# Domain Controller 1
## Accounts
Most Secure Password = `P@ssw0rd`
## PC Name
First I'll be renaming my server as shown below.
## Network Settings
Its important to set a static IP for our Domain Controller.
## Active Directory Services
Next, I'll be adding the active directory domain services role on to the server.
### Promoting Server to DC
Once the active directory domain services is done installing, there'll be a prompt asking to promote the server to a Domain Controller. Let's go ahead and do that.
After a restart the domain will be populated as shown bellow. If you see something like this, you've done it correctly.
## DNSClient Server Address
Now that we have the Active Directory service up and running, we can set the correct interface which will be handling our DNS Queries.
```
Set-DnsClientServerAddress -InterfaceIndex 15 -ServerAddress 10.11.12.10
```
## Active Directory Certificate Services
Next, AD Certificate Services can be optionally added to the server for LDAP.
### Configuring Certificate Services
Similar to the case above, a prompt will request to configure the Certificate Services.
Reboot the server for changes to take place!
## Adding Users & Service Accounts
I'll be adding a couple users into the domain for the lab's purpose.
### User Accounts
#### John Hammond
```
First = John
Last = Hammond
logon = john
password = P@ssw0rd
```
#### Heath Adams
```
First = Heath
Last = Adams
logon = heath
password = P@ssw0rd
```
### Service Account
Go ahead and copy he Administrator account to create the service account.
```
First = SQL
Last = Service
logon = SQLService
password = MiP@ssw0rd!
Description = Devs pls take note: password = "MiP@ssw0rd!"
```
### Service Principal Name (SPN) setup
A service principal name (SPN) is **a unique identifier of a service instance**. SPNs are used by Kerberos authentication to associate a service instance with a service logon account. Lets go ahead and create that.
```
setspn -a 4pfsec-DC/SQLService.4pfsec.local:60111 4pfsec\SQLService
```
#### Verify SPN
Now that we have setup the SPN, lets verify that its up and running as per expectations.
```
setspn -T 4pfsec.local -Q */*
```
## SMB Share
### Create a folder
First, create a folder that you'd like to share out to your network.
```
important
```
### Create New Share
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://ad.4pfsec.com/domain-setup-4pfsec.local/domain-controller-1.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.