git404hub

what is full-ad-domain-lab fr?

jamonygr/full-ad-domain-lab — explained in plain English

Analysis updated 2026-05-18

13PowerShellAudience · ops devopsComplexity · 4/5LicenseSetup · hard

tl;dr

A Terraform project that automatically builds a realistic, low-cost Active Directory lab in Azure, complete with domain controllers, sample users, and test infrastructure, for learning and testing.

vibe map

mindmap
  root((AD Domain Lab))
    What it does
      Deploys AD in Azure
      Hub and spoke network
      Sample users and GPOs
      Validation scripts
    Tech stack
      Terraform
      PowerShell
      Azure
      Active Directory
    Use cases
      AD practice lab
      Certification prep
      Infra pattern testing
    Audience
      IT admins
      DevOps engineers
      Students

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Practice setting up and administering Active Directory Domain Services without physical hardware.

VIBE 2

Test Group Policy objects, file and print sharing, and certificate authority setups in a disposable lab.

VIBE 3

Prepare for certifications or interviews that require hands-on AD and Azure networking experience.

VIBE 4

Validate Terraform-based infrastructure changes against a realistic hub-and-spoke network before using the pattern elsewhere.

what's the stack?

TerraformPowerShellAzureActive Directory

how it stacks up fr

jamonygr/full-ad-domain-labophircloud/fast-kubernetesypyik0669/ctf-codex
Stars131313
LanguagePowerShellPowerShellPowerShell
Setup difficultyhardmoderatemoderate
Complexity4/52/53/5
Audienceops devopsdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · hard time til it works · 1h+

Requires an Azure subscription, Azure CLI login, and Terraform installed, deploying and destroying VMs incurs cloud costs.

Permissive MIT license, use freely for any purpose including commercial use, as long as you keep the copyright notice.

in plain english

Full AD Domain Lab is a Terraform based project that builds a realistic Windows Active Directory environment inside Azure, meant for learning and testing rather than production use. Active Directory is the system many companies use to manage user accounts, computers, and permissions across a network, and this project lets someone practice setting one up in the cloud without needing physical servers. The lab creates a hub and spoke network layout in Azure, meaning one central management network connects out to separate smaller networks for identity, servers, clients, and security tools. By default it spins up four virtual machines: two domain controllers that handle directory services and DNS, one server that bundles together file sharing, printing, a certificate authority, and other common Windows services, and one admin workstation loaded with the management tools needed to control the domain. None of the virtual machines get public internet addresses, so access goes through Azure's private Bastion service instead. Once deployed, the lab automatically creates a sample company structure inside Active Directory, including organizational units, test user accounts, security groups, and group policy objects covering things like firewall rules and audit settings. Users can choose between deployment profiles ranging from a minimal, cost conscious four machine setup to larger configurations that add optional Windows and Linux client machines or a dedicated security and logging host. The project includes PowerShell scripts to deploy, validate, start, stop, and tear down the lab, plus a validation script that checks the network, DNS, and Active Directory health after deployment. It also ships a GitHub Actions pipeline that checks Terraform formatting, runs policy and security scans, and supports controlled apply and destroy operations. The documentation includes a GitHub Wiki with diagrams explaining the network layout and what gets installed. This tool is aimed at people who already have some familiarity with Active Directory, Azure, and Terraform and want a repeatable practice environment.

prompts (copy fr)

prompt 1
Walk me through deploying the cheap-lab profile of full-ad-domain-lab with Terraform and the provided PowerShell scripts.
prompt 2
Explain the hub-and-spoke network topology this lab creates and how the identity, server, and client spokes connect.
prompt 3
What Active Directory objects, users, and group policies does this lab create by default, and what are they for?
prompt 4
How do I safely tear down the full-ad-domain-lab environment in Azure to stop being charged?

Frequently asked questions

what is full-ad-domain-lab fr?

A Terraform project that automatically builds a realistic, low-cost Active Directory lab in Azure, complete with domain controllers, sample users, and test infrastructure, for learning and testing.

What language is full-ad-domain-lab written in?

Mainly PowerShell. The stack also includes Terraform, PowerShell, Azure.

What license does full-ad-domain-lab use?

Permissive MIT license, use freely for any purpose including commercial use, as long as you keep the copyright notice.

How hard is full-ad-domain-lab to set up?

Setup difficulty is rated hard, with roughly 1h+ to a first successful run.

Who is full-ad-domain-lab for?

Mainly ops devops.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.