How to Learn Active Directory from Scratch Using Windows Server 2022 and VMware Workstation Pro
Learning Active Directory (AD) from scratch is best done through hands-on practice, and the ideal way to begin is by building a small lab using VMware Workstation Pro with Windows Server 2022 as your server. The first step is to install VMware Workstation Pro on your host machine and create a new virtual machine, selecting “Microsoft Windows” as the guest operating system and choosing Windows Server 2022 (64-bit).
Allocate sufficient resources—at least 2 CPU cores, 4–8 GB of RAM, and 60 GB of disk space—to ensure smooth performance. Once the VM is created, attach the Windows Server 2022 ISO file and complete the installation, choosing the “Desktop Experience” option so you have a graphical interface suitable for beginners.
After installation, configure basic settings such as setting a strong Administrator password, renaming the server to something meaningful like DC01, and assigning a static IP address, which is critical because domain controllers must not rely on DHCP. Next, update Windows Server fully and familiarize yourself with Server Manager, as this will be your main control panel.
The next major step is installing the Active Directory Domain Services (AD DS) role through Server Manager. During this process, you are not yet creating a domain; you are only adding the capability to do so. After the role installation completes, promote the server to a domain controller by creating a new forest, which is recommended for beginners.
Choose a simple domain name such as lab.local, configure the Directory Services Restore Mode (DSRM) password, and allow the server to reboot. Once rebooted, log in using the domain administrator account and verify that Active Directory Users and Computers (ADUC), DNS Manager, and Group Policy Management tools are available.
At this stage, learning focuses on understanding core AD concepts such as domains, forests, organizational units (OUs), users, computers, and groups. Begin by creating OUs to logically organize objects, then create test user accounts and security groups to understand identity and access management.
The next step is learning Group Policy by creating and linking Group Policy Objects (GPOs) to OUs to enforce settings like password policies, desktop restrictions, or login messages. To deepen your understanding, add a second virtual machine running Windows 10 or Windows 11, join it to the domain, and test user logins, policy application, and permissions.
As you progress, explore DNS integration, since Active Directory heavily depends on DNS for authentication and service discovery. You should also practice common administrative tasks such as resetting passwords, unlocking accounts, managing group memberships, and monitoring event logs.
Finally, reinforce your learning by breaking and fixing things safely—disable accounts, misconfigure policies, then troubleshoot—because real-world Active Directory administration is largely about problem-solving. By building and experimenting with this Windows Server 2022 lab in VMware Workstation Pro, you gain practical, job-ready Active Directory skills in a controlled, risk-free environment.