Windows & Linux · Active Directory Domain with Group Policies

Building an Active Directory Domain with Group Policies

Setting up a Windows Server 2016 domain using Oracle VirtualBox, configure DNS/DHCP, deploy AD DS, join a client, apply Group Policies, and manage AD/GP with PowerShell.

View this project on GitHub

Project Overview

This lab demonstrates core Windows domain administration by installing Windows Server 2016 (Oracle VirtualBox), configuring Active Directory and Group Policy in a safe test environment, and then managing AD and GPOs with PowerShell.

Active Directory

Active Directory (AD) is Microsoft's directory service for centrally managing users, computers, and resources in a Windows network. A Domain Controller validates credentials, enforces policy, and provides secure access to shared resources.

  • Authenticate users and authorize access.
  • Assign permissions and apply security policies at scale.
  • Organize objects (users, groups, devices) in a domain hierarchy.

Whether a small office or large enterprise, AD is the backbone for identity, access, and centralized management.

Group Policy

Group Policy centrally manages user and computer settings across the domain with the Group Policy Management Console (GPMC). Policies link to Organizational Units (OUs) and apply at boot/logon to ensure consistent, secure configurations.

  • Enforce password complexity and security baselines
  • Restrict Control Panel / Task Manager
  • Map network drives automatically
  • Configure desktop environments
  • Deploy software and scripts at startup/logon

Active Directory Objects

AD is composed of objects—each with attributes—stored in a hierarchical database for organization, management, and security.

  • User – identity with credentials and permissions
  • Computer – a domain-joined workstation/server
  • Group – collections for simplified access control
  • Organizational Unit (OU) – container for grouping and delegation
  • Shared resources – printers, file shares, apps

Objects are uniquely identified by a Distinguished Name (DN) and can have Group Policies applied via their OU structure.

Lab Modules

Microsoft, Active Directory, Windows, Windows Server, PowerShell, and other Microsoft products and services mentioned herein are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are the property of their respective owners.

← Back to Home