> For the complete documentation index, see [llms.txt](https://jeanpeyremesmots.gitbook.io/home/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jeanpeyremesmots.gitbook.io/home/jpmm-en/system-administration/active-directory/decouverte-et-mise-en-place.md).

# Introduction and setup

My first steps on Active Directory :)

When I started, I knew nothing about Active Directory. I knew it was the directory and authentication service (LDAP/Kerberos) used to manage Windows machines in companies, but I had never actually worked with it.

So I reached out on Discord to a sysadmin working in the public sector, who kindly designed a lab for me covering the basics of setting up an Active Directory server.

The goal was to build a server for a company called "MesMots" (a nod to my username :D), with user accounts organized into groups. Each group would get specific permissions on folders hosted on an SMB share. Here was the scenario:

"***MesMots is a fictional company specializing in teaching literature and writing. It has 24 employees spread across four distinct departments. This lab builds on that structure to practice identity and access management on Windows Server 2019.***"

The lab objectives were:

* Create and organize the Active Directory (OUs, Groups, Users)
* Configure an SMB share with a network drive mapped on X:
* Apply granular NTFS permissions per department
* Understand segregation of access rights in a company
* Implement Windows Server security best practices

The environment runs on **Windows Server 2019**, chosen because it is still widely deployed in companies at the time of writing. The server is configured as a domain controller, handling users, groups, organizational units and file shares.

The work had to follow this organization chart:

<figure><img src="https://1542616339-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fq0kLRqEluZvLRXK1LDcp%2Fuploads%2Fgit-blob-2495df05e8d43d09c2f4789945c21fbb6f574e5c%2Fimage%20(71).png?alt=media" alt=""><figcaption></figcaption></figure>

Without further ado, let's get started!