Interactive PowerShell toolkit to initialize a Windows Server end-to-end: AD DS promotion, AGDLP structure, hardening GPOs (ANSSI/NIST), file shares and DHCP/WSUS/RDS roles.

Lab walkthrough: building a departmental shared folder structure, creating AGDLP-style security groups, and locking down access with NTFS and share permissions.

Enterprise Active Directory RBAC implementation using AGDLP, Organizational Units, Group Policy, delegated administration, and least-privilege access control.