Phase 1 Validation

Firewall

• HQ-FW01 is online
• WAN has Internet connectivity
• VLAN gateways are configured
• Firewall default deny is active
• Required AD traffic is allowed

Domain Controller

• HQ-DC01 has static IP 172.20.20.10
• AD DS is installed
• DNS is installed
• dcdiag passes
• repadmin /replsummary shows no failures

DNS

• corp.gntech.lab resolves
• HQ-DC01.corp.gntech.lab resolves
• SRV records resolve
• Reverse lookup zone exists

DHCP

• DHCP is authorized
• Workstations scope exists
• DHCP relay works if needed
• Client receives expected lease

Client

• HQ-W11-001 joins domain
• Domain user can log in
• Group Policy applies
• Time sync works

Management

• HQ-MGMT01 can administer AD
• RSAT installed
• No RDP is exposed directly to Internet