jamonygr/full-ad-domain-lab — explained in plain English
Analysis updated 2026-05-18
Practice setting up and administering Active Directory Domain Services without physical hardware.
Test Group Policy objects, file and print sharing, and certificate authority setups in a disposable lab.
Prepare for certifications or interviews that require hands-on AD and Azure networking experience.
Validate Terraform-based infrastructure changes against a realistic hub-and-spoke network before using the pattern elsewhere.
| jamonygr/full-ad-domain-lab | ophircloud/fast-kubernetes | ypyik0669/ctf-codex | |
|---|---|---|---|
| Stars | 13 | 13 | 13 |
| Language | PowerShell | PowerShell | PowerShell |
| Setup difficulty | hard | moderate | moderate |
| Complexity | 4/5 | 2/5 | 3/5 |
| Audience | ops devops | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires an Azure subscription, Azure CLI login, and Terraform installed, deploying and destroying VMs incurs cloud costs.
Full AD Domain Lab is a Terraform based project that builds a realistic Windows Active Directory environment inside Azure, meant for learning and testing rather than production use. Active Directory is the system many companies use to manage user accounts, computers, and permissions across a network, and this project lets someone practice setting one up in the cloud without needing physical servers. The lab creates a hub and spoke network layout in Azure, meaning one central management network connects out to separate smaller networks for identity, servers, clients, and security tools. By default it spins up four virtual machines: two domain controllers that handle directory services and DNS, one server that bundles together file sharing, printing, a certificate authority, and other common Windows services, and one admin workstation loaded with the management tools needed to control the domain. None of the virtual machines get public internet addresses, so access goes through Azure's private Bastion service instead. Once deployed, the lab automatically creates a sample company structure inside Active Directory, including organizational units, test user accounts, security groups, and group policy objects covering things like firewall rules and audit settings. Users can choose between deployment profiles ranging from a minimal, cost conscious four machine setup to larger configurations that add optional Windows and Linux client machines or a dedicated security and logging host. The project includes PowerShell scripts to deploy, validate, start, stop, and tear down the lab, plus a validation script that checks the network, DNS, and Active Directory health after deployment. It also ships a GitHub Actions pipeline that checks Terraform formatting, runs policy and security scans, and supports controlled apply and destroy operations. The documentation includes a GitHub Wiki with diagrams explaining the network layout and what gets installed. This tool is aimed at people who already have some familiarity with Active Directory, Azure, and Terraform and want a repeatable practice environment.
A Terraform project that automatically builds a realistic, low-cost Active Directory lab in Azure, complete with domain controllers, sample users, and test infrastructure, for learning and testing.
Mainly PowerShell. The stack also includes Terraform, PowerShell, Azure.
Permissive MIT license, use freely for any purpose including commercial use, as long as you keep the copyright notice.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
double-check against the repo, no cap.