Active Directory Lab Project

1. Domain vs Active Directory

A Domain is a logical network structure that allows centralized management of users, computers, security policies, and resources. It enables users to log in from any domain-joined computer using the same credentials.

Active Directory (AD) is the directory service used within a Windows Domain. It stores information about users, computers, groups, organizational units, and other network objects. Active Directory provides authentication, authorization, and centralized administration.

In summary, the Domain is the network environment, while Active Directory is the service that manages and organizes the objects within that environment.

---

2. Windows Server Installation

I downloaded and installed Windows Server in a virtual machine. During installation I configured:

- Server Name: DC01
- Operating System: Windows Server
- Network Configuration: Static IP Address
- Administrator Account Configured

The server was successfully installed and updated.

---

3. Domain Controller Configuration

The Active Directory Domain Services (AD DS) role was installed through Server Manager.

The server was promoted to a Domain Controller and a new forest was created with the domain:

lab.local

After the promotion process completed, the server restarted successfully and became the primary Domain Controller.

---

4. Active Directory Structure

Using Active Directory Users and Computers (ADUC), I explored the directory structure and became familiar with:

- Users Container
- Computers Container
- Built-in Groups
- Domain Controllers Organizational Unit (OU)
- Organizational Units (OU)

This allowed centralized management of domain resources.

---

5. User and Computer Creation

I created Organizational Units to organize resources:

- IT
- HR
- Finance
- Workstations

Sample User Accounts Created:

- John Smith
- Sarah Johnson
- Michael Brown
- Emma Davis

Sample Computer Accounts:

- PC-01
- PC-02
- PC-03

These objects were placed inside their respective Organizational Units.

---

6. Security Groups

The following Security Groups were created:

- IT_Admins
- HR_Staff
- Finance_Users

Users were assigned to groups according to their department.

Example:

IT_Admins

- John Smith
- Michael Brown

HR_Staff

- Sarah Johnson

Finance_Users

- Emma Davis

This demonstrates role-based access control using Active Directory Security Groups.

---

7. Domain Joined Computers

Windows client computers were configured to join the domain:

lab.local

Joined Computers:

- PC-01
- PC-02
- PC-03

After joining the domain:

- Computers appeared in Active Directory.
- Users could log in using domain credentials.
- Centralized authentication was successfully verified.

---

8. Lab Environment Summary

Infrastructure:

- 1 Domain Controller (DC01)
- Active Directory Domain Services Installed
- DNS Configured
- Multiple Organizational Units
- Multiple Users
- Multiple Security Groups
- Multiple Domain Joined Workstations

The lab successfully demonstrated the deployment and management of a Windows Active Directory environment, including user administration, group management, and domain integration.