Preparing the skills and lab environment before building your first domain controller: Windows Server administration basics, DNS and networking, PowerShell, software and hardware specifications, virtual lab planning, and choosing a domain name.

Welcome to the Learn Active Directory series! This series will take you through mastering Active Directory — Microsoft's directory service for identity management, authentication, and authorization in enterprise Windows networks — from core concepts to production-grade administration. There are 31 sequential episodes in total, so reading each episode in order will build up your mastery layer by layer.
Before creating your first domain controller, you need to prepare two things: foundational skills and a lab environment. Why do prerequisites matter? Imagine you want to become a ship's captain: a certificate alone is not enough without a map, a compass, and a harbor to practice in. Episode 0 is your map, compass, and harbor before you set sail into the Active Directory seas.
| Skill | Why It Matters for AD |
|---|---|
| Windows Server administration basics | AD lives on Windows Server; you should understand services, event logs, and user management there |
| DNS | AD relies entirely on DNS to locate domain controllers |
| Basic networking (TCP/IP, subnet, DHCP) | Static IPs, subnetting for sites, and VM-to-VM connectivity |
| Understand domain vs workgroup | Differentiates a centralized environment from standalone computers |
| Basic PowerShell | Almost all AD administration can be automated through PowerShell |
| LDAP fundamentals | AD is an LDAP-based directory service; helpful but not required |
| Kerberos concepts | AD's default authentication protocol; helpful but not required |
| Group Policy basics | Centralized configuration management; helpful but not required |
Don't worry if some of these still feel abstract — all of them will be put into practice in later episodes. The key in episode 0 is making sure you are comfortable with the foundations, especially DNS and PowerShell, because both will be used in nearly every episode.
DNS is the network's "phone book". When a computer wants to join a domain, it asks DNS: where is the nearest domain controller? If DNS is wrong, clients will never find a domain controller — even if AD itself is running perfectly. At minimum, understand how forward lookup, A records, and SRV records work; these three concepts will be covered in episode 4.
For networking, master the concepts of IP address, subnet mask, and default gateway. Later in the lab, each VM will be assigned a static IP on the same subnet so they can communicate with each other. Try checking your machine's network configuration with Get-NetIPAddress or ipconfig to get comfortable reading the output.
Active Directory has a complete GUI, but modern administration almost always uses PowerShell — especially for automation and consistency. You don't need to memorize many commands yet; just understand three things: how to run the console as administrator, the concept of cmdlets with their verb-noun naming pattern, and the habit of reading help via Get-Help. If you have never touched PowerShell before, read the Learn PowerShell series on this blog before diving into AD.
| Tool | Role |
|---|---|
| Windows Server 2016/2019/2022 | OS for domain controllers and member servers (2022 is most recommended) |
| Windows 10/11 | Clients that will join the domain |
| VirtualBox / Hyper-V / VMware | Virtualization platform for a multi-VM lab |
| Remote Server Administration Tools (RSAT) | Toolset for managing AD remotely from an admin machine |
| Active Directory Administrative Center (ADAC) | Modern GUI for managing users, groups, and computers |
| Active Directory Users and Computers (ADUC) | Classic GUI for administering AD objects |
| Active Directory Sites and Services | Manages physical topology and replication |
| Active Directory Domains and Trusts | Manages trust between domains or forests |
| DNS Manager | Manages DNS zones and records |
| Group Policy Management Console (GPMC) | Manages group policy settings |
| PowerShell 5.1+ or 7+ | Script-based automation and administration |
RSAT deserves a special mention. In production, you won't always be sitting in front of a domain controller; with RSAT, tools like ADUC and GPMC can be installed on a regular Windows 10/11 machine and manage AD remotely. In the lab, these tools can be installed on a separate admin machine.
Active Directory isn't resource-hungry, but this lab needs several VMs running at the same time. Pay attention to how resources are allocated on the host:
| VM Role | RAM | Storage | Cores |
|---|---|---|---|
| Domain controller | 4 GB minimum, 8 GB more comfortable | 60 GB and up | 2 |
| Member server | 2 GB and up | 40 GB and up | 1-2 |
| Windows 10/11 client | 2 GB and up | 40 GB and up | 1-2 |
Add up the VM requirements: with one DC, one member server, and one client, total RAM is around 10-12 GB. That's why a host with 16 GB RAM or more is highly recommended. All VMs must be able to reach each other — use an internal network or host-only network so VMs can communicate without being freely exposed to the internet.
Before creating VMs, settle on three things to keep the whole series consistent: hostname, static IP, and domain name. This planning is like drawing up a blueprint before building a house — cheap up front, expensive if you have to tear it down and redo it.
DC01 for the domain controller, FS01 for the file server, WIN11 for the client.192.168.10.10/24 for DC01, with gateway 192.168.10.1.ad.example.com. Avoid .local names because they risk conflicting with mDNS, and avoid public TLDs without a subdomain.When a server is freshly installed, configure the static IP and hostname right away. Important note: point the DNS server at itself, because this server will later become the AD DNS server.
New-NetIPAddress -InterfaceAlias "Ethernet" -IPAddress 192.168.10.10 -PrefixLength 24 -DefaultGateway 192.168.10.1
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses 192.168.10.10
Rename-Computer -NewName "DC01" -RestartImportant
Choose your internal domain name carefully. The name ad.example.com is the pattern Microsoft recommends: a subdomain of a domain you actually control, not an arbitrary name. Replace example.com with a domain of your own when practicing this material.
For reference, here is the lab blueprint that will be used throughout this series:
| VM | Hostname | IP Address | Role |
|---|---|---|---|
| DC01 | DC01 | 192.168.10.10 | Domain controller + DNS |
| FS01 | FS01 | 192.168.10.20 | Member server (file server) |
| WIN11 | WIN11 | 192.168.10.30 | Domain-joined client |
In this lab we use VirtualBox as an example — similar steps apply to Hyper-V and VMware. Create a new VM with the specifications above, mount the Windows Server ISO, complete the OS installation, then apply the IP and hostname configuration as shown in the earlier example. Once the VM is working, take a snapshot right away: a snapshot is a time machine that will save you whenever a later experiment goes sideways.
In episode 0 you have set the foundation for the entire series: Windows Server administration basics, DNS, networking, and PowerShell skills; the software and hardware specifications for the lab; and a lab blueprint with hostnames, static IPs, and a domain name.
Key takeaways:
ad.example.com domain name are safe planning choices.In the next episode, we'll cover history, background, and why the world needs Active Directory — from the flat, fragile Windows NT domains of 1993, the birth of Active Directory in Windows 2000, its evolution through Windows Server 2022 and Azure AD, and the real-world problems AD solves in the enterprise. Make sure your lab is ready, because the Learn Active Directory journey is just beginning!