What a unique box it is! For me was actually an hard box, given my lack of knowledge of AD
User: basic enumeration + the use of a specific tool will lead you to the first flag.
Root: As I state before, the uniqueness of the box is that you’re never required a shell. Anyway the root part is the combination of several AD techniques (hope not to spoilt, but I used impackets tools).
Thanks for the box!