Build identity. Prove control.
Create an isolated Active Directory lab, automate test accounts, apply least-privilege policy, and document exactly what you validated.
A small directory with a defensible story.
This is a local learning environment—not a production domain and not a credential or badge program. Use virtual machines you control, synthetic identities, and a private network. Never put real passwords or account data in a public repository.
One domain. Clear boundaries.
Build a Windows Server evaluation VM as a domain controller, one test client, an Employees OU, and separate standard-user and admin roles. Document the virtual network, recovery snapshot, and where privileged accounts are used.
Least privilege by design.
Create a handful of synthetic users, group-based access, and one test GPO. Use a unique lab secret entered interactively; do not paste a shared password into scripts or screenshots.
Four phases. Four proofs.
Isolate
Create the VMs on a private virtual network and record CPU, RAM, and recovery snapshots.
Configure
Install AD DS, create a lab domain and OU, then separate admin and standard accounts.
Automate
Use PowerShell to create synthetic users from a small CSV; prompt for a lab password securely.
Validate
Test sign-in and policy as a standard user, then document a negative test and cleanup.
What the reviewer should see.
- Topology diagram and lab-only scope
- Sanitized PowerShell script; no embedded secret
- OU, groups, and synthetic users visible
- Before/after evidence for one GPO
- Standard-user and admin test results
- Recovery and teardown notes
Portfolio package
Publish a README with the goal, architecture, key decisions, redacted screenshots, tests, and limitations. Include the script, but omit passwords, private identifiers, and VM images.
Interview prompt
Why did you assign access through groups? How did you prove the GPO affected only the intended users? What would change for production identity governance?
Explain the access decision.
Present what you built, what failed, how you verified it, and what you would improve.