Create an Admin and Normal User Account in AD (Azure)

This tutorial outlines the implementation of on-premises Active Directory and creating an admin and users.

Environments and Technologies Used

• Microsoft Azure (Virtual Machines/Compute)
• Remote Desktop
• Active Directory Domain Services
• PowerShell

Operating Systems Used

• Windows Server 2022
• Windows 10 (21H2)

High-Level Deployment and Configuration Steps

• In Active Directory Users and Computers, create an Organizatinal Unit(OU) called "_EMPLOYEES"
• Create a new OU named “_ADMINS”
• Create a new employee named “Jane Doe” (same password) with the username of “jane_admin”
• Add jane_admin to the “Domain Admins” Security Group
• Log out/close the Remote Desktop connection to DC-1 and log back in as “cesarsdomain.com\jane_admin”
• User jane_admin as your admin account from now on

Configuration Steps

Step 1

After you have remote into the Windows Server VM, open up the Server Manager and click on Tools and then Active Directory Users and Computers.

Step 2

Next we will create Organazation Units. In plain speak, they are similar to Folders. There are much more use cases for this but this is just an example. We are going to create two OU. One named "_EMPLOYEES" and the other named "_ADMINS". We can do this by right clicking on the domain name you created > New > Organizational Unit.

Step 3

Create a new user in the OU "_ADMINS" by clicking on the the OU and right clicking the panel to the right. Next go to New > User.

Step 4

We need to make Jane Doe an admin. Just because we created Jane's account in the OU named "_ADMINS" does not automatically give this user admin rights. We need to right click janes name > Properties Member Of > Add ... In the Select Group window type in "Domain" and click the "Check Names" button and select "Domain Admins" group and apply the changes.

Step 5

Go ahead and log off this user. We will need to go back to Azure and get the Public IP address for the DC-1 VM and login with the new credentials and permissions. In this example I will be using username as : cesarsdomain.com\jane_admin and the password. To check we can go to the Command Prompt and type in the command "whoami" to verify we are in the jane_admin user.