Azure-Based Windows Server Active Directory Lab

Project Overview

This repository serves as a detailed walkthrough for constructing a Windows Server and Active Directory lab in Microsoft Azure. It covers virtual machine provisioning, domain controller promotion, and core administration tasks to mirror real-world enterprise operations.

Table of Contents

Part 1: Initial Server Setup & Configuration

View Part 1 steps

Deploy a Windows Server 2022 virtual machine in Microsoft Azure, connect via Azure Bastion, configure a static private IP, and install the Active Directory Domain Services, DNS, and DHCP roles to prepare the environment for promotion.

Part 2: Promoting to a Domain Controller

View Part 2 steps

Promote the server to a Domain Controller, create a new Active Directory forest, and build the foundational Organizational Unit (OU) structure used to manage future users, groups, and delegated administration.

Part 3: Managing Active Directory Users & Groups

View Part 3 steps

Create and manage user accounts and security groups, demonstrate password resets, and move objects between OUs to reinforce day-to-day identity administration workflows.

Part 4: Joining a Client PC to the Domain

View Part 4 steps

Provision a second Azure VM, configure DNS to locate the domain, and join the device to Active Directory to validate end-to-end connectivity and domain trust.

Summary

  • Built a complete Windows Server 2022 environment from the ground up within Microsoft Azure, configuring AD DS, DNS, and DHCP.
  • Established a functional domain, promoted a server to a Domain Controller, and managed users, groups, OUs, and GPOs.

Tools, Skills, and Concepts Demonstrated

Cloud & Virtualization

  • Microsoft Azure for provisioning and managing cloud resources through the Azure portal.
  • Azure Virtual Machines for deploying and configuring Windows Server 2022 workloads.
  • Cloud cost management concepts, including deallocating and deleting resources when lab work is complete.

Windows Server & Active Directory

  • Windows Server 2022 installation, configuration, and role management.
  • Active Directory Domain Services promotion and forest creation.
  • Active Directory Users and Computers for managing users, groups, and OUs.
  • User and group lifecycle tasks including password resets, account states, and security groups.
  • Designing OU structures and applying Group Policy Objects.

Networking & Security

  • Azure virtual networking fundamentals, including VNets and network interfaces.
  • Static IP configuration for domain-critical infrastructure.
  • Azure Bastion for secure remote access without public RDP exposure.
  • DNS and DHCP role configuration inside a Windows Server domain.
View full documentation on GitHub