Lab 3 – Windows Server Deployment & Domain Setup

In this lab, you will deploy a Windows Server VM on the isolated Lab LAN (vmbr10), configure static addressing, install Active Directory Domain Services, and promote the server to a domain controller. This forms the identity backbone for all future labs.

• Outcome 1: Windows Server VM deployed on vmbr10.
• Outcome 2: Static IP assigned (10.10.10.x).
• Outcome 3: AD DS installed and domain created.
• Outcome 4: DNS configured and validated.

• DL3.1: Windows Server VM installed and reachable.
• DL3.2: Static IP assigned (10.10.10.10 recommended).
• DL3.3: Domain created (e.g., homelab.local).
• DL3.4: DNS functional and authoritative.
• DL3.5: Domain admin account created.

1. Download Windows Server 2019 or 2022 ISO from Microsoft Evaluation Center.
2. In Proxmox, go to local → ISO Images → Upload.
3. Upload the ISO.

1. Click Create VM.
2. Assign:
   • Name: DC01
   • CPU: 2–4 vCPUs
   • RAM: 4–8 GB
   • Disk: 60–80 GB
3. Under Network, attach NIC to vmbr10 (Lab LAN).
4. Finish creation and start the VM.

1. Open the VM console.
2. Install Windows Server with Desktop Experience.
3. Set the local Administrator password.

1. Open Network & Internet Settings.
2. Set:
   • IP: 10.10.10.10
   • Mask: 255.255.255.0
   • Gateway: 10.10.10.1 (OPNsense LAN)
   • DNS: 10.10.10.10 (self, after promotion)

1. Open Server Manager.
2. Click Add Roles and Features.
3. Select Active Directory Domain Services.
4. Install the role.

1. In Server Manager, click the yellow flag → Promote this server to a domain controller.
2. Select Add a new forest.
3. Enter domain name: homelab.local
4. Set DSRM password.
5. Accept defaults and install.
6. Server will reboot automatically.

1. Log in using: HOMELAB\\Administrator
2. Open PowerShell and run:

   dcdiag /v

3. Verify DNS service is running.
4. Ensure the server’s DNS is set to itself (10.10.10.10).

• Identity: How AD DS provides authentication and authorization.
• Networking: Why domain controllers require static IPs and DNS self‑reference.
• Security: How identity becomes the backbone of blue‑team operations.

Your homelab now has a fully functional domain controller. In Week 4, you will deploy a Windows 10 client and join it to the domain.