Building a Vulnerable Active Directory Lab With Claude AI

Summary

A red-team lab tutorial uses an AI-generated PowerShell script to introduce Active Directory weaknesses, troubleshoots user-creation errors, and joins a Windows client to the domain.

Key points

• The presenter reviews an AI-generated script before running it to create users and deliberately weaken the lab domain.
• The intended weaknesses include weak passwords, passwords in account descriptions, disabled SMB signing and LDAP channel binding, and accounts configured for Kerberos roasting.
• Initial user creation failed because of password-policy requirements; the presenter revised the script to apply the policy before creating users.
• Repeated runs produced duplicate-account warnings, but the presenter reported that the script ultimately completed with some imperfections.
• The presenter configured DNS and joined a Windows client to the lab domain for subsequent testing.