Active Directory

Delegating AD Admin tasks to non-Admin accounts

Published September 17, 2007 |

Designing a distributed/international Active Directory is certainly the most important piece of a successful AD implementation. One of the issues that should be dealt with is whether you want to allow other people to be Enterprise/Domain Admin or not. If you ask me : it’s not a good idea. You should restrict those rights to […]

Posted in 001_Security, Active Directory, Windows Server | Tagged Active Directory, active-directory-2008-r2-non-administrator-access-to-security-event-log, allow-non-admin-users-to-create-active-directory-accounts, authorize, check-event-logs-on-dc-delegation, delegate-dhcp-administration-2008, delegate-read-only-access-to-the-security-event-log-on-domain-controllers, delegate-security-rights-to-non-domain-admin, delegate-wins-administration, delegated-rights-wins, delegation, dhcp, list-authorization-dhcp-2008, metasploit-exploiting-windows-server-2003-adding-an-administrative-account, netservices, sddl, security descriptor, the-specified-servers-are-already-present-in-the-directory-service-windows-2008-r2, wins-admin-rights, wins-delegate-permissions-to-read

How to restore a Windows 2003 DC using ASR and VMWare

Published September 14, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

The following procedure should work for any type of hardware, but I’ve used VMWare (so this procedure is also valid if you want to convert a physical Domain Controller to VMWare). Additionally, the procedure works for Windows 2003 server, but also for Windows XP (professional) Prerequisites : ASR backup .bkf file and the ASR floppy […]

Posted in Active Directory, Virtualization, Windows Server | Tagged 2003, Active Directory, apipa, apipa-address, ASR, asr-setup-could-not-detect-a-floppy-drive-on-your-machine-windows-2003, automated system recovery, bkfrestorescript, DC, how-to-restore-a-windows-2003-dc-using-asr-and-vmware, konvert-windows-asr-backup-to-vmware, naming-information-cannot-be-located-after-restore, ntbackup, restore, the-sysvol-and-netlogon-shares-are-missing-after-you-restore-a-domain-controller-from-backup, vmware, vmware-attache-bfk-file, vmware-converter-windows-server-2003-restore, windows, windows-2003-asr-procedure

AD 2003 DC Restore Technique using VMWare (without having to grant local DC/Domain Admin rights)

Published September 12, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

In certain distributed AD scenario’s, Domain Admins group membership or local DC admin privileges are restricted to certain people only. This is a good thing to do, but it requires you to think about certain issues before they happen. One of these issues is backup and restore. Yes, you can schedule a system state backup […]

Posted in Active Directory, Virtualization, Windows Server | Tagged 2003, Active Directory, ad, bkf-to-vm, bkf-to-vmware, converting-dc-2003-to-vmware, dc-vmware-recover, domain-controller-vm-snapshot-fix-restore-mode, hacking-active-directory-restore-mode-vm, import-bkf-file-into-vmware, ntds-dit-restore-file-vm, problems-with-restored-vmware-dc, restore, restore-dc-to-vm, restore-vm-domain-controller, restoring-a-domain-controller-to-virtual-machine, vmware, vmware-recover-domain-controller, vmware-reinstall-drivers-windows-ntbackup-restore, vmware-server-2003-f8-directory-restore-mode

Restoring 2003 AD Objects using Windows 2008 Server

Published July 14, 2007 |

By Peter Van Eeckhoutte (corelanc0d3r)

Anyone managing an Active Directory knows about the administrative troubles and work that can be caused when an object (such as a user) gets deleted. The admin needs to either restore the object, and then manually fill out the attributes (such as password, group membership and so on), or restore a backup of the ntds.dit […]

Posted in Active Directory, Windows Server | Tagged 2003, 2008, Active Directory, active-directory-recovery-2003-auf-2008, can-i-restore-2003-ad-backup-in-2008, esentutl-p-for-ntds-technet, how-to-restore-active-directory-2003-from-ntbackup-to-2008, recover-win-2003-ad-on-win2008, restauration-ad-2003-vers-2008, restore, restore-2008-system-state-to-2003-server, restore-active-directory-2008-from-2003-backup, restore-ad-from-2003-system-state-to-2008-server, restore-server-2003-ad-to-2008, restore-to-alternate-location-access-ntds-dit, restore-user-obiect-from-ntdsdit, restore-windows-2003-group-policy-into-windows-2008, server, where-is-the-ntds-dit-in-an-alternate-location-restore, win-2008-recover-ad-with-files

Corelan Cybersecurity Research

:: Knowledge is not an object, it's a flow ::

How to restore a Windows 2003 DC using ASR and VMWare

AD 2003 DC Restore Technique using VMWare (without having to grant local DC/Domain Admin rights)

Restoring 2003 AD Objects using Windows 2008 Server

Corelan Training

Donate

Corelan Team Merchandise

Corelan on Slack

Actions

Categories

Hi there!

We have good news for you!