TechNova Enterprise Infrastructure

Production-Grade Windows Server 2019 Enterprise Infrastructure
Built with Active Directory, PowerShell, Ansible, Vagrant, and Infrastructure as Code.

---

📖 Overview

TechNova Enterprise Infrastructure is a production-style Microsoft Windows Server 2019 infrastructure project designed to demonstrate enterprise system administration, infrastructure automation, cybersecurity, and Infrastructure as Code (IaC) best practices.

Unlike traditional homelab projects, this repository follows real enterprise design principles with professional documentation, automation, security hardening, validation procedures, and operational guides.

This project is intended to simulate the IT infrastructure of a medium-sized enterprise and showcase skills expected from a:

• Windows Server Administrator
• Microsoft Infrastructure Engineer
• System Administrator
• DevOps Engineer
• Infrastructure Engineer
• Cybersecurity Engineer

---

🎯 Project Objectives

• Design a production-style enterprise infrastructure
• Deploy using Infrastructure as Code
• Automate server configuration
• Implement enterprise security best practices
• Document every configuration
• Create reusable PowerShell automation
• Configure Windows using Ansible
• Validate infrastructure health automatically

---

🚀 Quick Navigation

Category	Link
📐 Enterprise Architecture	Open
🌐 Network Design	Open
🏢 Active Directory	Open
🔐 Security Hardening	Open
⚙️ PowerShell Automation	Open
🤖 Ansible Automation	Open
📖 Operations Manual	Open
🛠 Troubleshooting	Open

---

🏢 Enterprise Architecture

The environment simulates a company with approximately 250 employees.

The infrastructure includes:

• Two Active Directory Forests
• Forest Trust Relationship
• Centralized Authentication
• DNS
• DHCP
• Group Policy
• File Services
• IIS
• WSUS
• Windows Deployment Services
• RRAS VPN
• Network Policy Server (RADIUS)
• PowerShell Automation
• Ansible Automation
• Infrastructure as Code

Enterprise Architecture Diagram

---

🖥 Virtual Infrastructure

Machine	Operating System	Roles
DC01	Windows Server 2019	Active Directory, DNS, DHCP, WSUS
DC02	Windows Server 2019	Active Directory, DNS, WDS
SRV01	Windows Server 2019	File Server, IIS, RRAS VPN, NPS
CLIENT01	Windows 11	Administration & Testing

---

⚙ Technology Stack

Microsoft Technologies

• Windows Server 2019
• Windows 11
• Active Directory Domain Services
• DNS
• DHCP
• Group Policy
• File Services
• NTFS Permissions
• IIS
• WSUS
• Windows Deployment Services
• RRAS VPN
• Network Policy Server (NPS)

Automation

• PowerShell
• PowerShell DSC
• Ansible
• WinRM
• Vagrant

DevOps

• Git
• GitHub
• Markdown
• Draw.io

---

✨ Features

• Enterprise Active Directory Design
• Multi-Forest Architecture
• Forest Trust Configuration
• Organizational Units
• Security Groups
• User Management
• Password Policies
• Group Policy Management
• DNS Infrastructure
• DHCP Management
• File Server with NTFS Permissions
• IIS Web Server
• Windows Update Services
• Windows Deployment Services
• Secure VPN Access
• RADIUS Authentication
• PowerShell Automation
• Infrastructure Validation
• Health Monitoring
• Security Hardening
• Enterprise Documentation

---

📁 Repository Structure

technova-enterprise-infrastructure/

├── assets/
│   └── images/
│
├── docs/
│   ├── architecture/
│   ├── active-directory/
│   ├── dns/
│   ├── dhcp/
│   ├── gpo/
│   ├── file-services/
│   ├── iis/
│   ├── wsus/
│   ├── wds/
│   ├── vpn/
│   ├── nps/
│   ├── security/
│   ├── operations/
│   ├── troubleshooting/
│   └── testing/
│
├── automation/
│   ├── powershell/
│   ├── ansible/
│   └── vagrant/
│
├── diagrams/
│
├── screenshots/
│
├── reports/
│
├── scripts/
│
├── backup/
│
├── testing/
│
├── CHANGELOG.md
├── CONTRIBUTING.md
├── LICENSE
└── README.md

---

🚀 Deployment Workflow

Clone Repository
        │
        ▼
Vagrant Provisioning
        │
        ▼
PowerShell Bootstrap
        │
        ▼
Enable WinRM
        │
        ▼
Ansible Configuration
        │
        ▼
PowerShell Automation
        │
        ▼
Validation Scripts
        │
        ▼
Health Reports

---

📚 Documentation

The project documentation is organized into dedicated chapters that cover the complete lifecycle of designing, deploying, securing, automating, and maintaining a Microsoft enterprise infrastructure.

Chapter	Description	Status
Enterprise Architecture	Business requirements, infrastructure overview, VM design, security principles and architecture decisions.	✅
Network Design	Enterprise network topology, IP addressing, routing, VLANs, DNS flow and firewall design.	🚧
Active Directory	Forests, domains, trust relationships, Organizational Units, users, groups and delegation.	🚧
DNS	DNS zones, forwarding, conditional forwarding, records and troubleshooting.	🚧
DHCP	DHCP scopes, reservations, options, failover and lease management.	🚧
Group Policy	Group Policy Objects, security baselines, software deployment and administration.	🚧
File Services	Shared folders, NTFS permissions, access-based enumeration and DFS Namespace.	🚧
IIS Web Server	IIS installation, website deployment, SSL configuration and logging.	🚧
Windows Server Update Services (WSUS)	Centralized Windows updates, synchronization, approvals and reporting.	🚧
Windows Deployment Services (WDS)	PXE boot, deployment images, unattended installation and client deployment.	🚧
VPN (RRAS)	Secure remote access, VPN configuration and routing.	🚧
Network Policy Server (NPS)	RADIUS authentication, policies and VPN integration.	🚧
PowerShell Automation	Infrastructure automation, provisioning scripts and reporting.	🚧
Ansible Automation	Windows configuration management using WinRM and Ansible roles.	🚧
Infrastructure Validation	Health checks, verification procedures and automated testing.	🚧
Security Hardening	Least privilege, LAPS, auditing, firewall, password policies and security baselines.	🚧
Backup & Disaster Recovery	Backup strategy, Active Directory recovery and disaster recovery planning.	🚧
Operations Manual	Daily administration tasks, user management, maintenance and monitoring.	🚧
Troubleshooting Guide	Common issues, diagnostics, PowerShell commands and resolutions.	🚧
Project Reports	Validation reports, inventories and infrastructure health reports.	🚧

---

📊 Infrastructure Statistics

Item	Value
Virtual Machines	4
Active Directory Forests	2
Windows Servers	3
Windows Clients	1
Server Roles	10+
PowerShell Scripts	40+ (Planned)
Ansible Roles	10+ (Planned)
Enterprise Documents	20+ (Planned)

---

📷 Screenshots

The completed project will include screenshots of:

• Active Directory
• DNS
• DHCP
• Group Policy
• IIS
• File Server
• VPN
• WSUS
• WDS
• PowerShell Automation
• Ansible Deployment
• Infrastructure Validation
• Enterprise Reports

---

🛣 Project Roadmap

Phase 1

• Repository Initialization
• Enterprise Architecture
• Network Design
• Active Directory
• DNS
• DHCP

Phase 2

• Group Policy
• File Services
• IIS
• WSUS
• WDS

Phase 3

• RRAS VPN
• NPS
• PowerShell Automation
• Ansible Automation

Phase 4

• Security Hardening
• Monitoring
• Validation
• Backup
• Disaster Recovery
• Operations Guide
• Troubleshooting Guide

---

🔒 Security

The project follows Microsoft security best practices including:

• Least Privilege
• Account Lockout Policies
• Password Policies
• Windows Firewall
• Secure RDP
• Audit Policies
• LAPS
• NTFS Permissions
• VPN Security
• Administrative Separation

---

🤝 Contributing

Contributions, suggestions, and improvements are welcome.

Please read the CONTRIBUTING.md file before submitting changes.

---

📄 License

This project is licensed under the MIT License.

See the LICENSE file for more information.

---

👨‍💻 Author

Wael Balhoudi

Master's Student — Windows Administration, Linux, Security & Cloud Computing

GitHub: https://github.com/WaelBalhoudi

LinkedIn: https://www.linkedin.com/in/wael-balhoudi-a89045275/

---

⭐ If you found this project interesting, consider starring the repository.