Lab 4 – Windows Client Deployment & Domain Join

This lab extends your homelab’s identity infrastructure by adding a Windows 10 client to the domain. You’ll configure the VM, verify DHCP and DNS resolution through OPNsense and DC01, and confirm successful domain join and policy inheritance.

• Outcome 1: Windows 10 VM deployed on vmbr10.
• Outcome 2: DHCP and DNS verified via OPNsense and DC01.
• Outcome 3: Client joined to homelab.local.
• Outcome 4: Group Policy and authentication validated.

• DL4.1: Windows 10 VM installed and reachable.
• DL4.2: DHCP lease obtained from OPNsense.
• DL4.3: DNS resolution confirmed via DC01.
• DL4.4: Domain join successful.
• DL4.5: Group Policy applied and verified.

1. Download the latest Windows 10 ISO from Microsoft.
2. In Proxmox, go to local → ISO Images → Upload.
3. Upload the ISO for use in VM creation.

1. Click Create VM.
2. Assign:
   • Name: WIN10‑LAB
   • CPU: 2 vCPUs
   • RAM: 4 GB
   • Disk: 40 GB
3. Attach NIC to vmbr10 (Lab LAN).
4. Finish creation and start the VM.

1. Open the VM console and boot from the ISO.
2. Install Windows 10 Pro.
3. Set a local Administrator password.

1. Open PowerShell and run:

   ipconfig /all

2. Confirm:
   • IP address → 10.10.10.x (from OPNsense DHCP).
   • Gateway → 10.10.10.1.
   • DNS → 10.10.10.10 (DC01).
3. Test DNS:

   nslookup dc01.homelab.local

4. Ping DC01 → should succeed.

1. Open System Properties → Computer Name → Change.
2. Select Domain and enter: homelab.local
3. When prompted, enter domain credentials: HOMELAB\\Administrator and password.
4. Restart the VM.
5. Log in using domain credentials.

1. Log in using a domain account (e.g., HOMELAB\\Administrator).
2. Open PowerShell and run:

   gpresult /r

3. Confirm that domain policies are applied.
4. Open System Properties → Remote Settings and verify that domain users can be added to Remote Desktop Users.
5. Test authentication:
   • Lock the workstation and log in again using domain credentials.
   • Ensure successful authentication via DC01.

• Identity: How endpoints authenticate against a domain controller.
• Networking: How DHCP and DNS coordinate across OPNsense and DC01.
• Security: How Group Policy enforces configuration and access control.

Your homelab now includes a functioning Windows 10 client joined to the homelab.local domain. In Week 5, you’ll begin implementing baseline hardening and endpoint monitoring.