Project Overview
This repository serves as a detailed walkthrough for constructing a Windows Server and Active Directory lab in Microsoft Azure. It covers virtual machine provisioning, domain controller promotion, and core administration tasks to mirror real-world enterprise operations.
Table of Contents
Part 1: Initial Server Setup & Configuration
View Part 1 stepsDeploy a Windows Server 2022 virtual machine in Microsoft Azure, connect via Azure Bastion, configure a static private IP, and install the Active Directory Domain Services, DNS, and DHCP roles to prepare the environment for promotion.
Part 2: Promoting to a Domain Controller
View Part 2 stepsPromote the server to a Domain Controller, create a new Active Directory forest, and build the foundational Organizational Unit (OU) structure used to manage future users, groups, and delegated administration.
Part 3: Managing Active Directory Users & Groups
View Part 3 stepsCreate and manage user accounts and security groups, demonstrate password resets, and move objects between OUs to reinforce day-to-day identity administration workflows.
Part 4: Joining a Client PC to the Domain
View Part 4 stepsProvision a second Azure VM, configure DNS to locate the domain, and join the device to Active Directory to validate end-to-end connectivity and domain trust.
Summary
- Built a complete Windows Server 2022 environment from the ground up within Microsoft Azure, configuring AD DS, DNS, and DHCP.
- Established a functional domain, promoted a server to a Domain Controller, and managed users, groups, OUs, and GPOs.
Tools, Skills, and Concepts Demonstrated
Cloud & Virtualization
- Microsoft Azure for provisioning and managing cloud resources through the Azure portal.
- Azure Virtual Machines for deploying and configuring Windows Server 2022 workloads.
- Cloud cost management concepts, including deallocating and deleting resources when lab work is complete.
Windows Server & Active Directory
- Windows Server 2022 installation, configuration, and role management.
- Active Directory Domain Services promotion and forest creation.
- Active Directory Users and Computers for managing users, groups, and OUs.
- User and group lifecycle tasks including password resets, account states, and security groups.
- Designing OU structures and applying Group Policy Objects.
Networking & Security
- Azure virtual networking fundamentals, including VNets and network interfaces.
- Static IP configuration for domain-critical infrastructure.
- Azure Bastion for secure remote access without public RDP exposure.
- DNS and DHCP role configuration inside a Windows Server domain.