Windows Server Active Directory Lab

Project Overview
This lab documents the design and deployment of an enterprise-style Windows Server infrastructure. My goal was to build a foundation for centralized authentication and secure network segmentation.
While the lab structure mainly follows Josh Madakor’s Active Directory video, I decided to use Hyper-V to deepen my knowledge with windows-native virtualization.

Phase 1: Environment & Network Topology
The environment was built on a Windows 11 host using Hyper-V. I set up the Windows Server VM with two network interfaces to simulate a real-world enterprise set up.
• External Interface: Used NAT (Network Address Translation) to provide the server with internet access for certain updated and service downloads.
• Internal Interface: A dedicated virtual switch for isolated domain communications and client IP assignment. Other clients aside from the DC would be on the internal NIC.

Phase 2: Domain Controller Promotion
Before installing roles, I ensured the server met enterprise standards by configuring a static IP, setting up DNS, and renaming the system.
• Active Directory: Installed AD DS and promoted the server to a Domain Controller.
• Forest Construction: Created a new forest and domain to act as the central authority.
• DNS Integration: Integrated DNS services during promotion to handle name resolution and domain authentication.

Phase 3: Infrastructure Services
To increase the lab's realism and functionality, I deployed two critical services:
1. RRAS (Routing and Remote Access): Implemented to allow internal clients to reach the internet through the server while staying isolated from the host machine.
2. DHCP: Configured a scope to dynamically assign IP addresses to all incoming client machines within the domain.

Phase 4: Validation & Future Use
I validated the environment through directory inspection and organizational unit (OU) verification. This lab now serves as my production-ready foundation for future projects, including:
• User onboarding/offboarding automation.
• Group Policy Object (GPO) management.
• Security monitoring and log analysis.