Please don't apologise for it being 'boring' or whatever. This is exactly the stepping stone I needed to get practically into more of your content. Looking forward to this series!
Active directory, my favorite. For IT Support all you care about is password reset, account creation, unlocking accounts disabling accounts, security groups and distribution groups depending on your level of access and company.
This is the most aptly timed video series ever. I literally just got into a situation where I need to build out a windows server test environment to build some skills.
I started my internship a few months ago as a network penetration tester. One thing I realized during that period is that there always something more to learn, even if u think you know it well. Thanks John for sharing your knowledge so we can learn
This is exactly the content we need John. Running into issues and troubleshooting weird things like the TPM with the Windows 11 VM bogs down our progress. Seeing how you tackle similar issues is super helpful!
The thing I like the most about your videos is that I come to learn something and I end up learning a lot more than I anticipated, watching troubleshoot live and such is really entertaining and interesting for me. Can't wait to see how this series unfolds. Thank you John!
Thanks for going through the entire process and showing your own troubles. I am self-taught; the topics I have never forgotten and breeze through are the things I had to beat my head across the keyboard to complete. The nuances of virtual machines and creating realistic labs have at times seemed impossible, your videos are great because you don't leave important content to the imagination. Thanks for not trying to edit yourself into looking perfect... you are already the most talented and humble security guru I know. Hope to see these videos for years to come.
I can't be the only one who thinks listening to John is relaxing along with very educational, you ever get stressed, throw a John vid on and you calm and learn :D
thx for taking time to go through the "boring" processes too! Some channels seem to just skip that stuff. Oh and also, should've made your username Nighthawk. Nighthawk sounds cool af.
I use Active Directory every day and work and never really learned what all goes on in the background. I think I'll give this a shot! thanks for the video!
Been around here for a little while now and I thought I'd just say a big thank you! I recently secured a new job as an IT Admin. Its only a stepping stone for some experience but its thanks to a lot of your videos that I managed to get there. Just thought the feedback would be nice to hear on your end. Keep making great content, it goes a long way man
For VirtualBox, I also added a "BypassUEFICheck" to get Windows 11 to work. I originally tried checking "Enable EFI (special OSes only)", but it went into an endless boot cycle after it installed. There was probably a workaround for doing it that way, but oh well.
Thanks for a great walk-through video, John. I found you through Chuck’s channel and look forward to learning more from you both. It was great to have a reminder of what to do and some of the challenges when setting up VMs. Great tips as well :)
This should be helpful, I started the Udemy course on Active Diectory and the Microsoft Learn unit this morning. I've used Linux exclusively for so long I hardly know anything about Microsoft anymore. Just by coincidence a John Hammond video pops up on that very topic? Spooky! lol
It's super interesting what all you can do with AD, even as someone who didn't get super deep into the AD side of things in my years as a system admin. I did a lot of surface level work, and that alone was still awesome. Now that I'm learning the security side, the number of vulnerabilities and exploits that are open through things that are pretty common misconfigurations, or like in the case of IPv6, just on by default. Good luck on the learning!
I always learn stuff from you man….even on the most basic of topics. All the wasted hours…was clueless to that template cloning feature in VMWare. Great content as always Mr. H!
I've been looking into this lately and was actually googling how to set up an AD lab since I've had more and more exposure to it through help desk/work. As someone new to cyber and trying to get more into the industry this couldn't have come at a better time!
finally AD stuff, subscribed. Keep em coming. if you are on a budget you can use Hyper-V inside Windows 10 feature only requires turning ON, versions supported PRO, EDU, ENTR.
Great video John! I definitely appreciate this content. Also the short debug to get things going. It really showcases your awesome abilities. Thank you!!
just a FYI. The domain controller John made is really over provisioned. For our smaller clients with about 100 users and 150 computer objects in the environment we get away with 2 vcpu and 4 GB ram and 50 GB disk in a server core install. if you want a gui then i would suggest a 8 gb install. And of course: create at least 2 domain controllers in a production environment.
For core server 25 30GB is enough with ADDS, including extra drive for Active Directory. The best way for redundancy and higher resources we should look to scale it horizontaly instead verticaly, create more machines for the same task, instead increasing the resources of a single machine. If you have a single file server with 1tb disk 8gb ram and 4cpus, if you have a downtime on a file server it could be bad for the ORG, if you split the file servers with DFS, 2 VMs with 500gb disk 4gb ram and 2cpus is better, still have a downtime for some people but not for the entire company. And now if you have 4 file servers 2 of them being a copy from the other 2 that we have split, the downtime is minimal, here we waste some resources, but redundancy is good.
This looks like it'll be helpful! I really need to automate the process of my lab build (From GPO's to user/machine creation) because the number of times I mess something up and then go "Ugh, I need to redo all of this" is too damn high.
John windows 11 has vms already made by Microsoft. So you can just download the vm for the virtual environment you are using. I know it works great with virtualbox
Thanks for teaching the basics, and taking the time to explain in simple terms what you are doing. What desktop are you running your vm's on as last time I saw your set up it was a dell xps 15 laptop?
I wonder why you don't have an ESXi server? Maybe because I have been doing ESX since ver 3 and am a VCP so maybe that is just easier for me. But I like running my home lab on a separate machine if nothing more than I have it on cheap mechanical drives and not expensive SSD that is on my notebook. I even have my Kali attack machine on ESXi. You can even get the community version of Veeam for backup of the VMs so you can backup your non disposable VMs. As I think about it you can pretty much do everything you need to on vmware workstation including isolating the VM for doing things like malware analysis. So maybe it is just a preference I have.
Hello John , Could you please share which Windows 1 Version are you using? When i configurate my VM Win 11 It asks for COmputer name on my vm, when in your configuration there is not this step. Also when i tart the new PS session i receive an error Access Denied. And i think this could be linked. Thank you for your help! Amazing Channel!
After creating a new virtual machine, go into settings -> options -> Access Control (create password). Now go to the tab (Hardware) and add the TPM module. :)
@@PoringPoring951 After creating a new virtual machine, go into settings -> options -> Access Control (create password). Now go to the tab (Hardware) and add the TPM module. :)
Not mine bypassed like you did in this video I done same process but when I reboot it it get same error if you say don't reboot it than I am not getting any option after regedit changes
Please don't apologise for it being 'boring' or whatever. This is exactly the stepping stone I needed to get practically into more of your content. Looking forward to this series!
Active directory, my favorite. For IT Support all you care about is password reset, account creation, unlocking accounts disabling accounts, security groups and distribution groups depending on your level of access and company.
Dude even a simple task as installing and setting up a VM is a learning experience in a John Hammond video
This is the most aptly timed video series ever. I literally just got into a situation where I need to build out a windows server test environment to build some skills.
I started my internship a few months ago as a network penetration tester. One thing I realized during that period is that there always something more to learn, even if u think you know it well. Thanks John for sharing your knowledge so we can learn
This is exactly the content we need John. Running into issues and troubleshooting weird things like the TPM with the Windows 11 VM bogs down our progress. Seeing how you tackle similar issues is super helpful!
The thing I like the most about your videos is that I come to learn something and I end up learning a lot more than I anticipated, watching troubleshoot live and such is really entertaining and interesting for me. Can't wait to see how this series unfolds. Thank you John!
Thanks for going through the entire process and showing your own troubles. I am self-taught; the topics I have never forgotten and breeze through are the things I had to beat my head across the keyboard to complete. The nuances of virtual machines and creating realistic labs have at times seemed impossible, your videos are great because you don't leave important content to the imagination. Thanks for not trying to edit yourself into looking perfect... you are already the most talented and humble security guru I know. Hope to see these videos for years to come.
I can't be the only one who thinks listening to John is relaxing along with very educational,
you ever get stressed, throw a John vid on and you calm and learn :D
I am relatively new to active directory and powershell empire and I am preparing for OSCP, this just came at the right time !
main thing with AD attacks is to get a username (sometimes you will need username + hash or pass) when you get it, network is almost yours
@@plushplush7635 thanks for the note !
thx for taking time to go through the "boring" processes too! Some channels seem to just skip that stuff. Oh and also, should've made your username Nighthawk. Nighthawk sounds cool af.
I use Active Directory every day and work and never really learned what all goes on in the background. I think I'll give this a shot! thanks for the video!
Hey John, thank you, I just started my internship at Snyk!
Don't know if I coulda done that without you, so thank you!
Congratulations, man!!!
Please do more!!!!
Been around here for a little while now and I thought I'd just say a big thank you! I recently secured a new job as an IT Admin. Its only a stepping stone for some experience but its thanks to a lot of your videos that I managed to get there. Just thought the feedback would be nice to hear on your end. Keep making great content, it goes a long way man
This is an absolute important 1st steps that I personnaly appreciate, it's not boring at all. Thank you very much.
Not boring at all John,
Just please keep up with the consistency :).
For VirtualBox, I also added a "BypassUEFICheck" to get Windows 11 to work. I originally tried checking "Enable EFI (special OSes only)", but it went into an endless boot cycle after it installed. There was probably a workaround for doing it that way, but oh well.
Thanks for a great walk-through video, John. I found you through Chuck’s channel and look forward to learning more from you both. It was great to have a reminder of what to do and some of the challenges when setting up VMs. Great tips as well :)
This should be helpful, I started the Udemy course on Active Diectory and the Microsoft Learn unit this morning. I've used Linux exclusively for so long I hardly know anything about Microsoft anymore. Just by coincidence a John Hammond video pops up on that very topic? Spooky! lol
It's super interesting what all you can do with AD, even as someone who didn't get super deep into the AD side of things in my years as a system admin. I did a lot of surface level work, and that alone was still awesome.
Now that I'm learning the security side, the number of vulnerabilities and exploits that are open through things that are pretty common misconfigurations, or like in the case of IPv6, just on by default. Good luck on the learning!
Yes, this was just happening to me. I was having a Kerberos error and this man shows up. Ima need my phone to stop listening to me. Lol
hey can you share the course youre taking? IM interested in learning about AD too.
Microsoft Learn has some good learning resources.
Haven't worked with Active Directory for a long time. Thanks for the refresher 😀
Please continue this series! You explain things so clearly and I love watching these videos. Especially the “boring” stuff, it’s all great!! Thank u
Not boring at all, very informative.
I always learn stuff from you man….even on the most basic of topics. All the wasted hours…was clueless to that template cloning feature in VMWare. Great content as always Mr. H!
Thanks John! I've been wanting to set up my own AD for ages! Thanks for the videos!
we need more of this series !!
hello what topics do i need before moving to Active directory
Ready for all the series!!
I've been looking into this lately and was actually googling how to set up an AD lab since I've had more and more exposure to it through help desk/work. As someone new to cyber and trying to get more into the industry this couldn't have come at a better time!
its not booring its really cool thq for these type on content lots of love
@John - There's an easier method. Go to Options => Access Control => Encrypt Drive , Then add TMP in the hardware tab.
I've been wondering what Active Directory is. Always forgets to look it up. Glad ur video came out talking about it.
I actually appreciate this walk through. Always good for a refresher!!
Great video, John. I am working my way through the videos. Love your content.
I literally just built my lab too! thanks for the vid john!
"...incase you ever refer back to it later which... you probably will" hit different as I was refering back to this later
I was getting an error on the server but will be looking into the issue. Thank you for these videos!!!!
finally AD stuff, subscribed. Keep em coming. if you are on a budget you can use Hyper-V inside Windows 10 feature only requires turning ON, versions supported PRO, EDU, ENTR.
Please keep doing videos like this. It helps a lot. Thank you.
Great video John! I definitely appreciate this content. Also the short debug to get things going. It really showcases your awesome abilities. Thank you!!
Oh my john! I was waiting for AD series of yours for days and months and. Now it's here. Thank you. This might help me to prep for PNPT and CRTP
same bro
Active Directory, love this topic! I am very curious how this series continues 😍
This is exactly what we needed! Virtual labs with John! Super excited for the rest of the series
This makes me happy!!!!!! 😀😀😀😀
Love it!! Thanks John 🙌👑
I didnt know that little trick with clone and snapshot, that's cool, I sweat a little bit with bypass but finally succeed, thanks
Awesome video John - I was looking to build out my own environment. Thanks!
Great video John.I will be joining you soon.
I'm adding "Twinker" to my vocabulary
hello what topics do i need before moving to Active directory
snyk will take our furture job
I went to all the trouble of setting this up John, I do hope that there is a follow-up video on why we did this!!
Awesome Video! I have a windows server class this semester so ill be a few steps ahead!
That’s great. Thank you John. Always helpful content! 🙏
Great video. You can add a TPM module in VMWare if you encrypt the disk.
Really cool ! Let's see some Windows stuff ! I don't know much about it so thank you John !!
very interesting in your PC details, it works so fast...
And out of the wild you saved my day! 🙂
Super helpful; thanks!! Subscribed.
just a FYI. The domain controller John made is really over provisioned. For our smaller clients with about 100 users and 150 computer objects in the environment we get away with 2 vcpu and 4 GB ram and 50 GB disk in a server core install. if you want a gui then i would suggest a 8 gb install. And of course: create at least 2 domain controllers in a production environment.
For core server 25 30GB is enough with ADDS, including extra drive for Active Directory.
The best way for redundancy and higher resources we should look to scale it horizontaly instead verticaly, create more machines for the same task, instead increasing the resources of a single machine.
If you have a single file server with 1tb disk 8gb ram and 4cpus, if you have a downtime on a file server it could be bad for the ORG, if you split the file servers with DFS, 2 VMs with 500gb disk 4gb ram and 2cpus is better, still have a downtime for some people but not for the entire company.
And now if you have 4 file servers 2 of them being a copy from the other 2 that we have split, the downtime is minimal, here we waste some resources, but redundancy is good.
Great, just found this. Just what I’ve been looking for
This looks like it'll be helpful! I really need to automate the process of my lab build (From GPO's to user/machine creation) because the number of times I mess something up and then go "Ugh, I need to redo all of this" is too damn high.
I don't need to set speed to 2x in your videos :D Anyway always amazing content.
PC looks like a beast, NASA class
Thanks John I can try to get to into it but I see I will thank the help knowledge is good
i suggest having different light setup, when u make a direct shot on ur face, monitor light really covers ur one eye
John windows 11 has vms already made by Microsoft. So you can just download the vm for the virtual environment you are using. I know it works great with virtualbox
Thanks
"...turning off every semblance of Cortana." Just as god intended.
For the TPM you could of downloaded the Windows 11 for VMWare. They have a download for VM's.
Hmm... won't you get into Trouble because all of the cloned VMs will have the same machine SID? Will you do a sysprep on the clones?
Man has never heard of hydration kit, nice video for a more manual approach tho
more of these please!
The amount of memory john gave to a single virtual machine is the total what I have 😂
How am I supposed to make an AD lab now 🤧.
Hey John!! You should make a new setup tour video...love your videos btw💖
Very good. Learning new things :)
great content as always
Thanks for teaching the basics, and taking the time to explain in simple terms what you are doing.
What desktop are you running your vm's on as last time I saw your set up it was a dell xps 15 laptop?
I gotta know where you got that t-shirt. I love it, and definitely wanna buy one. Please?
🔥🔥
I wonder why you don't have an ESXi server? Maybe because I have been doing ESX since ver 3 and am a VCP so maybe that is just easier for me. But I like running my home lab on a separate machine if nothing more than I have it on cheap mechanical drives and not expensive SSD that is on my notebook. I even have my Kali attack machine on ESXi. You can even get the community version of Veeam for backup of the VMs so you can backup your non disposable VMs. As I think about it you can pretty much do everything you need to on vmware workstation including isolating the VM for doing things like malware analysis. So maybe it is just a preference I have.
Hello John , Could you please share which Windows 1 Version are you using? When i configurate my VM Win 11 It asks for COmputer name on my vm, when in your configuration there is not this step. Also when i tart the new PS session i receive an error Access Denied. And i think this could be linked. Thank you for your help! Amazing Channel!
After creating a new virtual machine, go into settings -> options -> Access Control (create password). Now go to the tab (Hardware) and add the TPM module. :)
Is this VMWare Workstation procedure only?
@@PoringPoring951 After creating a new virtual machine, go into settings -> options -> Access Control (create password). Now go to the tab (Hardware) and add the TPM module. :)
Can you tell us or a do a video about your computer since it seems to be very powerful?
Great
hey, you can add TPM into VM's devices config, that saves alot of time
Great video. But curious, are you learning French? You said "demain" earlier in the vid. Lol.
Thank you for sharing.
I have one question.
You are creating many virtual machines, what are the specs of the base machine?
Hi! Maybe you should've sysprepped the image before converting it to a template?
For learning Active Directory/Azure Active Directory what Resources would you recommended?
Thank you @John, can you please share us where we can get the ISOs
7:05 Walmart is down man
Following along, and the password change for server caught me out. You need to use 'down' to move to the confirm prompt, not 'enter'.
You can just add a TPM module in VMWare and it'll work
Hey John. Nice Video But why can't you use docker on windows instead of spinning two virtual machine.
Active Directory services will not work within a Docker container, as far as I know.
@@_JohnHammond ohh i didn't know that. Thanks for replying 😃
What would be the best alternative to VMware Pro? I know VirtualBox is popular but is there something you would recommend?
To take a snapshot do I need to buy a VMware workstation pro? Or any alternatives?
I downloaded a Win11 iso from the Microsoft website and I was wondering what version is needed? Can I use home and try to link it to the DC?
“Nothing can stop Cortana”
Anonymous
Popen with shell = True in production code lmao
Desktop specs John?
Not mine bypassed like you did in this video
I done same process but when I reboot it it get same error
if you say don't reboot it than I am not getting any option after regedit changes