Virtual Labs

Hands-on guided labs where you type real PowerShell commands into a simulated Active Directory environment. Learn by doing — no infrastructure required.

8Labs

42Interactive Steps

89 minTotal Duration

Kerberos Authentication

Interactive visual protocol explorer

Learn how Kerberos authentication works through an interactive visual game — follow TGTs, service tickets, and mutual authentication in action.

IntermediateInteractive Game~15 min

Exploring the Forest

Discover AD structure with PowerShell

Learn how Active Directory organizes resources by using PowerShell cmdlets to explore a forest, domain, and domain controllers in the contoso.com environment.

Beginner6 steps~10 min

Users & Groups

Discover accounts and group memberships

Enumerate user accounts, inspect their properties, and explore security groups and membership in the contoso.com Active Directory environment.

Beginner6 steps~12 min

OUs & Computers

Navigate the OU tree and find machines

Explore the Organizational Unit hierarchy and discover computer accounts — from domain controllers and file servers to end-user workstations in the contoso.com environment.

Beginner4 steps~8 min

Security Reconnaissance

Map privilege and identify risk

Perform a complete security reconnaissance of the contoso.com environment — identify privileged groups, enumerate their members, discover service accounts, and assess the attack surface.

Advanced7 steps~15 min

FSMO Roles & Sites

Locate role holders and site topology

Understand the five FSMO roles that govern AD operations, identify which domain controllers hold them, and explore the site topology that controls replication in contoso.com.

Intermediate5 steps~12 min

Group Scope & Delegation

Understand Global, Universal, and DomainLocal groups

Learn how group scope affects access boundaries, explore the IGDLA nesting strategy, discover delegated administration via DomainLocal groups, and find stale group memberships in contoso.com.

Intermediate6 steps~14 min

Complete Domain Audit

Full assessment combining every technique

Perform a comprehensive audit of the contoso.com domain — map the forest, enumerate every object class, assess privileged access, check account hygiene, and compile a security posture report.

Advanced8 steps~18 min

100% client-side. All labs run entirely in your browser against a simulated Active Directory environment. No servers, no infrastructure, no risk. Your progress is saved automatically.