Status
ISOLATED LAB
Phase
03_INITIAL_ACCESS
Egress
BLOCKED
?
Create Snapshot
Resume Session
APPRENTICESHIP // W1
AD Foundations
Stand up the isolated network, DC01, DNS, and the first admin account.
Set Current
Objectives
01
Build the isolated vSwitch — no NAT, no bridge to the home LAN.
02
Install Windows Server on DC01 and promote to first DC of lab.local.
03
Configure DC01 as the authoritative DNS for the forest root.
04
Create a break-glass admin and a delegated day-to-day admin.
Hosts in play
DC01.LAB
LINUX01
Checklist
Isolated network created and verified: DC01 cannot ping the internet.
AD DS role installed with Install-WindowsFeature AD-Domain-Services.
Promoted with Install-ADDSForest -DomainName lab.local.
Reverse-lookup zone created for 10.10.10.0/24.
Snapshot: dc01-clean-forest.