Windows Lab V1 Plan
Lab V1 is scoped to one domain controller, one Windows workstation, private administration and reproducible OU, group and user setup.
Overview
The first Windows lab build is deliberately small. It should prove graphical administration, Active Directory basics and PowerShell repeatability without creating a fragile or public management environment.
Problem
A broad Microsoft lab can sprawl quickly. Lab V1 needs to be narrow enough to build and verify, but complete enough to produce real portfolio evidence.
Constraints
- DC01 and WIN11-01 must run on approved separate compute or an approved cloud slice.
- Management access must stay private.
- Synthetic users must be importable and repeatable.
- At least one GPO must be applied and verified.
- Screenshots and outputs must be sanitized before publication.
Approach
Define the minimum useful environment: one Windows Server domain controller, one domain-joined Windows 11 workstation, a simple OU structure, role and access groups, synthetic user import and one baseline GPO check.
Key Decisions
Build a two-machine core first.
A domain controller and one workstation are enough to validate domain join, login, GPO application and administrative workflows.
- Start with a larger multi-server enterprise simulation.
- Use only cloud identity and skip on-prem AD.
Use PowerShell scripts with dry-run behavior where practical.
Repeatability is the portfolio value. Scripts need to show intent and reduce rebuild friction.
- Do everything manually through graphical tools.
- Jump directly to Terraform or full infrastructure automation.
Publish evidence only after verification.
The public portfolio should distinguish implemented work from planned work. Planned items stay marked as ongoing.
- Publish a marketing-style roadmap as completed work.
- Hide all planned work until the lab is fully finished.
Tech Stack
- Windows Server
- Active Directory Domain Services
- DNS
- Windows 11
- Group Policy
- PowerShell
Result & Impact
- 1Target domain controllers
- 1Target workstations
- 10+Initial synthetic users
- 0Public management services
The plan creates a focused path to credible Microsoft administration evidence without overbuilding the first lab.
Learnings
- Small labs are easier to verify and rebuild.
- A published case study should include both graphical and scripted proof.
- The first build should optimize for evidence quality, not infrastructure size.
Planned Verification
Lab V1 is complete only when DC01 provides AD DS/DNS, WIN11-01 joins the domain, a synthetic user logs in, OU/group/user setup is recreated from PowerShell and one GPO is applied and verified.