Same name, different accounts ↗
Switch between the WS01 and IYELABS accounts. Explain the difference between a name and a SID.
ACTIVE DIRECTORY / BEGINNER ROUTE
Your first session.
First understand accounts, then the machines’ jobs, then the directory tree. The content is free; no lab setup is needed to begin. Finish a lesson and try its practice before continuing.
The jobs of three machines ↗
WS01 requests, DC01 issues a ticket, FS01 decides resource access. Separate their jobs.
Meet the directory tree ↗
Locate forest, domain and OU in the tree. Why does an OU name grant no access?
What comes next?
Connect the end-to-end file-share journey in01.04, then follow the catalogue into Windows security foundations. Prior knowledge of SIDs, tokens or Kerberos is not assumed.
01.04 →Already know the foundations? A mechanism tour
If you can explain SIDs, access tokens and client/server roles, compare the Kerberos ticket flow in06.02 with resource access in05.02. This is an alternative for readers who already know the foundations.