sudo apt update sudo apt upgrade -y sudo apt install samba krb5-user krb5-config winbind libpam-winbind libnss-winbind -y When asked for Kerberos realm, enter your desired domain name (e.g., LAB.LOCAL ). sudo mv /etc/samba/smb.conf /etc/samba/smb.conf.backup Step 4: Provision the Active Directory Domain Run the following command to create a new domain. Replace LAB.LOCAL with your domain name and W11DC with your server name.
Windows 11 (Pro, Enterprise, or Education) cannot run a full-fledged Domain Controller for a production environment using the traditional "Active Directory Domain Services (AD DS)" role in the same way Windows Server does. However, you can install and configure Active Directory on Windows 11 for development, lab, testing, or learning purposes using lightweight tools or by setting up a virtualized environment.
sudo nano /etc/krb5.conf Ensure it looks like this (adjust realm):
