Phase 1 Validation Checklist

Use this document to verify the first deployment milestone.

Network validation

• HQ-FW01 can reach the Internet
• Lab VLAN gateways respond to ping from allowed networks
• Workstations network receives DHCP lease
• Servers network has static IPs documented
• DNS forwarding works through approved resolver
• Inter-VLAN access follows firewall policy

Active Directory validation

• corp.gntech.lab forest exists
• corp.gntech.lab domain exists
• HQ-DC01 is a domain controller
• DNS zone corp.gntech.lab exists
• SRV records exist
• dcdiag passes critical tests
• repadmin /replsummary has no failures

DHCP validation

• DHCP server is authorized in AD
• Workstation scope exists
• DNS option points to HQ-DC01
• Gateway option points to OPNsense
• Test client receives expected lease

Client validation

• HQ-W11-001 can resolve corp.gntech.lab
• HQ-W11-001 joins the domain
• Domain user can sign in
• Group Policy applies successfully
• Time sync works

Management validation

• HQ-MGMT01 can administer HQ-DC01
• RSAT tools open successfully
• PowerShell remoting plan is documented
• RDP is limited to management network or VPN path