Lab Details: Active Directory Domain Services

Project Overview

Objective: Design, implement, and manage a complete AD DS environment to practice core IT administration and helpdesk tasks.

Tech Stack:

Windows Server 2025
Windows 11 Pro VMs
Oracle VirtualBox
PowerShell

1. Infrastructure & Network Topology

The lab is deployed in an isolated virtual network environment using Hyper-V. The Domain Controller serves as the central router, DNS, and DHCP server for client machines.

🌐

Internet / WAN

➔

🔀

Virtual Network Switch

Hyper-V Internal

➔

🖥️

AD Domain Controller

DC: 192.168.10.10

➔

💻

Client Workstation

Client: DHCP

Figure 1.1: Active Directory Lab Network Topology Diagram

2. User, OU, & Group Management

Structured Organizational Units (OUs) were created for distinct departments (IT, Sales, HR). PowerShell scripts were executed to automate bulk user creation from CSV files, applying standardized naming conventions and password policies.

Active Directory Users and Computers Console Overview

Figure 2.1: Active Directory Users and Computers (ADUC) Organizational Unit Hierarchy

Sample PowerShell Script: Bulk User Creation

Import-Module ActiveDirectory

$Users = Import-Csv "C:\Scripts\NewUsers.csv"

foreach ($User in $Users) {
    New-ADUser `
        -Name $User.Name `
        -GivenName $User.FirstName `
        -Surname $User.LastName `
        -UserPrincipalName $User.UPN `
        -Path "OU=Employees,DC=lab,DC=local" `
        -AccountPassword (ConvertTo-SecureString "P@ssword123!" -AsPlainText -Force) `
        -Enabled $true
}

3. Group Policy & Troubleshooting

Configured Group Policy Objects (GPOs) to enforce security baselines, including wallpaper branding, drive mapping, and disabling local administrative privileges. Troubleshooting was performed using standard CLI tools such as gpupdate /force and gpresult /r.