To demonstrate the privilege escalation in later chapters, we will create a normal user with domain user privilege and a domain administrator user with full privileges.
To create a normal user on domain, run the following command in the command line on our Domain Controller:
net user normaluser Passw0rd12 /add /domain
To create a domain administrator account, the following commands will create a user as admin and add this user to the domain admins group:
net user admin Passw0rd123 /add /domain
net group "domain admins" admin /add /domain
To validate these users are created, you can use the domain controller by simply running net user from the command line and you should be able to see the users, as shown in the following screenshot: