComponentID ms_tcpip6
|
|
````
|
|
|
|
</details>
|
|
</details>
|
|
|
|
|
|
## Aufnahme in die Domäne
|
|
<details open>
|
|
|
|
<summary>Powershell</summary>
|
|
|
|
#### Domain-Join
|
|
<details>
|
|
|
|
````ruby
|
|
Add-Computer -Domain "podxx.spielwiese.intern" -Restart -Force
|
|
````
|
|
|
|
</details>
|
|
</details>
|
|
|
|
## GPOs
|
|
|
|
<details open>
|
|
|
|
<summary>GUI</summary>
|
|
|
|
#### Keine Login History
|
|
<details>
|
|
|
|
````ruby
|
|
-> Windows-Einstellungen
|
|
-->Sicherheitseinstellungen
|
|
--->Lokale Richtlinien
|
|
---->Sicherheitsoptionen
|
|
----->Interaktive Anmeldung
|
|
````
|
|
|
|
<details>
|
|
|
|
<summary>Bild</summary>
|
|
|
|
|
|
|
|
</details>
|
|
</details>
|
|
</details>
|
|
|
|
## PSO
|
|
|
|
<details open>
|
|
|
|
<summary>GUI</summary>
|
|
|
|
#### Password Settings Objects
|
|
<details>
|
|
|
|
````ruby
|
|
-> Password Settings Objects
|
|
--> Advaned View (Activ Directory User & Computer)
|
|
---> Active Directory Administrativ Center
|
|
----> System
|
|
-----> Password Settings Container
|
|
````
|
|
|
|
<details>
|
|
|
|
<summary>Bild</summary>
|
|
|
|
|
|
|
|
</details>
|
|
</details>
|
|
</details>
|
|
|
|
## Zertifikate & PKI
|
|
|
|
<details open>
|
|
|
|
<summary>GUI</summary>
|
|
|
|
#### Externe Root CA
|
|
<details>
|
|
|
|
````ruby
|
|
-> Group Policy Management Editor
|
|
--> Computer Configuration
|
|
---> Policies
|
|
----> Windows Settings
|
|
-----> Sicherheitseinstellungen
|
|
------> Public Key Policies
|
|
-------> Trusted Root CA
|
|
````
|
|
|
|
<details>
|
|
|
|
<summary>Bild</summary>
|
|
|
|
|
|
|
|
</details>
|
|
</details>
|
|
|
|
#### AD-integrierte CA
|
|
<details>
|
|
|
|
Installiere 'Active Directory Certificate Services'
|
|
|
|
````ruby
|
|
MMC erstellen:
|
|
-> Snap-ins:
|
|
- Active Directory Sites and Services
|
|
- Certificate Templates
|
|
- Certification Authority
|
|
- Enterprise PKI
|
|
- Group Policy Management
|
|
````
|
|
Rechtklickt auf ADSSS -> View -> Show Service Node
|
|
> Rechte im Template lt. Bild setzen
|
|
> Domain Controller -> Domain Controller rechte
|
|
> Computer -> Computer rechte
|
|
> usw.
|
|
|
|
<details>
|
|
|
|
<summary>Bild</summary>
|
|
|
|
|
|
|
|
</details>
|
|
</details>
|
|
</details>
|
|
|
|
<details open>
|
|
|
|
<summary>Powershell</summary>
|
|
|
|
#### AD-integrierte CA
|
|
<details>
|
|
|
|
> Zertifikat Anfodern
|
|
|
|
````ruby
|
|
Get-Certificate -Template PODxx.Computer -CertStoreLocation Cert:\LocalMachine\My\
|
|
````
|
|
|
|
</details>
|
|
|
|
|