Skip to content

Phase 2 Plan — Administration

Goal

Establish a controlled administration model for the lab before adding more services.

Scope

Phase 2 includes:

  • HQ-MGMT01 as the main administration workstation
  • RSAT tools
  • PowerShell 7
  • Windows Terminal
  • Visual Studio Code
  • Git
  • Windows Admin Center planning
  • PowerShell Remoting baseline
  • Administrative account separation
  • Initial privileged access workflow

Why this phase matters

A common mistake in small labs is to administer everything directly from the domain controller or from a normal client. In an enterprise model, administration should be controlled, documented and separated from daily use.

Completion criteria

Phase 2 is complete when:

  • HQ-MGMT01 can manage HQ-DC01
  • RSAT tools work
  • PowerShell 7 is installed
  • PowerShell Remoting is tested
  • Admin accounts are created and documented
  • No direct Internet-exposed RDP is used