I have put together some thoughts on conducting a penetration test on a windows active directory.
Currently this article focus on these 2 scenarios:-
1. A pentester is allowed to plug his laptop into the target network.
2. A pentester is not allowed to plug his laptop and only has access to a standard workstation.
You can read it as a ".doc" file here and as a pdf here.
PS: I will do a better job with editing a word document in the next version of this document.